{"report_id":"f005bb26-919c-4091-9c45-ecd3edac7743","version":6,"status":"done","tags":[],"date":"2026-05-10T12:25:14Z","url":{"schema":"http","addr":"cestwin.com/auth/signup","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cestwin.com/404","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"title":"Cestwin: Most Popular Online Crypto Casino Based on Blockchain","dom":{"size":30314,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (25399)","md5":"cf1586a44944ef148eb0fe3cbf8aa07c","sha1":"0f52a3049c594ebdf862d7459642245de450c955","sha256":"7156dd1d58bb254286301a381edfac083a9308706302b5b7e8638b00e14bfe96","sha512":"6c588738067095c98140143f008aa92a4b8817340dda65a9fa6542134ffbb9e52c6b090a2559adb18060f568fa54431f63167dd469f6fdb1f5f3092df19e6fd3","ssdeep":"768:4o/hrLz/av/ruw5/ggvYG98BO5ur0Ki6C:T3/I7HvYG98EO7C","tlshash":"13d2197427b091dc684603f8ebefa8a4273ef1baf811894cde1d122551829eff873645","dom_hash":"domhash54d80f622df2fea352a15d9f2acfd6da","first_seen":"2026-05-10T12:25:39.814244Z","last_seen":"2026-05-10T12:25:39.814244Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cestwin.com/auth/signup","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-14T12:25:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cestwin.com","ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-06","domain_rank":0,"first_seen":"2026-05-10T12:25:31.494879Z","last_seen":"2026-05-10T12:25:31.494879Z","alert_count":98,"request_count":49,"received_data":20534979,"sent_data":22001,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/19-5bece4aba82fb776.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"499ae782218e46ba0165104a99a4ba64","sha1":"dd6335c8003db8dc40f3b6e5fd9ec389bd5679a4","sha256":"7930fcc2462bd18b8f3559392d9d610cb2a4cf2aad270fc533012c2fa8560ab7","sha512":"71885acc13827a064e0430afe760dadfaf8afacce9f7dabc324d265d126140a62d9baac56cb09e1725cfedc955eba79c0828bd9891ee524aa7d19448c1557aee","ssdeep":"12288:EW2sqZNSN87vIomx0wgH+vVWQo7AN3zoMaaql++gWuWUC4Qj8zINa8DPeo7B53zW:9NgvIh/VSUVPyzLW3fxz","tlshash":"02159459ca6602fd7f586c81ca4770698ed282136fd78afcdaba7e1447b0adf0301e51","size":936675,"data":"","first_seen":"2026-04-13T13:34:34.636004Z","last_seen":"2026-08-07T13:24:55.35765Z","times_seen":6063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/4212-38fe49b6236c7c6b.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1ee028598eb24e7427f83baa42198b2","sha1":"29ecf0ab8deb78392a4121a31e2fb63c764ce99e","sha256":"108693690d6f21f1942f276dc1e12eef8524ccb9678e1faeda902063ab3b2f0b","sha512":"71bd29cc66d0adb5ad11cba3d95baa883771712afef080e8b1f7a9c107dd9beb2404a2c43dd616aaf717ba69cfd4786e0c801ff3d88b6d201b8156124535fbd3","ssdeep":"3072:IxvuXFqhT8pi01EOUIMdda2zZ9GFOTASOeBTny//G:qvmFqh7MEOUVL1TASOeBT8e","tlshash":"ccb33b9972d0fd9d3bf3946a8c1fa40ee2795c2ed42d710462d9c83c72599c8e136bb4","size":114414,"data":"","first_seen":"2026-04-13T13:34:34.631899Z","last_seen":"2026-08-07T13:24:55.372279Z","times_seen":6063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/5917-b901ce39230b7545.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0af68275b3b3cf30d3ca8502839641d6","sha1":"0db03c86671fb7c0ce9501048ca75c4afd0a2708","sha256":"ff1b70acd57081d77822998c42f251f3c6c76a641587cadadea3fc42afbcc728","sha512":"ff4ad3b5c8976d0880336bc4a2d88b0fa995d4f574fe5980920990fd711fb723f4910c99e3348569e8adb879e03f9db9e6532923b76164be99b1edf118491069","ssdeep":"12288:DkmlKxHLIPrsjbDcvnTJmP0I8y/PEg3Ahkz1epv3BoKuW+xMQT1y5EVNy5EVIS3Q:7H","tlshash":"6e35bb4887aa42ec6f9d6d80c607744a8fd69513aed789eccbf9be101370ade1311f42","size":1150345,"data":"","first_seen":"2026-05-10T12:25:39.848654Z","last_seen":"2026-05-10T12:25:39.848654Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/6544-b0711005848a5ae1.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"39a5893ca0e9dde921d815faef0cca25","sha1":"bf860904497bd9c873fbc6c44eff66b61d990a44","sha256":"69a245030c2015ad280eedf3d0e5c896f8672d6803277ee2b15aa20e24595450","sha512":"439a73175b07db2985b9bc16ca9a6b5a029a041d3285e4c6c6e74e3749a85c41cd2db6a0999dd0aad865f389558e77a38bd1e42f36a27d3ee02a6731b9cbfc8b","ssdeep":"3072:LxF1G4zn2Qbx7Lg5H+vCWpduOhWr8BqUH9d8YFdNWRmfewJTLiAezha1h5L2iQfS:hO459yOCd8/qGwUM3qMz74SIxTrt","tlshash":"3a15321cc778b7b12fed398936490c3fd66db570d7a202566994b3fb1088ce0506abda","size":932011,"data":"","first_seen":"2026-04-13T13:34:34.701686Z","last_seen":"2026-08-07T13:24:55.361853Z","times_seen":6062,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/9338-742398fd846a71c9.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"35949001400b87164feee5e87bb4d21b","sha1":"5fca2da66ae0589889299bbfa3d213e5e04c9709","sha256":"16ed0b2c2e53f93201db0a8b5787453855e66151890115a58c93605771ee912d","sha512":"b7873b0ad7fc8671962347515c0f6555a6cf4b524b3da006d4dfd697db93634a65337b5d24c1802baf802dde2fe3e8bdb81254baf08f4f7f44f3c5355e62bd4f","ssdeep":"12288:ypzOZxRLLD3iWRSM9LAlsr1TxmBY3gM1+7Yj+fjxl:ypSZxRPFgl","tlshash":"fc35a35a408827922bb37695269bdc0fa01ef52cc743c464b791c57e26cd9c8a27bfdc","size":1139216,"data":"","first_seen":"2026-04-13T13:34:34.708599Z","last_seen":"2026-08-07T13:24:55.414225Z","times_seen":6059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/3980-010af18f0f321f6b.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ebe2885d4d5b7870215ed1d746ae08f","sha1":"ececc6607c16410aa62783cea6de95557893c3ca","sha256":"68eea241c058d3a7c5cd5eb609397e4d833059221ade7f5154e9f68da97ef40f","sha512":"a14e01fe32f03659c957c6d5c9d01cc20c71308424cf842a7d178aa207358e270a9f531acc7d37e285a34fabd655ad88256cd82143dc1828eda771bc46bdbc91","ssdeep":"12288:9Fw3/38CUqBZw5AcYk0G2KVLCfEQ4HAIrBM6k18xyBByFt:uB7KFrR2BBU","tlshash":"3cb4c60ff3e4bbad26b57666be0f537ab31c2cb9d714e81496a9f0152344ca86135bc0","size":514070,"data":"","first_seen":"2026-04-13T13:34:34.626821Z","last_seen":"2026-08-07T13:24:55.365409Z","times_seen":6064,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/3083-d0071871f85c1c39.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e8736497d50701fd7e98b6af046968f","sha1":"dbfea11666fbb04bc71187a259b4318e935577c3","sha256":"f2bf0ce31e01e02feea9a6dba28d4318ce7e060806dc0c8e3a312b86a47bf163","sha512":"27ca329911a680c2a0654f53c3acb9846e41afbe86166bc73ee90c4f71aaea53c07bd3c3fe30a058e58154e9ab721f0238fcb7d087b6cae9a0313a6cabcd3aba","ssdeep":"1536:9wnbMGYAkPeRRJ0u4fU5g1+GoDJy+N0jPkV/KtXcUN3tadBZx4fH+dMxteMSVgvM:9wnbvvg1+lhN0wBDMxOig","tlshash":"84d3961600c827b52b677b25265acc0eb61bf23dc7429924b694c43b168edd461bffec","size":140858,"data":"","first_seen":"2026-04-13T13:34:34.639501Z","last_seen":"2026-08-07T13:24:55.380844Z","times_seen":6062,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/7580-1e05813e2213c2fa.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e95d3438a4d191ec149a209f2321321c","sha1":"ad5631919f911a7b20854095d4cf3b10658d364a","sha256":"764376cf71ad9d64078ab383b8c383387c50daaebed8409ce6573c4674206551","sha512":"3a4b0fdea4b4cb0a24f7005fd2f41a3473e46b7e5206716718550f868b2249856ca610de63b4c2a8a6e6113480cff06728878f0aef293c7c300276c174579336","ssdeep":"24576:K/cpQlKxQvBIVV/7x6XomFnoMBnxBqyk5QqBQqn:K/eGGqo6YmW","tlshash":"f96539298a6502fdbf596c80ca43345a8fe296137fd789fccaba6e1447b46df0301e51","size":1451511,"data":"","first_seen":"2026-04-13T13:34:34.697666Z","last_seen":"2026-08-07T13:24:55.408126Z","times_seen":6060,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/1342-e39ae382517d6e27.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b0b6471e752a72a4a67baffa5e490d6","sha1":"b22ad340a0948c9fd128ad7703281b20d3a2f91c","sha256":"4234be7a3de7cd09bdecf233b7e03b08945e08acbfe8203227aaa856f378c39e","sha512":"77a017b0409437148709f41743bbcf186ac0f144c7b82d60f8aa9b5c383587a655f7ee6ff2e7d8d1253bda8d234f6add0b224c6dad08dde55a6b9a4a421f2f41","ssdeep":"3072:2XikgRVZiU7NiK6xkdF3GK0/NtT8aH7fwTqdypuWw+1sGKIzXBX8zY72ibkhfv06:2XNUpieiztQyz4zMV","tlshash":"7565cde8678526e5bd4cddca5940b4ac007980370dfbd1cceb2af4e740b87b746a9d26","size":1449011,"data":"","first_seen":"2026-04-13T13:34:34.691135Z","last_seen":"2026-08-07T13:24:55.403417Z","times_seen":6058,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/auth/signup","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4f58df8ef556437633bb90cc31469c4","sha1":"c1c713bb5046a54cb79a8e7537b6d7fca624fd45","sha256":"2dcb2e50c883929aebb7a64a7a22cfe2260d856a3c36a6926c082da19c552b7b","sha512":"54c8a79f5897cd198db689700c24f950ad7fe19eed815f8bfa0e47428701d8c84a1fd8f677a6f1b2a4f1443f35f2dbd19e6f456ceeebfb1c59275bb356e1a5e9","ssdeep":"","tlshash":"bfc02b041427c47b421c6f4dc02243d4e4b020bcdc492480801d181800d0c313b40cd6","size":130,"data":"","first_seen":"2025-03-25T18:26:20.414558Z","last_seen":"2026-08-07T13:33:41.538121Z","times_seen":52827,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/8648-f6bb2057c3669db8.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"69bee25a0bf500c5e3b3026aebc2fb88","sha1":"7c7a6b6875f0db490b9a2e4051c71747b40251e8","sha256":"df5ea05cee1dc21e34a7a7d5497fa04e4e378e44dc94832061c4bf7a06a28e1a","sha512":"7762d820ba43daebc7b42a6358a63ec1ed7559a0942a15231be534d5f32ac9804777dc9af0e2b50def1b9680e523fbc614b8460e943bcce5772595d0b14428f3","ssdeep":"1536:Txe2nu/m82CFnMxwZCLVfvDzQjLY69xAqBSDQpUO9flVnoO1NzpGGVitgFdAYbJF:TgUH821N89bCQpxffTRp5bNeKbsK","tlshash":"f6e3e889f191f2fca6a224a9412f444ef22e3f4ce5255410e6f8dc083a586d9bb37fd5","size":144718,"data":"","first_seen":"2026-05-10T12:25:39.843692Z","last_seen":"2026-05-10T12:25:39.843692Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/3585-80a05ac7fb1b5c22.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b00e2366e16e12ec8a5624af6ae62c65","sha1":"47f3b22bd488462a9ccf381c5cd3e7acf10075f1","sha256":"23b945c1cb5b49bd2fb18c04e02a138d81f100e8c05ca3a88626e4061252b3dc","sha512":"efb2fe28c5b98e9ca4e1584161eca49c861e21271ef69c87b7702d27215790147909e1819a5a21554029e21959ebebd7bc2b675fb02b7ff610549d477e753b7a","ssdeep":"6144:f9VGcm/FTmn65dg2/s70cs6eWBsY6EHNfm5Dlf3+FFS:ahWwKNI","tlshash":"c4845b98725060e8a28762b9552f154db33f2578e02ccd14e39ac87c7695ccce63bfda","size":376521,"data":"","first_seen":"2026-05-09T20:01:54.357909Z","last_seen":"2026-05-15T19:29:52.767487Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/9564-0cf3b4f099c86954.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1133f31f38a7764ffc9bd1b3df097e8","sha1":"d5d2b6cf4dec8e50720d6754d015bc4736f6c72e","sha256":"5aec2933ae085f9a1203fac9a6a05a2dbbb5a4e92ceb66b1124084dae588afbc","sha512":"abfc85e1473134449c3ebe247ad09931b39c01a2b43e65ed5f863b30b2d791ee25b24d9335cb778771683c3ba87d996ddbabd6668d089e932c3e8d57d92cac20","ssdeep":"1536:sAvhk/n1ED3wnpzktrXFlnEA8aqLE4++E/NL7:sAv6/n1cIzk9FlnBCLE4++E/N3","tlshash":"9d531c8cf3d4f2a927e670ba283f1c3bd12e7a34971990645794e6b42549c885233bf9","size":61557,"data":"","first_seen":"2026-04-25T11:58:25.658808Z","last_seen":"2026-08-07T13:24:55.366913Z","times_seen":6050,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/5709-11ea16574670c83d.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"46d5be64f877dafe9453e8f939a78c4f","sha1":"1a24344c597278bc4326f437a96ab7a97a937437","sha256":"e33b7fff84133db91841ad7c6ebad31e455602c46cbc08e8e44a566d64df1bed","sha512":"2bea7bb3d1736708bc9169ab035b613160fefe5e6ee9307c577e05798892d3058a221f5f19f8a354f3a41ea60ae7adbf0dc809882da7ce90e687d29d6b6634f8","ssdeep":"6144:7nRjnRoWQuV/er6qcqhJLqslkFN0bbLTYGifRh3Y:TzYXkslkFN0vLTYGi56","tlshash":"a165278c67b5a3fcf505b3f8892b58747e6a38fabb51c438c3e94d14e1510ac89698d3","size":1452075,"data":"","first_seen":"2026-04-13T13:34:34.705774Z","last_seen":"2026-05-15T19:29:52.778076Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/249-e2f3b47921777989.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"964bfa69b7641aa9564037605ae960c9","sha1":"26d96763a9332806d206639bd271d36c3c9cae6d","sha256":"4a96b91de8390a49fc640e9278fd952796b28860dcb3f6af7e5ba4efdcae2f0a","sha512":"9ec6465e89e00e1447f829c32c2bb5f6f573e4038011a513e072f06a5a7e622e9fd670cc8e572de1279f9b39afaaa373b84ba3ce74c7e8a5190eba67ab54917d","ssdeep":"3072:BF4UMvqBX6EG8q4H7GRxe8JTDUkan3busQd1yKlvRnTT/vD3Y46m+OEL4uFAQNgM:34UMCBX6tdDH/5kD3QPRuN","tlshash":"9254fb0cf7fdf3b919ec389a364d0c3bd9a83a35d3b5625249d0f3ea9444cb4016a6a1","size":281587,"data":"","first_seen":"2026-04-13T13:34:34.696278Z","last_seen":"2026-05-12T15:57:58.232217Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/3047-33c601e1350a84e4.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"65bdc7f0d8c4430b22fd779c388274a0","sha1":"84a9e7ee6daa9e2bb35e73c1b356f76684887f6b","sha256":"019b3438a2ce35573e86c831402ee205132d928b3b66f6907eb0a51044417437","sha512":"3a8652c22e773cd8442806d8473f1d8c8184ea219f38ad72f9f726bac3a633a226856a7134ed4e29bff3621caf88527d822c16673b35e4aeff5ee18c440e0ae6","ssdeep":"6144:fT+0+QXgyCRh0idHSlq9p0jy79DMHyPCij6MIVs/e5rKYfxGAaXaifqUMjuTH8NT:wrfOR1","tlshash":"8d644ac871c1f4a8929361a6903f050af23d2e2de45d9444e3a9c8d87979dcde237fb9","size":316067,"data":"","first_seen":"2026-05-10T12:25:39.836741Z","last_seen":"2026-05-12T15:57:58.209586Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/3715-25fd8c526afc029e.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b83aa58d40f72554598cb39387dc6b9","sha1":"876c697f5f701a17f8948756ea848450e5921ab0","sha256":"47d55e2b6897b5fedee6dc34b6db8cf710ac324213bed70acd4c4b76927160d4","sha512":"0514186a377b5a2b70a7bd4c1c99e6c41ac5bc7f3bf7665ff8d7239047ebd22747e768c2d929860d4cccc3b9b83e3eb0356962c279bec65445fb25109713092b","ssdeep":"1536:G8iMZecncsspNYlpAsz1jzsRr3KTArL7ml1C+Rmsh409IsH:JiQe2sTQmYm8D","tlshash":"9e73c764f1e0f6d4e1575399c92e460df12f2eacea25782cb3f5d818b7044d8622eba4","size":80593,"data":"","first_seen":"2026-04-21T01:09:36.161505Z","last_seen":"2026-05-15T19:29:52.737735Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/7262-260eb856ec86ab3e.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc5c946ea01e852079c01158915eb9ea","sha1":"5133bd0de532b10449bb08521a92ca6a1887b7eb","sha256":"4a07fe3714db1466ba3968c1de34671f62ca3d5a3e9a01c12fecbdf73f2361d7","sha512":"18a65b639abe772a19c8332cf3709c4e0213353430e032b2cd550e739db2467dfd24ad1fcb4a4ea3675c81f34215a5ffc0ffb658dbf80ff70c2382171199b96a","ssdeep":"1536:nopcljgCIsBEzrJ8i7e85k7yRck5L8Nwxg98:nWuUCIsizui7e5mckJuwxu8","tlshash":"d3730a953180f5ed17e381aac42f644ee32f5c2ce51a766463e4c9ac725d8c8e137bac","size":77603,"data":"","first_seen":"2026-04-13T13:34:34.62862Z","last_seen":"2026-08-07T13:24:55.353257Z","times_seen":6063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/9883-c825881b2c3b0fc9.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bcc8e6423662c12c5682af8dfa62a5a8","sha1":"b892e8086c047484a6e09910e1f5856e5f607bf2","sha256":"fae79308e4825e4d0f92e72cc85189405fb0c80569638bdc473eb7743bc4d4b3","sha512":"c48d27ef493b6d93cca9320dd5602a5de168d7deb5ea80dddde2daddf2b75293f15df2de435a834ad87802ad9497e8bd92c4763018a76ac0e6c897bd15689d90","ssdeep":"6144:TDWV4xt0J6T+WqV7OF8JpCXy/ABCf5iwEVQt3byQvUfV:Tr","tlshash":"6e94a829494416622b6323cd268bd80fd08af2658246c9b9f7964e7d21cfdc4e13bfdd","size":437773,"data":"","first_seen":"2026-04-13T13:34:34.692397Z","last_seen":"2026-08-07T13:24:55.352763Z","times_seen":6063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/4577-b61d38b6b034d783.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41103c0b0ac58161ba21e497c169a924","sha1":"c88e93fcd1195642c4470d4016f019ccd079aa1d","sha256":"be4819967273ae5cd6b750269b38df275e7de51ed59c459e52be1a3215abcec2","sha512":"008a7a566b759f0ad50cb551e1456f93aac047c0ae8c195c29e7a590acc5cc5a447be5e6dc17109e5de66ac7dde5a1a6055e83f64fcfc296ee418150c4664491","ssdeep":"12288:GxIYTLljXNW4D93yq3F/1hWJ24cvYkwl/eH3q0kCwI3UxrfZfM6A333xJUgHAsA/:3/cpXlKxUvBIVV/7x6XomFnoMBnxBqyg","tlshash":"8355c42d8e6641fdaf186c81ce8770658fe2c6432fd785e9dabb6d204fa158f4301e61","size":1365559,"data":"","first_seen":"2026-04-13T13:34:34.693793Z","last_seen":"2026-08-07T13:24:55.40264Z","times_seen":6062,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/3121-c908cdad06c21f15.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d26ff4d4459d3a510704c5681a213e27","sha1":"0214b8994024d0299355a44a93bdb0de186c2705","sha256":"f7ac62e46f72df4d1d6f26353e37827054ea91a1fdcdaef0af5b44d374dcb6ad","sha512":"343d3c3dd367e360ebf00dc9ed5a3b712a08fd08b78d7b2b3775669f750ddec926c6ff82e43b498154d4bc6e853f2ebe4b5b4a780f51fd0b0e8e77d48037152c","ssdeep":"6144:A+AiF7KKW6WUSoMtIn9Ghv37xQnp87m0Sw/KNSUSOYYMCI:lYaC","tlshash":"28242b497290b2e817e762a9547b282ef22f7d3cd222691477d4c87c3349dc8913af9d","size":224132,"data":"","first_seen":"2026-04-25T11:58:25.633967Z","last_seen":"2026-05-15T19:29:52.751211Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/8824-ddffb509a90576a1.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88138b1397ee14b04ead267aa44c4196","sha1":"760b927bacdf81d73a0f2084bfb3ce7a76478e63","sha256":"a2d07d31470b51490786beb8167c7fafeae5a0236cb44537c4dc8857b3c448ce","sha512":"9841fadaed80aabc013a0fdccff0b1356d14a06a2952bfc883dabd299aa5fd9a4369b504e8ac7d28f47c27573be3bb4b94b08d389d3836697c2334185931304e","ssdeep":"12288:3fB+XoxJuhu/v7uV3rIPE8zGglvb9hsm8sMQMNIYsUKwJAsTF4Xylyz+hYsUUIJM:vGgthhsnR0yF4XylryF4Xyl+","tlshash":"94a4be69da7112fdef516ac0ca177015dfe6a6936fc789e8caf6ac040bb05ce4301e91","size":492118,"data":"","first_seen":"2026-04-13T13:34:34.606306Z","last_seen":"2026-08-07T13:24:55.366451Z","times_seen":6064,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/9689-39df663debcc7932.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"95575815245fac0dd0f1a088b5673378","sha1":"b5fc9a98ebaac4eac518520eb74304a19af4c4b4","sha256":"2b609ad50f89d9da15d3da8423cab5a459bb395d18125b50ac3646d7a4a7bb24","sha512":"cce3d8d652ccceb67e5c4091294a2c837b597c36be10c62be39c860fd5418c6da27b20da4e2067ec964c7a0bb667cf3a577a7b3bdfbf5e4c013be7f66a24ee7f","ssdeep":"24576:7tPaAKapUMi69Q86f4lJay+AdFYR/QNnBKM7x5AKGE5X4iOJ:u7KwNhQx6IIiOJ","tlshash":"b665e039b224247946944086c05f290aaf72541f29c5c4ecb678fcdb5ebdece237ab74","size":1462413,"data":"","first_seen":"2026-04-13T13:34:34.700386Z","last_seen":"2026-08-07T13:24:55.408875Z","times_seen":6054,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/4310-53eb2d994601d39d.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1cf0afc09bb69320084b8de536c82c15","sha1":"b366ac3a2df29aa97110376475fc08e2b310e168","sha256":"5f6628bec7be06e9879a734589c7ccc242657acecd391f739a86d88f2597b1ee","sha512":"cb32c35ceec0ed7c3b0cbb53eef1a7754053eb228fbc9c1aff2abc56eff7aeccbac081b3fa583f2ebf3ba836f3ea808e269b380636f9fb04b3c887f425900bc3","ssdeep":"3072:PSHoE3ssKaFRWxTDF0+uoWTr/9CPxZi2rbG/r0mJo46W6E9bVWqnEbvY:wb","tlshash":"b734370cd7bdf3f51eec389e36490c3bd5a9763093a5426688d0b7eb5485cf400aa79a","size":241643,"data":"","first_seen":"2026-04-13T13:34:34.704197Z","last_seen":"2026-08-07T13:24:55.386625Z","times_seen":6063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/direct-router.bundle.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"13a7c69d00c04a9ec5af51234888a226","sha1":"b8cc29891302626c5164cf226bfe2ef3491df232","sha256":"e39c3702313d3f8f497f9c9b95362d51589d872f4d1751c75891768a6155f9af","sha512":"2de21ad1b3abf1bcc2dbb82b4f60b06cfa30391b58de3e20015dfed60579e23f287775c1522fb0c08d33364638162b20d9a801fb02ab88f7d92e95d27f74b39c","ssdeep":"3072:vqSp7BygEFCXqLkT5vd5XnTWhNIhdmkIxWjlP3/1JqobeUmMGWR042:vqSp7BZaiv/ukIxWjlP3/NmMGw6","tlshash":"b7241aa93a95f1226ab3027310df5803733d352b280d4d61a511ede9b4b845eb17bfaf","size":220065,"data":"","first_seen":"2026-05-10T12:25:39.840257Z","last_seen":"2026-05-12T15:57:58.233327Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/2366-925fc85d237b17af.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7911660cff2a47fdbc9415ace2e3188","sha1":"3ab908a0337f5ba043a079b563d3c584521ece41","sha256":"4a2741bde36436647e2ae672eb2ef1262c83541e3d13784b48cb37b165bddd8d","sha512":"e21a40e23085dd405ca6c8473453fabc4c7df8999a472fad7a94a4f26856b2d5ebbfcae375412db956a96f92cf7f630b5804e5090ac19f22eb4b7a1022c96b3b","ssdeep":"","tlshash":"54f09e9920057c387abb4c02096e8c2a287c3572be091581e707c5a0009faf85170e9a","size":467,"data":"","first_seen":"2026-04-13T13:34:34.684954Z","last_seen":"2026-08-07T13:24:55.358658Z","times_seen":6065,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/1617-516db04f21137a6a.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"24fdfcfce61be021904770b2b372ca81","sha1":"bc6a8555479c61ba37ea932d435e967aa1b28420","sha256":"d95d061529e6b787411e9de741b9946e0daf5da613c585a1c9ce261c18aa12ce","sha512":"f60ec3821ceda20e18cabb5a1a2b0f1d1e1de6d97c049c912c6ef61cb827f169ae6dfb45bba561ec96a4f5ed9454d3ca07ac3c707aa0bac224f9736c56df84a7","ssdeep":"12288:yzq3gKoizq3gKo1mTkcAA92TkVAA12TkVAAD2TkVAAF2TkVAAM2TkVAAm2TkVAAp:+","tlshash":"7a55fd4c8b6602ecab986cc0ca0770558fd586177fcb89fcdebaad145bb16ce0311e56","size":1310318,"data":"","first_seen":"2026-04-13T13:34:34.702982Z","last_seen":"2026-08-07T13:24:55.405976Z","times_seen":6062,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/7185-2ea9500f451be04e.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"16ae376f952ed97ab855e936d602146e","sha1":"f5c236dbf070df187916a5900827bb9826991dee","sha256":"1416dad5e7c1b7f9a51970d36a49c42937667a917c4abc08aa89f5ba2c013670","sha512":"0e8ad22ebdca1dc6927114b07de7c73a0ca0d2b4f081c1581a70d03378a84c83111277371ddb4299f684921b8cd8a9571e79f6583a3d1e673cc802471e33197e","ssdeep":"6144:Qb59C1szfrcWDw32B9SKUVG1DmeSafWTnp2iYEGeuMq1pVAL83IS2a46GwvHJqpG:tOdw3qEKUVG1DmtafWTp2iPO1Z9N","tlshash":"42e45d1d72c072ac17c363659a2b581ef36e596de121a804e3dac93c325ddccf13aba5","size":693960,"data":"","first_seen":"2026-05-10T12:25:39.820663Z","last_seen":"2026-05-10T12:25:39.820663Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/9796-477f833bec802edf.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3cd700563cd8e58c974d39b5117025a1","sha1":"8adb06045734081c226292a64b902365df367e22","sha256":"92c3493cdd4b2f4c088fc3c1aad125fee7a6efff6470de708bb5363e2c2b9e48","sha512":"89bd514505d7f05dc1d6d9124541bcc8aa98cb80bb21ecbf2ce07e05c4f9767ed6ff1f2ce6a99f5a994cdc9801fa416e5d37ef0bc5c046b18d4eb13df3a033db","ssdeep":"6144:cX68qDg+HzhjzH4Bs5ivB1hPYbRm0XiGwgwKZ7hmcVQoDMEFilOHIUJW3bXlB/C1:VjzH4Bs5ivB1hPYbRm0XiGwgwKZ7hmcJ","tlshash":"eb44101c8f7242edbb187c80ce4770698be586466fc784d8eafb5d244ba05ce5342f66","size":261678,"data":"","first_seen":"2026-04-13T13:34:34.615711Z","last_seen":"2026-08-07T13:24:55.369749Z","times_seen":6063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/2501-1456818fb1917ccc.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b796ef010d87f5e7fdda574639d51bcb","sha1":"e37048ff6fb3eab7b64c1249096011d2f9185255","sha256":"ff67b128ccdafcb0b368c4a9866fe0dfba31c1ed6ebbff74c69b5d78f3cbae5c","sha512":"18d41033de47491fb4ca399a30f5d4f485d3626a3595cf4f63885ac902eb52faf0b304b2d9281af2a61e64528f79088514f707648e21a72b074c401663ab6ab9","ssdeep":"1536:MIaQ+KAUl2qMG6rYVefWp+t45wvPz6h/Q9k4N:d5wvV","tlshash":"594374fd5bb009cda8ca46e67f0610ac373e51bab46d8948ed0f5538a1418e4fe27bc1","size":56944,"data":"","first_seen":"2026-05-10T12:25:39.844497Z","last_seen":"2026-06-25T11:11:41.170726Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/5358-241ccf6a9b823b44.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4447bcbe73440726cc982e5034d4f5c1","sha1":"200455addd066d5c3e87f8d94e0061b086a25f68","sha256":"8a5a0e57a37b641473d18d554549bb78b92d935fc00b7ea4f5e697c7cf7f582c","sha512":"6bd857f7243c7fd59133bde782bd49f93a96dff00bfaf2053fa2a4f2e97e70f550fb85cd857ff5c2942e0de53156de27fe5a95eaf018755a037d4cadc84bd358","ssdeep":"12288:RHJJmOl48wdByBOpQwGQWA7k3gPriavdqw:dmOl48QyBOpBXPriavkw","tlshash":"7925190ea7d473b41bda3149364e4d3fe25cb638c352d016a5d6ea7d228cce4613bb98","size":962395,"data":"","first_seen":"2026-05-02T15:30:21.386458Z","last_seen":"2026-05-12T15:57:58.239218Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/2643-f0046750557ecfce.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"22e80ddc9f6a618a74ae2024b1368d41","sha1":"92a5cb5a65b6db5e9fe377f30c867d91395fe65f","sha256":"cebfb1f5431b46b051bea9d7bb688099a15ae2d0bc9d906fad0678294dce11eb","sha512":"96d815f6d514ef47fafeed39af74b87f862781c464d29d2983b0b580da47867a08fe38b8f4cec9a32f181dc4174b981ade00e3b797cc8cdbcb48a0e7446a071f","ssdeep":"3072:lhsm2vphspSZ5qYHGKTG2Ucav/sLJ7T8Z2KxTofh5p0yEdQ8IeCp5+V0z0DLdD3K:Q3koZ5XG5sdSqfhwyEGASNBpH/","tlshash":"83440c2769c4127c2bc362569d675e4ef35ca918e215b419f3d7ca3d338c8c4b13aba8","size":276387,"data":"","first_seen":"2026-04-13T13:34:34.673947Z","last_seen":"2026-08-07T13:24:55.369279Z","times_seen":6064,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/5669-ed334c2dbb466446.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6438c3dec7c2f8d1a4393aac0a9f590","sha1":"931f6f0648b68a394c0558fbb95934a059b7756e","sha256":"435b360ed59df86f97765d5fb68e6fa87486367009d059ebb558ef68a88bea43","sha512":"d78d1e4cb985aa6e6402fc821f4abd3f7d4db574d6d5e328c6eedccd61816ae5138844a368dfd471fcd1ee62877d851efebdbc1c9c93d3dc664bdc7d90de3258","ssdeep":"12288:+3PyxSJSN87vIomx0wgH+vVUqmAStvp1H/llr9dhLR5EdNbE3aYAiLQDEmAx//pd:jNgvIh/VKdVPyzLW3fxp","tlshash":"2455521ccf9201bdae58adc1ca4770254fe286531fd789ed96bb7e204bb1a9f4301e61","size":1370944,"data":"","first_seen":"2026-04-13T13:34:34.695086Z","last_seen":"2026-08-07T13:24:55.409962Z","times_seen":6060,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/9564-0cf3b4f099c86954.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/9564-0cf3b4f099c86954.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 18103\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2FY4JIQFdviCnhAUN5oOd5nfYW8wjeiy8rtMA8BrJVF9p2Gkhe%2FsNvkSWUUzAo6lFLRP6JnHcTrNH8YdEO6XFxoV%2BgBR0TqIaTuFOW%2FHejwXQ%2Fadr%2F2e610pIsEzaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec43be745691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61557,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57043), with no line terminators","md5":"f1133f31f38a7764ffc9bd1b3df097e8","sha1":"d5d2b6cf4dec8e50720d6754d015bc4736f6c72e","sha256":"5aec2933ae085f9a1203fac9a6a05a2dbbb5a4e92ceb66b1124084dae588afbc","sha512":"abfc85e1473134449c3ebe247ad09931b39c01a2b43e65ed5f863b30b2d791ee25b24d9335cb778771683c3ba87d996ddbabd6668d089e932c3e8d57d92cac20","ssdeep":"1536:sAvhk/n1ED3wnpzktrXFlnEA8aqLE4++E/NL7:sAv6/n1cIzk9FlnBCLE4++E/N3","tlshash":"9d531c8cf3d4f2a927e670ba283f1c3bd12e7a34971990645794e6b42549c885233bf9","first_seen":"2026-04-25T11:58:25.658808Z","last_seen":"2026-08-07T13:24:55.366913Z","times_seen":6050,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/4212-38fe49b6236c7c6b.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/4212-38fe49b6236c7c6b.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 29928\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zoH4yElTf%2BwAydk5dw%2FV%2B38d8rqA3Cfb8KLir9yTPuYxmQOBlzDd1CqMlZiUOXtLeaImeSH2iKh7GMGGvpDdoFzE%2Bw0fAg0mlAX4VKC10YnjRwvQ7ydTrIygTqWwRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec43be755691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114414,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65440), with no line terminators","md5":"e1ee028598eb24e7427f83baa42198b2","sha1":"29ecf0ab8deb78392a4121a31e2fb63c764ce99e","sha256":"108693690d6f21f1942f276dc1e12eef8524ccb9678e1faeda902063ab3b2f0b","sha512":"71bd29cc66d0adb5ad11cba3d95baa883771712afef080e8b1f7a9c107dd9beb2404a2c43dd616aaf717ba69cfd4786e0c801ff3d88b6d201b8156124535fbd3","ssdeep":"3072:IxvuXFqhT8pi01EOUIMdda2zZ9GFOTASOeBTny//G:qvmFqh7MEOUVL1TASOeBT8e","tlshash":"ccb33b9972d0fd9d3bf3946a8c1fa40ee2795c2ed42d710462d9c83c72599c8e136bb4","first_seen":"2026-04-13T13:34:34.631899Z","last_seen":"2026-08-07T13:24:55.372279Z","times_seen":6063,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/css/921e3bd87719630a.css","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:49.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/css/921e3bd87719630a.css HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 544\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:49 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:49 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bU8CLz5UCchYtY9DP0XpyyQ%2FlEr1%2F2ACz9Xy5Gph0SAXOMxjZ4lE3V%2Fx2Qlf3bKSB8iNZGGKK9zYzUP2Wz7NvEur113renffEqbJYKTq%2Fe0rWiYm9bbhj%2F5WerSQMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9f98ec4d0ec15691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1338,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1338), with no line terminators","md5":"e5da625a75c35aa9ba79f0df6f158ba0","sha1":"15e59221a43bf3db52e6a8fcbdfa47d0b7e251a3","sha256":"165ae8f857be5fece896b42fbb66901b9b0933873d5b03d46631d33e017530e1","sha512":"ad1e3cc2d88621db732817595547170002534b2a36c861d3eb0ec332d5ada8ed8cf16ede5b393b91ef70147b996057ae572996fc9cc309bb8baff64467996c98","ssdeep":"","tlshash":"56219e11bf60f10bfaa31c6de5a4d55a70418306d76a47ecee834b87a05e1c39fa1a09","first_seen":"2026-05-10T12:25:39.816877Z","last_seen":"2026-06-25T11:11:41.168127Z","times_seen":3,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/2366-925fc85d237b17af.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/2366-925fc85d237b17af.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:47 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\nlast-modified: Sun, 10 May 2026 12:24:47 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CscZ8ckxEuqFYxtjGyBq6QaY6IXt4Dt2gOHJWZAh2E0Go9IEp%2BsMigtNT9kyK0rWZ6cVxNWfijCOI%2F%2B2tUSLpELn4ML8Z0phseh9pbOF2UlY2GugKgzuBDwxFF7H3w%3D%3D\"}]}\r\ncf-ray: 9f98ec435e515691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":467,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (467), with no line terminators","md5":"f7911660cff2a47fdbc9415ace2e3188","sha1":"3ab908a0337f5ba043a079b563d3c584521ece41","sha256":"4a2741bde36436647e2ae672eb2ef1262c83541e3d13784b48cb37b165bddd8d","sha512":"e21a40e23085dd405ca6c8473453fabc4c7df8999a472fad7a94a4f26856b2d5ebbfcae375412db956a96f92cf7f630b5804e5090ac19f22eb4b7a1022c96b3b","ssdeep":"","tlshash":"54f09e9920057c387abb4c02096e8c2a287c3572be091581e707c5a0009faf85170e9a","first_seen":"2026-04-13T13:34:34.684954Z","last_seen":"2026-08-07T13:24:55.358658Z","times_seen":6065,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/5709-11ea16574670c83d.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/5709-11ea16574670c83d.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 364988\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:47 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:47 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mp95qDQHKMBZL8jMcL%2Bwhf3J67PQibz4Z4LgcX1d5vD%2Fh%2FzPddXuQa%2FkKqOFpjJya5PIO8ecBdW%2Ff1e8PYRQpgW2p5YPvkfLJvfLrJ3slgCjLcWp6LSp3Fs1FcKBiw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec435e535691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1452075,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65411), with no line terminators","md5":"06f2d3022d9be9336080bb11f4efbb99","sha1":"b0129aca2b57ba413d147fcb1fcecd19b80fb1f3","sha256":"55dbebd761f0b316b2293a2e7fe268d5d48aff7951700f5f1c5544b6f8d38f38","sha512":"4dc97809ee95164800d1a5ea68a8b23af33cd628f53681ee5c19d74fb34fc91d17990dd98f67b48a56fb4adf1e43bf61dab8ee5bb582bab6939962ce30a8c6d5","ssdeep":"3072:7nRjX3Ri+EGvcUkqF5p5wu9nkFzXh+ZnmoF2V/ok1yCj6q0LFiTFJLqTwYCNyCKd:7nRjnRoWQRV/oU6qc8hJLqslkFN0bbLk","tlshash":"b63537ac67b5a3fcf545b3f8892b2ab43e5628f9bb81d43dc3e55c14e0510ac89648d3","first_seen":"2026-05-10T12:25:39.818442Z","last_seen":"2026-05-10T12:25:39.818442Z","times_seen":1,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":369,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/4577-b61d38b6b034d783.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/4577-b61d38b6b034d783.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 612001\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O53fez%2FvuizLrS%2BAbLc6KjWQQxHVclzRdrQrqLj9O2%2F8jRPMWhBg0%2FzhBNc3JCV0dkELFFxK7s37HiXh1nGHc6iZm2iFzm1Na3Et85qfwhO4KcZKs8vbL3ggj7IjRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec437e5c5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1365565,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65494), with no line terminators","md5":"e6668d8af07f665bd6a728ea389b8445","sha1":"b44451db9a442a5be3cd3e428eae187031c8e6ff","sha256":"d66d82d7f23df37ddefc4a74bf15ca47b58e44f24171b875bb7911b865b5f17e","sha512":"cf413d7f97c7cb9a5f47be1f6d015d3cf6e0379a70e3d9e9d649a4640fea030eb4c6855f792b9583bbc963559a7a9fdcc8ef8febbca7e5d9a1c814a5ba722b5d","ssdeep":"12288:GxIYTLljXNW4D93yq3F/1hWJ24cvYkwl/eH3q0kCwI3UxrfZfM6A333xJUgHAsA8:3/cpXlKxUvBIVV/7x6XoG","tlshash":"4825601c8e6641edaf18ac81ce4770658fe2c6422fd785eddabbad204fb018f4351e65","first_seen":"2026-04-13T13:34:34.653552Z","last_seen":"2026-08-07T13:24:55.374463Z","times_seen":6039,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":570,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/5669-ed334c2dbb466446.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/5669-ed334c2dbb466446.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 350609\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=obWLkfmUL94d5xR8qLFYHDNTjYrDZZ%2FC8hiT1ZiL21F3Is1MQXeB8rqH54Fr8NQFH9%2BnADnwFv6shRw0EwQrU6D6z6zb9dNziXBIkTstvveQceE%2FiHgjgmTrucz4sQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec437e5e5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1370944,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65520), with no line terminators","md5":"edcd02e15f2012ec6437683a44554a41","sha1":"63a9be64badec0c0801046fef99feecbfd488cff","sha256":"e3595fda91d9d620bc150465632369c1124b0b7a387474cf81f04df6d534d3ab","sha512":"5869e9f6e59467227869d6b868b638882e2035c928efc7d4f21d43627243df6ce35e0bbb0a8f8eba23e8d5f39a3ba5b279656aab8fb3cf12652e5ccd1dd325bc","ssdeep":"12288:+3PyxSJSN87vIomx0wgH+vVUqmAStvp1H/llr9dhLR5EdNbE3aYAiLQDEmAx//pU:jNgvIh/VKa","tlshash":"c9250f5ccb9201bdae58adc1ca4770254fe282531fd789ed96bb7e214bb0adf4301e61","first_seen":"2026-04-13T13:34:34.672452Z","last_seen":"2026-08-07T13:24:55.386039Z","times_seen":6062,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":357,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/7185-2ea9500f451be04e.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/7185-2ea9500f451be04e.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 185733\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=02eI0hWYHXA8kNIjGem4lLu1q6r3q9b1cjRbwoBb0sqaP1GvCYPLrsDY6t5LGQ4FUZSVlL8hax3fH4Adf26ruMXwtJ15huf2SpaKH6Fy%2FpR2HVgxPowg%2Bh41TYZ6Dw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec43be775691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":693960,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65514), with no line terminators","md5":"16ae376f952ed97ab855e936d602146e","sha1":"f5c236dbf070df187916a5900827bb9826991dee","sha256":"1416dad5e7c1b7f9a51970d36a49c42937667a917c4abc08aa89f5ba2c013670","sha512":"0e8ad22ebdca1dc6927114b07de7c73a0ca0d2b4f081c1581a70d03378a84c83111277371ddb4299f684921b8cd8a9571e79f6583a3d1e673cc802471e33197e","ssdeep":"6144:Qb59C1szfrcWDw32B9SKUVG1DmeSafWTnp2iYEGeuMq1pVAL83IS2a46GwvHJqpG:tOdw3qEKUVG1DmtafWTp2iPO1Z9N","tlshash":"42e45d1d72c072ac17c363659a2b581ef36e596de121a804e3dac93c325ddccf13aba5","first_seen":"2026-05-10T12:25:39.820663Z","last_seen":"2026-05-10T12:25:39.820663Z","times_seen":1,"resource_available":true,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":228,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/css/c3584f51ef99d3c6.css","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:49.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/css/c3584f51ef99d3c6.css HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 3062\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:49 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:49 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Re%2F0n6k9D1tKoipVXqaLuYit0LN%2BrSfBIPj73dPDS7vUh7Y%2FltWKcEq2RTo0ptacE4LK6FJEuR7souNmaUsKMW6xxT0zqKQFwLbTdFZ6zpNx4eSubmrvP5Tudst0dQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9f98ec4d0ec25691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13336,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (13336), with no line terminators","md5":"516a6dd1d893d26eba71a94b8277cb11","sha1":"6af4470ab3e8c26c479ba56075717fcd78b147cd","sha256":"8475c4546c8174ab9bb62534ee7160746860edd494b1405bf8d7d9b5ce951cfe","sha512":"790bb9cf85905a3f40189bda9f0822a59cb6f59b56d39b10f56ed42f928b9631bf22cca63e6b0e5a0a490f25d967f25544598c3053e4fb9519068c426ea4900c","ssdeep":"96:eDLcdqVkPuVyFzaDr8GreQqn9CltW11QuJzlEbD57F6IKTCfmISDdKH/QJG+ctej:ELaqGusFzQBHqnA/Nu5dGiUfEWsV","tlshash":"0e52613bc33155287867da1734dcbd8f2125c54eea2356b9f186ab3d81c31a3267378a","first_seen":"2026-04-14T09:21:16.836561Z","last_seen":"2026-08-04T03:24:24.82577Z","times_seen":41,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/249-e2f3b47921777989.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/249-e2f3b47921777989.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 61633\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:47 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:47 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ioA4aXsuDyKddm%2BC1FjRR0yxJ46whMENnllnjMn59emn80wPEQZ9jheVaubvqtgB0umrtoEUw1qUPfUIfnn9OOwaXxP8GviUor8ACnHBa%2BiSBALNntoI2LgIbcE91Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec436e585691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":281587,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (47782), with no line terminators","md5":"13fd311a7bb1a6368c08c4120c88706c","sha1":"7407991302379ac0d4f8ca4f00eb827e0d8c2466","sha256":"ab329f620fdba262c374f0f3c2166b8db9f5c80f0096a5010fc9fa1549461564","sha512":"e027e24b7f9e643233f62b4092a01d4eb4bcc346e399cf6b80a115c4476397e06609bcec68ea38b5295abf7420edfaa8d5fecbbf75d0f1778e3070cc750206d0","ssdeep":"3072:BF4UMvqBX6EG8q4H7GRxe8JTDUkan3busQd1yKlvRnTT/vD3Y46m+OEL4uFAQNgR:34UMCBX6tdDHq5ku8QPRuN","tlshash":"2f641e3ce3b9f3bd0afd389936981f7ad5992a35c3e4f28f45d0b2999446cf04029664","first_seen":"2026-05-10T12:25:39.822108Z","last_seen":"2026-05-10T12:25:39.822108Z","times_seen":1,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/8824-ddffb509a90576a1.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/8824-ddffb509a90576a1.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 205429\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KMAuJqZrDoAtnZg8lzns5YMLOYPtjqKgatNJhVcphO6NGuNgwBrneVwXn%2BpByYlxSsh0hYqqzpKadn3t3y5RTL0mICAN7lqMBzdQu6CHuMbGS5Vn7t1AObk0%2FmPuvg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec438e645691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":492118,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"88138b1397ee14b04ead267aa44c4196","sha1":"760b927bacdf81d73a0f2084bfb3ce7a76478e63","sha256":"a2d07d31470b51490786beb8167c7fafeae5a0236cb44537c4dc8857b3c448ce","sha512":"9841fadaed80aabc013a0fdccff0b1356d14a06a2952bfc883dabd299aa5fd9a4369b504e8ac7d28f47c27573be3bb4b94b08d389d3836697c2334185931304e","ssdeep":"12288:3fB+XoxJuhu/v7uV3rIPE8zGglvb9hsm8sMQMNIYsUKwJAsTF4Xylyz+hYsUUIJM:vGgthhsnR0yF4XylryF4Xyl+","tlshash":"94a4be69da7112fdef516ac0ca177015dfe6a6936fc789e8caf6ac040bb05ce4301e91","first_seen":"2026-04-13T13:34:34.606306Z","last_seen":"2026-08-07T13:24:55.366451Z","times_seen":6064,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":268,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/9689-39df663debcc7932.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/9689-39df663debcc7932.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 899191\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MgzV5vln980yO1aAQTL4vHltArjPx%2FK2O%2FmoNYtqQjEjpCQW%2FCKtGCPGIPwvgRbv9LZHeRbGiVbTQgw5FQ90%2FCEXD99P%2FoRGZs%2BHNZZnsK4%2FwGn0Y4TEJzPt3%2FrEiQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec438e665691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1462413,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9db46b5d4b739ec66f2a1c0b604e8f70","sha1":"c1b081fba22e6c0500021767d5a384f5464506f3","sha256":"43946234d264f14d2be22b5bed48cebf1c0283592db43db6fc888a07fd429a6e","sha512":"86e1f7a2294ad4475369395bd9e42aabac53d2a7defead470c705bfe7236d9507636842e05bd60063e952cbd2c29ff4b307afe96d76bd9e7a28c5de84e141513","ssdeep":"24576:7tPaAKapUMi69Q86f4lJay+AdFYR/QNnBKM7x5AKGE51:u7KwNhQx6I1","tlshash":"7b250135da2552fda728a4c2d58b34198ee685073fc589fcc9b6bc464fb2ace4701f90","first_seen":"2026-04-13T13:34:34.637603Z","last_seen":"2026-08-07T13:24:55.354984Z","times_seen":6060,"resource_available":false,"data":null}},"time_used":759,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":647,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/auth/signup","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-10T12:24:47.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /auth/signup HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 10 May 2026 12:24:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4XPCdSp62tcnMV0bk0T%2FGtBpXl%2F0FcTkhGKzqylP4AvlFrfSX6aXHLCatXG3tZaeH61VBz%2BX8QN7WHdk3FLB%2FLTSQvSH38yefv%2FiVo0FxmaBmFupA5I8l%2BAVE93ziA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9f98ec3efbb32efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7180,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2283)","md5":"ab002c4de75c7da09d5cde38ad7ac4a4","sha1":"c6d9e2828953aa953125348d98584678f5471ce2","sha256":"7ba0a3ef7906be9ad9a221b787693c466fa5b54a0599bdf7c578d73b3cbf5791","sha512":"5a420de9e777c9a0e6352a05bcea9551b98a8fbd5a7cd4ee621bcbb7d09cbf53c37cff9506c5d8a86d45f7e5a5d0c855bace6034d414ee47045867673c73f673","ssdeep":"192:EUB4BfBcr9HHyLzaipcOrg7FefSpGB913MCqO:EsgZfLz8JFU","tlshash":"30e1a5736d04992e47e35f9838e7214cd677e1078878ee95aa84482e01d97ec9473f86","first_seen":"2026-05-10T12:25:39.824171Z","last_seen":"2026-05-10T12:25:39.824171Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":35,"dns":17,"connect":1,"send":0,"wait":80,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/trumpColorDSGN/mix/preloader.svg","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /trumpColorDSGN/mix/preloader.svg HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/auth/signup\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 38904\r\ncontent-type: image/svg+xml\r\ndate: Sun, 10 May 2026 12:24:47 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:47 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pBiDAnhcRx2RiQQHy3F%2Fqnzo5t9dMbQVwJgjsoEJEXyG2hzVFLC89pkcl7cLER2T68Qucfy2FTKcstOGGr7reAMZp6p8JwBg%2FnHmJZJbWEakwUm%2FlCOdOEzHRPLOhg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f98ec41ae385691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119318,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"40fbaa8ff12ac1ebf23154c29e67a191","sha1":"a0a3a6c3b2a35874dca992b65fe8651809da05a6","sha256":"234f1a89ac1c64f2b60e7b7aaf30d3ec2cd97acd3f5fc844f4f55256eccaf843","sha512":"5c97f0bcda3d832001d8b751d6140ba2835b2ad34989ee6c4e9b44211dc8dbcb099eeb28666d6555505235ea97f71d37dc7c1a19e62c3a98a0cbd64e3c698ee8","ssdeep":"1536:objgkWcss2wEHMgG7RPP1VLatHLKazXxzP4D:TCB","tlshash":"edc360fc1af062cd88c0c7d27f69d2b93c17a3b798580805e66c5f5c0b9a96da851bd3","first_seen":"2025-11-16T06:53:31.134866Z","last_seen":"2026-08-07T13:24:55.395196Z","times_seen":23894,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/global/twq.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /global/twq.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/auth/signup\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:47 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\nlast-modified: Sun, 10 May 2026 12:24:47 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yhff1xWwraBbxqpOhJMIwIdcwTru1K%2FRs1lYSLaGWdzEtbR7MCCJcYEE9YzuxyliqVDx2TZE2C5qQvW7CvejQZptB7YENuTIjZ3YZB45Od8YGEvVqKxRl8x%2FVCwAVw%3D%3D\"}]}\r\ncf-ray: 9f98ec41be3f5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"CSV ASCII text","md5":"7f4d9e824f13f7d27acdc868f36f7208","sha1":"125a712d37aefe5d3e52ce2ae8986e109eb473de","sha256":"d6768cdba372d919e6d9322bf3cf3a0dfe427d86293aaf16f23d096028a00a1a","sha512":"d6395459961f34c3efc4c55ffa6bd873fbf20cf9aab17d31ec926d7ff645cfb9ae0cfea469b98e0604c5de162b60eb1bfc7b06a6fe91e3497f3a4fb32d29c20a","ssdeep":"","tlshash":"66e0e7f12d093d631fa11374117f931f3143210575595b91d59cd540376249f8037b8c","first_seen":"2025-03-19T10:41:28.935479Z","last_seen":"2026-08-07T13:24:55.364948Z","times_seen":27088,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/global/fonts/proxima_nova/stylesheet.css","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /global/fonts/proxima_nova/stylesheet.css HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/_next/static/css/d4dbba7cd4889f6e.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 1497\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:47 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:47 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=53N4rAlvlnptXDAC9RgI%2FI5PrZXvcJ4YJpv5sno1GobWVBkgmmoyCgLuKC23JDPiyKPnM1XpLQLtW0Kd1IzW%2Fo2GCdnbtGCYA9GUiTpr%2BKIV%2B8KhtUmyW9XbcXxfVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9f98ec427e4b5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16511,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d8931974e63a4dc65335827a00484a23","sha1":"3295703d542b291d258e703d3fb273aa4e71472c","sha256":"5748d69fa891b81b4890fc30b6c589852acd016cc7f8726e4ef93a497f0ee30c","sha512":"a5a858b0359a3571aa1337351eebcbed993af02fc1e9f54d7d87ce39e675d455c46fe9ef7291fbbb80d29d79dc71bf2404e40a902f5ee26fc0187e92b6625cbe","ssdeep":"192:xz6b6dlmqgqYGVNCGAcCh2H5vwCGmhRgSem0pBjqkCY9WTpnOPx/OSW9r0tZxjyL:paG7KUC4ZYCrz2muZHCfWctAH/uNB22","tlshash":"36723942cccdbc624aa6148077fe6ff60b4e28559079ad57ff3c38389d115adc68472a","first_seen":"2026-03-07T05:32:19.76436Z","last_seen":"2026-08-07T13:24:55.385409Z","times_seen":17472,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/3980-010af18f0f321f6b.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/3980-010af18f0f321f6b.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 102910\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:47 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:47 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uPj33O1xBTFfEjj%2BU9MvzfCM0M4mrXE8%2FJdHdUBnUmFbTkH9RfC4MKxVGeOV14VW6TTB%2BlTzDJMS0eu3zj%2BFaWYKNNsLsr4TinC%2Fiz8ZyeDmOj%2B8mzmVUgETZkj2xw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec436e565691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":514070,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65218), with no line terminators","md5":"749b44f32e8b1267b5f7e521d2143675","sha1":"102e8f1116e1083ce8d3edc2babf03e95d2a91b1","sha256":"ead53d8ba4ac93a5d6b412589a1a865baa9f9657cfaa61c3ad8d8de688d416fa","sha512":"1d52e8de212da062dc8d6e4d2a05fddf46bd558156b0806e02018d7c03e04b4196bbfa1be14e25f17060e0a52eb0266262e33479934399a4eed836c1a884ef22","ssdeep":"12288:9Fw3/38CUqBZw5AcYk0G2KVLCfEQ4HAIrBMh18xyBByFt:uB7KFrsBBU","tlshash":"d8c4d637f3d06b6d23f27265ae9b3399b20d1c69c394f94fa6b5f00413468a5a138bd4","first_seen":"2026-05-10T12:25:39.826611Z","last_seen":"2026-05-10T12:25:39.826611Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/css/d599adfe9f648657.css","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/css/d599adfe9f648657.css HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/auth/signup\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 12193\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:47 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:47 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VbJx5rOncQ9UyK22Q1O8Tqsxa1%2FSXAjuIjN7lCqvKfE%2FN1%2FySx5OxqGgVgMa0SFhDnywqsY%2FGgdayi830YWTsJQ8v4UvFzJTD9YvYLLilrpVJafswwc9zqLS0bZaeg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9f98ec41be3c5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68963,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"689d6845a37e6a3c96ab9a76cf8f0420","sha1":"2930484cd58c8e849674195c73059425e6218d6a","sha256":"619447f843bd1558d398fc6c6548f2802566678eb7a6d1621fb2aa0b3c2ab977","sha512":"a467b0712c19a7d4866dee41cef2013cdf1509ee800a86860377e0eb4b217bc52a8d21a57b5695cd1be1fe81211ed007ffc07bbd6527d6a55e378eb7949c1265","ssdeep":"1536:SDzk2iKelS7yUAdO3CmoZV/AdBN/dilkbP6/4Nw9cXw+qicehzXu7VZ:F","tlshash":"1563b8715378f03cb977a82375819ace706dd203b97366dee5a4b43a80c76933a2274d","first_seen":"2026-04-13T13:34:34.644587Z","last_seen":"2026-08-07T13:24:55.394719Z","times_seen":6066,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/3585-80a05ac7fb1b5c22.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/3585-80a05ac7fb1b5c22.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 112030\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:47 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:47 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FxftaCJFbc5qKXe0drXmhdd%2FXfXpCQgAM7julIeZLUtWUqRKD7pcCnANtxCdFpWevdc%2BIKxGOcBMXfqFiMti0da2%2BeYCVrrTZe%2B29AvWtdy6681vFBSuxWXAb4YwmQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec435e545691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":376521,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b00e2366e16e12ec8a5624af6ae62c65","sha1":"47f3b22bd488462a9ccf381c5cd3e7acf10075f1","sha256":"23b945c1cb5b49bd2fb18c04e02a138d81f100e8c05ca3a88626e4061252b3dc","sha512":"efb2fe28c5b98e9ca4e1584161eca49c861e21271ef69c87b7702d27215790147909e1819a5a21554029e21959ebebd7bc2b675fb02b7ff610549d477e753b7a","ssdeep":"6144:f9VGcm/FTmn65dg2/s70cs6eWBsY6EHNfm5Dlf3+FFS:ahWwKNI","tlshash":"c4845b98725060e8a28762b9552f154db33f2578e02ccd14e39ac87c7695ccce63bfda","first_seen":"2026-05-09T20:01:54.357909Z","last_seen":"2026-05-15T19:29:52.767487Z","times_seen":16,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/1342-e39ae382517d6e27.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/1342-e39ae382517d6e27.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 544934\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:47 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:47 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dfBGOLwXleJLo9kf7RfpYDfc5hZHIFoS4d4PxK76UQep%2FtACZInY5jZPoENde5zhBZKpKFgSJWm03fArF4oXzlIl25BtrLFA%2BM5drYa9694hoetYPYV1hmOPUKeyzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec436e575691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1449011,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6fc40cd79ee8752ee16a42d8de3a9836","sha1":"899243cd2ffe7a5b0aade6310d845f5f47289847","sha256":"0a935b2d469e703bd6e72a9f682823d483fc28d56f3a663787b9c21498d9db30","sha512":"13d3b80b739af5022c6c89df890e60ee7ea4607afb89204aa6fb7d43e6350cdac310e4a6d25be33703fea38f4cdb0ee7f1197766b97df7d197a6db1dff6459b3","ssdeep":"3072:2XikgRVZiU7NiK6xkdF3GK0/NtT8aH7fwTqdypuWw+1sGKIzXBX+:2XNUpieiztQI","tlshash":"5c25bde8678526e5bd4cddca5940b4ac007980370dfbd1cceb2af4e740b87b746a9d26","first_seen":"2026-04-13T13:34:34.611278Z","last_seen":"2026-08-07T13:24:55.362852Z","times_seen":6061,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":495,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/1617-516db04f21137a6a.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/1617-516db04f21137a6a.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 134434\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YAv2ob4KdiWUhNiG4isaxEAuV6NHaYvONg%2Fl7x04NN9ATvkXyQv17D6Qya3AOQClcs0exSWVmGKAo516MsACAgPe1B4xWwmoo8186x9DB8AI3sZO22hxOpkiC00XWA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec43be735691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1310318,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"96e12518bcc4bdbbe9000be499bd4164","sha1":"964881c32476cfe71ce4b7dda2df1fedb01927b4","sha256":"0d72038e505589c03cb66f853434a70524bfd107ba42445b5c4d48966311f63c","sha512":"ec4f41f65b4670eb2cb554fdaf6d5eadebdc5de167bd035cb16860e500477f99377171083aa1041d61fbd08f9a0ad13840391ff21f67a39cf0e1a3d552b5baab","ssdeep":"12288:yzq3gKoizq3gKo1mTkcAA92TkVAA12TkVAAD2TkVAAF2TkVAAM2TkVAAm2TkVAAK:J","tlshash":"6125aa4c8b6602fdab546cc0ca0770998fd186636fd789fccabaad145bb16cf0311e56","first_seen":"2026-04-13T13:34:34.656645Z","last_seen":"2026-08-07T13:24:55.396149Z","times_seen":6063,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":180,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/7580-1e05813e2213c2fa.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/7580-1e05813e2213c2fa.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 714375\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:47 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:47 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SxIHwSWQc8XfF4cdGlEm1kbDOMy15SZMqXNTvdI2KaHVEXZQ479eWvWHaW4VvRaiUAnZqFZ6s54e9ekbGE8TUjZB2xqt7PxG7%2BE%2FW2fNAvLl5OelvuwA%2FWMUkSi8Ag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec436e5b5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1451511,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65485), with no line terminators","md5":"98c08cdf440cab4defd3a6756db58173","sha1":"cb0468f2d2d3816651663fa0bc74664e8f52d407","sha256":"717efa16b30d921eb2daba2cc677ba5fbb7fae501448c81e214bac6760160ef4","sha512":"a124530866a44814fac196a6b626cacb017d2bc4dd8615f0aaf634db229322b4e40d9e6a8b360b6632e76f7679435ec94dfc5feadacfcf0c5e3a65fb89ef1eaf","ssdeep":"12288:EJe2e02xEzaIGTBrfzLd91WJ24cvYkjZli4CnLPwGDkiqCCE+WTjjXHPxy0D8eUX:K/cpQlKxQvBIVV/7x6XomFnoF","tlshash":"e925f7198a6502fdbf596c80ca43345a8fe295137fdb89fccaba6e1447b4adf0301e51","first_seen":"2026-04-13T13:34:34.686233Z","last_seen":"2026-08-07T13:24:55.373959Z","times_seen":6043,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":521,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/9338-742398fd846a71c9.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/9338-742398fd846a71c9.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 253412\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZjhWABBr58O4U3uxSgeTXDHn5aEAZI4nXn2mFfVt1khpzmdv2HpaSgFQyD4A52NQLPTFV%2B4Gz%2Bdoy7KTLbnmgVkkCjzBAS4V6l85SVO6RviwxAYOezL5N3JlfaJIdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec439e6a5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1139216,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65360), with no line terminators","md5":"2b7b624a172740e15cab5bd742b040bb","sha1":"da4b4cacd38c8411c2757bab503b1e94d1387a7b","sha256":"cb81d12e10e97c97c29822437065aa8d5f2d0f71bed71df7e3b7d0125748046a","sha512":"8bf9e5dd6e8f41fc826a2788a73af7606876d14264892701adfc106ded698bc0b49037f06f9be77334cc5b34d939e305d98a4768e334e49b59966afeba39efe9","ssdeep":"6144:L+pzOk0ScZvzdjztsaAsU3Z2apIqOl4q58oLDmWNiWRSMGiLAlsrJYtkAgScxmPQ:ypzOZxRLLD3iWRSM9LAlsr1TxmBY3g6","tlshash":"ca25a456008827922bb37695269bdc0fa41ef12cc743c465b692c57e26cddc8a27bfdc","first_seen":"2026-04-13T13:34:34.662133Z","last_seen":"2026-08-07T13:24:55.395672Z","times_seen":5968,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":298,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/global/favicons/greenColorDSGN.svg","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:48.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /global/favicons/greenColorDSGN.svg HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/auth/signup\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 750\r\ncontent-type: image/svg+xml\r\ndate: Sun, 10 May 2026 12:24:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jR0aT5P2nc4sOWfSaMnxR5y2Z3bLrJoSbYTD%2BB7sOnNrksNDvTO9yQxKL875eaxwf8lYZQJWu2aWI51Ca8PE2rwQ4qYDb0oyDURUcIEcki66vCOq9%2BEMyUgXO0NrCA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9f98ec490ea65691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1468,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"50679c0c5e3ed56d05c1d0ed312419a7","sha1":"f9ea27ac71a78da2d61e14b84ea77ce447920d9d","sha256":"c164e1ea36438d14fea9b88996d154275a4c92fd80bfa082c7e00a343f241147","sha512":"163d4097d60ecdcf58cd01ea828e74491b0e27fcf3d40a2e7c56e6c90042d6d9a9b6cb18825052caf8799836ad35a44c1c88ffd2c35ce5d888d23716c27dd0f4","ssdeep":"","tlshash":"a4312e9e77fea185f448e7f8023999b932d36cd33a04d8282bc00c02e98091e9c9588b","first_seen":"2025-09-26T11:40:39.971586Z","last_seen":"2026-08-07T13:24:55.373402Z","times_seen":22117,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/global/audio/message.mp3","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:49.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /global/audio/message.mp3 HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 27522\r\ncontent-type: audio/mpeg\r\ndate: Sun, 10 May 2026 12:24:49 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:49 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ckKBBRMfdqLS4QFmwa3WDiwsTQH5jqA3%2FSMykKHH7jE%2FKGrHgwvwn7xHztuRopJPkL%2F6DD4nY9QJadyFScviBA4ksS6padzwY09ubV7R%2BUCyaEi%2B7XJ6VdA8ynj%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec4d0ec05691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29091,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo","md5":"a74d3b2a2dee5892841f7e37ae8343a9","sha1":"90b69421807b860b265c34a5e2f249e3fdf05ae8","sha256":"7bc02c22f6a0a75446187dbe0547a7eca86c05e3d3d369e0831dc084bb974ea3","sha512":"7186807bb91804317231d48b985557d4259820c45cc6ef48fae69cc7f50b7195b1fa9c271aac9c2104b7cd0a48a772a9223db8f0e4f53cb2302bc401246c0f9f","ssdeep":"768:OBdZJRccW5UzJDDNx5kbu61m29Ij3Va3ZH0jycOFFLQU:0JRJW8DDNOu/j3VaJwyXv","tlshash":"92d2e13b2d840d8cf1868574226fd588e0b97c9a129e5f52ed9feb494637031bb08fd6","first_seen":"2025-10-06T22:40:31.572152Z","last_seen":"2026-08-07T13:07:41.174172Z","times_seen":18133,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/5917-b901ce39230b7545.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/5917-b901ce39230b7545.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 92327\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=axzeIk9z3I4kYlYTjoHgHA3qWryNP3Y3FKdgQ34%2BEuNcTFAAUbjVmQ3CWdJSE%2BPcN1rLsFfamqoHweFDJbaJYueNjWe8kHoWlpldvoH7txo0IurlRCDKx2Xf3sNB1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec438e675691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150345,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"491b4721539828b99a5cd8c67728257b","sha1":"56b23762ece781f1dbe34b9ba8ce5850cc15ebcb","sha256":"9284099bf384c3b3c2162ae6ee197c26e4b02a829ad6d0592873fa510b89dfc7","sha512":"552d80ce6ca3128c8c695c6a1e9f70a706942ed2a90b4b48b1c914368251b331ccd6d54392bd3ad34cf0014ff50d669d10ac4bde8c570ed76708e1a39372efdd","ssdeep":"12288:DkmlKxHLIPrsjbDcvnTJmP0I8y/PEg3Ahkz1epv3BoKuW+xMQT1y5EVNy5EVIS3j:G","tlshash":"5b259b4987aa42ec6f9d6d80c607744a4fd69513aed789eccbf9be1013b0ade1311f42","first_seen":"2026-05-09T20:01:54.369264Z","last_seen":"2026-05-15T19:29:52.753993Z","times_seen":16,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/css/ce4a94f3f717c248.css","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/css/ce4a94f3f717c248.css HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/auth/signup\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 5672\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:47 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:47 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2JlLQL2VzMDTyk0zHrV4RF8RrPm4Sx3q%2Bp3WmSGnjcJONMbYIW6ynvaPopK14P6UQZYVqPK59QTM8L6L7Ax3R4AqXRTXGGM8kuMqtR8WGbeMQwY51Tc8cpw4WNM87g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9f98ec41be3d5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29159,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (29159), with no line terminators","md5":"46ad4b92478a51e4234fdd6d675c9f3a","sha1":"649d65f39d1733aa5d13bb1f20e773e089ba6620","sha256":"8c2a5bd34c98a97841f128779b43cb8346f7ec1a35adefdb188f32eeab45bc67","sha512":"0f77212b79bb5fefe13b10066fa75ad94c9e4308f9bcfb246d77d96c9b67b6a442ace7fbd0cadd1f6dbc3f50b0c7418b49733fcded43b1bcb81459b605492059","ssdeep":"192:+rbxEXPgGgaxVOUzM6YLWBHo1Vc/nJdcdISbwWCnZclaumSgGBhS6lPxT9nqhC4M:+rL5UzMr0IgfImKwYAMRfmVnFI","tlshash":"d2d2a432a124d13cb8b684627e95e7de7058c203da7756faea41e52dc0df5e33b62308","first_seen":"2026-04-13T13:34:34.624049Z","last_seen":"2026-08-07T13:24:55.352128Z","times_seen":6067,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/global/fbq.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /global/fbq.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/auth/signup\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:47 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\nlast-modified: Sun, 10 May 2026 12:24:47 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ABvoZuacaFFPEr6F%2Fz88yyQ6XH2lVP91zh%2Fb444S1rtOEl71hon8yNXdbDXlwju91MTqRJVaF6rz%2BMP6JwtBwCcKeAUyaqeKkpft8s35sbvOq53K%2Fskm9Db8x%2F1%2FdA%3D%3D\"}]}\r\ncf-ray: 9f98ec41be3e5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":408,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"0b834c87557376668b3c3fde729a8db5","sha1":"872448d973ce02e75d52b31641d961601167d04c","sha256":"cc63b490224b081fc3bef6a696dc3ecbe7ea7bd45df00c8a53cfe304e7bd5469","sha512":"1c40528c95bf8c5d60ebf3dba6df8ca43390e5239ea50ef08705e547c48635a1f399f2f9d7207b4575822d2ce3dfd6e2b7ef7ee3b431255837cf2545ea5ed4c5","ssdeep":"","tlshash":"e7e0619f2c43b42733e97639c727a67b3763070178c2d919ba05c8151fe08966c96d9f","first_seen":"2025-03-19T10:41:28.92776Z","last_seen":"2026-08-07T13:24:55.365956Z","times_seen":27094,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/3121-c908cdad06c21f15.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/3121-c908cdad06c21f15.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 56492\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:47 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:47 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I5gAh3G6gxONC%2FHyp%2BNVNkpWEEj3LnNBtD33OMe7pRNNY2pHPle%2FPbsJwFwSzPYuKvV7TDJPvFHJU5BgF76iFJRlPw8TQpIplUQ%2BDBB4mM3nv%2Fj%2BAHe3QxwBCDgx5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec435e525691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":224132,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65418), with no line terminators","md5":"d26ff4d4459d3a510704c5681a213e27","sha1":"0214b8994024d0299355a44a93bdb0de186c2705","sha256":"f7ac62e46f72df4d1d6f26353e37827054ea91a1fdcdaef0af5b44d374dcb6ad","sha512":"343d3c3dd367e360ebf00dc9ed5a3b712a08fd08b78d7b2b3775669f750ddec926c6ff82e43b498154d4bc6e853f2ebe4b5b4a780f51fd0b0e8e77d48037152c","ssdeep":"6144:A+AiF7KKW6WUSoMtIn9Ghv37xQnp87m0Sw/KNSUSOYYMCI:lYaC","tlshash":"28242b497290b2e817e762a9547b282ef22f7d3cd222691477d4c87c3349dc8913af9d","first_seen":"2026-04-25T11:58:25.633967Z","last_seen":"2026-05-15T19:29:52.751211Z","times_seen":47,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/4310-53eb2d994601d39d.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/4310-53eb2d994601d39d.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 46835\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:49 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:49 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B1NR%2B01ohjS%2Bo2CBWSsAdSY2m00MA35r7WlyAzMoXBIaOLj6Pw%2BojhIhti2CIwflw6jc5jKWXFf1KGglJejXqWgICSWbBBIs%2BBReVR6DmfTEkcSS2GZpiHr%2FtLqnRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec43ae6b5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":241653,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (39028), with no line terminators","md5":"f0143af6287fd10293095fc63739410e","sha1":"93497d4d127965210cf321adf52d6a968b7361e6","sha256":"4be627007020aaccf3a5568d04451c039722fe72b83adbcc0ea68c7cb57903d4","sha512":"134b39db99f3bd93c77ed6f70929473214e880b145f4307e02c5d07de26e607d225a91a260685b32ff1af37169db93fb075b8d6bfd189e4b0e3cda6d339c5b05","ssdeep":"1536:KI9xSoN+NFCwZ7qEDTssKaUeRWxTDF0+uoH2Tr/9m7McPoBch5XI:PSHoE3ssKaFRWxTDF0+uoWTr/9n","tlshash":"94649b3cc769b3be4bf9349839e43bb9948a5635c3d8f7df94a071694087ce1401daa8","first_seen":"2026-04-13T13:34:50.098079Z","last_seen":"2026-06-06T21:26:14.92645Z","times_seen":72,"resource_available":false,"data":null}},"time_used":1188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1133,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/7262-260eb856ec86ab3e.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/7262-260eb856ec86ab3e.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 21758\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FdkiYgXt1kcKUoaNgRfHfbRCko7bM71GsENDTdLnmXDeTFteH78r3JiPmEitq1YsSfJczMGXwL3i1OnbchBjqUWoP3QIs3sX%2FcVuADdV%2BP2DFA27Id7olVvjgCVjcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec43ae6e5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77603,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65502), with no line terminators","md5":"fc5c946ea01e852079c01158915eb9ea","sha1":"5133bd0de532b10449bb08521a92ca6a1887b7eb","sha256":"4a07fe3714db1466ba3968c1de34671f62ca3d5a3e9a01c12fecbdf73f2361d7","sha512":"18a65b639abe772a19c8332cf3709c4e0213353430e032b2cd550e739db2467dfd24ad1fcb4a4ea3675c81f34215a5ffc0ffb658dbf80ff70c2382171199b96a","ssdeep":"1536:nopcljgCIsBEzrJ8i7e85k7yRck5L8Nwxg98:nWuUCIsizui7e5mckJuwxu8","tlshash":"d3730a953180f5ed17e381aac42f644ee32f5c2ce51a766463e4c9ac725d8c8e137bac","first_seen":"2026-04-13T13:34:34.62862Z","last_seen":"2026-08-07T13:24:55.353257Z","times_seen":6063,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/global/fonts/proxima_nova/ProximaNova-Bold.woff","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /global/fonts/proxima_nova/ProximaNova-Bold.woff HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/global/fonts/proxima_nova/stylesheet.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OJpxO9TIdwR58lCnkqX6nMgLq%2BgI6%2BYmcSRZ%2FgObpAOq0AmnOQwtwtV3sBarl24PYrmX6u6CvjsEbiBV5yqlBPYQOae38QZkiRJRPr%2B%2FwU0fgpFxm8DukXPznzr2GQ%3D%3D\"}]}\r\ncontent-type: font/woff\r\ndate: Sun, 10 May 2026 12:24:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 10 May 2026 12:24:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncf-ray: 9f98ec43de7b5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52068,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 52068, version 2.3","md5":"e2cf3dc2f079bf3d5185a02552f153c4","sha1":"9e900ba7e0890a12a5697fc7ce86c058b145d215","sha256":"99a24fdd4e16d8dd4fdd79a5dd2dd7b71c2c68473fd6b3cb4eca4fa3f33d9ac1","sha512":"1043f0d116fcda17bd933ff2594b7c79a1fd41259f28aa8283d90e1a56eb6b8830861f109f9eeb3b81d79408e8a6a3648d973ee8a42fb5c096b0f84138392935","ssdeep":"768:gUZ1BWLCju+iIoHoWcknJh+7x77rai9YTRPxnE6eWPeLJWPznTdpjXeE8vFmdn:fX6Cjuct8QxDai9YLE6eWGYfbX98vMd","tlshash":"2433f1a524350e2797b7f4fa349d0665cfc6024db42b55faa4cbca019a5bff8b530823","first_seen":"2023-04-07T12:58:50Z","last_seen":"2026-08-07T13:24:55.37287Z","times_seen":25445,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/3047-33c601e1350a84e4.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/3047-33c601e1350a84e4.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 86460\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:47 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:47 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y84AkWSZYasXtURQIglukzbFyJkLVMZTRir7ktjkC6jXfcTn6w2KnY8%2F6slzqayPncaWsDC988cg3q%2BVBIgHq4bVZv0zxXtRvzjM4l9ASm6ubKJQaoNbn96u%2BmczWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec436e595691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":316067,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"65bdc7f0d8c4430b22fd779c388274a0","sha1":"84a9e7ee6daa9e2bb35e73c1b356f76684887f6b","sha256":"019b3438a2ce35573e86c831402ee205132d928b3b66f6907eb0a51044417437","sha512":"3a8652c22e773cd8442806d8473f1d8c8184ea219f38ad72f9f726bac3a633a226856a7134ed4e29bff3621caf88527d822c16673b35e4aeff5ee18c440e0ae6","ssdeep":"6144:fT+0+QXgyCRh0idHSlq9p0jy79DMHyPCij6MIVs/e5rKYfxGAaXaifqUMjuTH8NT:wrfOR1","tlshash":"8d644ac871c1f4a8929361a6903f050af23d2e2de45d9444e3a9c8d87979dcde237fb9","first_seen":"2026-05-10T12:25:39.836741Z","last_seen":"2026-05-12T15:57:58.209586Z","times_seen":7,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/5358-241ccf6a9b823b44.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/5358-241ccf6a9b823b44.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 230275\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:47 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:47 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R%2F24l5cycd0slJrXeDrB8WOgCiHaLI9SDEega7p1seXJeg%2B%2FIE70sLmohGol6O4sRrmr8NHgjvk6LMYKRONjMT4yZ%2FCQ2A67YGJMrBSPa%2BoV6PTJ6lB1lRp%2BCX0JVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec436e5a5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":962395,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65416), with no line terminators","md5":"e857c26c5cb413555feae9ce42a13842","sha1":"ac18c1a1af075bfcaff8a745e3ce04f81946cd00","sha256":"5f3b8dd4cae913121696d577cf8c45d3f609d389d8f1dc28f4810286f19ba1fc","sha512":"9c4a72d672a18e15546fa0d1858b35bbdb232830cd31ab68b1e8e8299afd0830c05d1902af6dc558f931486fba09e3f4096ee58b7cd241be13df44a721935f77","ssdeep":"12288:RHJJmOl48wdByBOpQwGQWA7k3gPrqavdqw:dmOl48QyBOpBXPrqavkw","tlshash":"2f35e7369581137e1bf3315429d67baab18d9618c3d4f68fe1e2b528118fcd4a03dbac","first_seen":"2026-05-10T12:25:39.837749Z","last_seen":"2026-05-10T12:25:39.837749Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/19-5bece4aba82fb776.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/19-5bece4aba82fb776.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 347128\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:47 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:47 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9nQ6zOOxFv%2FpZsLdwcuWT1Jqj4OMpZktVzTYqcFeWraDd6GGjLgS0%2B92sjKB%2BER7fS%2B5N2irJxGPqlgUCA5Q97xGHGIzWfeEhS21fUfIn6aFNCoHFHeL0sd9O8knNw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec437e5d5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":936675,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65520), with no line terminators","md5":"499ae782218e46ba0165104a99a4ba64","sha1":"dd6335c8003db8dc40f3b6e5fd9ec389bd5679a4","sha256":"7930fcc2462bd18b8f3559392d9d610cb2a4cf2aad270fc533012c2fa8560ab7","sha512":"71885acc13827a064e0430afe760dadfaf8afacce9f7dabc324d265d126140a62d9baac56cb09e1725cfedc955eba79c0828bd9891ee524aa7d19448c1557aee","ssdeep":"12288:EW2sqZNSN87vIomx0wgH+vVWQo7AN3zoMaaql++gWuWUC4Qj8zINa8DPeo7B53zW:9NgvIh/VSUVPyzLW3fxz","tlshash":"02159459ca6602fd7f586c81ca4770698ed282136fd78afcdaba7e1447b0adf0301e51","first_seen":"2026-04-13T13:34:34.636004Z","last_seen":"2026-08-07T13:24:55.35765Z","times_seen":6063,"resource_available":true,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":368,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/css/d4dbba7cd4889f6e.css","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/css/d4dbba7cd4889f6e.css HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/auth/signup\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 2409\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:47 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:47 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZPver%2BjUV1Ub2avrsYPSHapVeynqr%2FMIBoEkFmrqSEUnRB1Pdu056O%2FB%2BVjYmaq7w92xk0gWG0BxYgNU6oN%2BdR2oa%2B%2BQ6rChaSi0FHX9Oq1cTE0P0ek7zgw5EuUhtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9f98ec41be3a5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8868,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (8868), with no line terminators","md5":"68eb5f61ed957f0983f60b442f427751","sha1":"16106de8065b5f5de07d98588cbced8e42490d2f","sha256":"87285d37d87af815bcc3e3f7ef033d46840703246cd461fb2f47728d73e05f02","sha512":"bf29e12876a49faaaaa3a4c479c3e92ad15d6c9744bc2597d9fc4ccab6e139c99caf7c0ac53ed1fa758d97d4f4f4544609c92091fabcb7bc54f242cedc59e73e","ssdeep":"192:4SJhREZKVQrejs42r9X/Xqgv6UA7HHvhvlM:4fKV44hlm","tlshash":"d702f73cb311a0b242474f0f94a3ef6b8d6fb05acf674a6691a4058cb7cd9d015e1dab","first_seen":"2026-04-13T13:34:34.649281Z","last_seen":"2026-08-07T13:24:55.391027Z","times_seen":6063,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/css/10dffa892f034c33.css","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/css/10dffa892f034c33.css HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/auth/signup\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 14043\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:47 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:47 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rQKL2cBvjTiYlj8tPCglB4ZnQLDJka0BXeIc%2BYbVDAlnbuvhEw9%2FaA%2BMpEhkdBeuzt7rJqtvbXThcxnRHWzBaIRB70dO7aGTo2mVZS20e7dJSc6t4pl2c6WM13WDow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9f98ec41be3b5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76394,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"903280523a763cf14a01eda1a188c571","sha1":"cb8e1fd73250fdd6509ce200f5215a75c6430be9","sha256":"91441a25f42db624a6ab86a8831b21a2a1f2466c4dff5f9d60596bf5c5bc2f47","sha512":"c8350ff391c334c4f5990ee6dee8b883d6158ff6fa8fd0bb5c8d3a1673b76ef3d2af75afccc76b5ba33fcbe554bb9db09202284026401b21af40704edd70497d","ssdeep":"768:91aLpv9OTdbkomfYKekdx/+dYCzEvBvwbniRXpnBv1L:91adv9qd4omfYKxb/+dYxvZwG","tlshash":"4073a6365130a13c7ae76934be98a5cc3136c592ab335bdef05abd25c1c71a73a53388","first_seen":"2026-04-13T13:34:34.68351Z","last_seen":"2026-08-07T13:24:55.360835Z","times_seen":6066,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/direct-router.bundle.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/direct-router.bundle.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/auth/signup\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 66433\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:47 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:47 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MHhPGRrQcqm5cZnCc%2BxxNHQU7NM94Mmwey8PhX9orabGW9nMB6iHzWldVUyXBkNQdXHyNf85fVG9JqOxtvBNHvusO8tOaZ04ekeVpTIgtw4E%2BAMh6YPFgforeOWAEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec41be405691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":220065,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"13a7c69d00c04a9ec5af51234888a226","sha1":"b8cc29891302626c5164cf226bfe2ef3491df232","sha256":"e39c3702313d3f8f497f9c9b95362d51589d872f4d1751c75891768a6155f9af","sha512":"2de21ad1b3abf1bcc2dbb82b4f60b06cfa30391b58de3e20015dfed60579e23f287775c1522fb0c08d33364638162b20d9a801fb02ab88f7d92e95d27f74b39c","ssdeep":"3072:vqSp7BygEFCXqLkT5vd5XnTWhNIhdmkIxWjlP3/1JqobeUmMGWR042:vqSp7BZaiv/ukIxWjlP3/NmMGw6","tlshash":"b7241aa93a95f1226ab3027310df5803733d352b280d4d61a511ede9b4b845eb17bfaf","first_seen":"2026-05-10T12:25:39.840257Z","last_seen":"2026-05-12T15:57:58.233327Z","times_seen":7,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/3083-d0071871f85c1c39.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/3083-d0071871f85c1c39.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 37112\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ob28l9cmAWPa1zmlCA9vmSyy64%2Fti8TsB8HZzeDxarm9Pt3Ype6aFNljSbvTjB9P%2BivrncctC5ZuDbKa2Otd0Ei1v62V%2BGleFjLIGqk52NmjZLqmyBTuosKSJVzC%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec439e695691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140858,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65178), with no line terminators","md5":"1e8736497d50701fd7e98b6af046968f","sha1":"dbfea11666fbb04bc71187a259b4318e935577c3","sha256":"f2bf0ce31e01e02feea9a6dba28d4318ce7e060806dc0c8e3a312b86a47bf163","sha512":"27ca329911a680c2a0654f53c3acb9846e41afbe86166bc73ee90c4f71aaea53c07bd3c3fe30a058e58154e9ab721f0238fcb7d087b6cae9a0313a6cabcd3aba","ssdeep":"1536:9wnbMGYAkPeRRJ0u4fU5g1+GoDJy+N0jPkV/KtXcUN3tadBZx4fH+dMxteMSVgvM:9wnbvvg1+lhN0wBDMxOig","tlshash":"84d3961600c827b52b677b25265acc0eb61bf23dc7429924b694c43b168edd461bffec","first_seen":"2026-04-13T13:34:34.639501Z","last_seen":"2026-08-07T13:24:55.380844Z","times_seen":6062,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":233,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/9883-c825881b2c3b0fc9.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/9883-c825881b2c3b0fc9.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 102581\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AUjKz5mS6zYQFv2fo5bDSRB%2Fe4OwBS0DGxF%2FzNBv%2FefYzf2e%2Fb0Me5eV4VmUvFKZEJjDNvPhY9arDi%2BFtBJvVedQnV9XbnaQEXebFp9XY3Fuf9m79fz08bMxG9agzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec43ae6d5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":437773,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65172), with no line terminators","md5":"bcc8e6423662c12c5682af8dfa62a5a8","sha1":"b892e8086c047484a6e09910e1f5856e5f607bf2","sha256":"fae79308e4825e4d0f92e72cc85189405fb0c80569638bdc473eb7743bc4d4b3","sha512":"c48d27ef493b6d93cca9320dd5602a5de168d7deb5ea80dddde2daddf2b75293f15df2de435a834ad87802ad9497e8bd92c4763018a76ac0e6c897bd15689d90","ssdeep":"6144:TDWV4xt0J6T+WqV7OF8JpCXy/ABCf5iwEVQt3byQvUfV:Tr","tlshash":"6e94a829494416622b6323cd268bd80fd08af2658246c9b9f7964e7d21cfdc4e13bfdd","first_seen":"2026-04-13T13:34:34.692397Z","last_seen":"2026-08-07T13:24:55.352763Z","times_seen":6063,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/6544-b0711005848a5ae1.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/6544-b0711005848a5ae1.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 192136\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ompSkDGGJarOORJLrZwCQb81b1bFgT7kNKAfW%2FcVWl57iXo3IpRFPXmJOtUJvb2PPSY7GZlB1FS4HaV%2FiTjDaR%2F7w8ZWE4XgMilMUF7PZzj7xOGz2DyA8VK4WP95lw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec43ae6c5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":932011,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35586), with no line terminators","md5":"faa623d99775e4993d9ef03d15f93562","sha1":"49c254f4f5f2b79bd5b13fa0deb3f084400ddeb4","sha256":"603f1a48ecc208b675e4095542a176ca835d2d0148e041b5f18213fef510c8da","sha512":"a6599750e359ed702531982477973d791e00b645f536af648bfdde8c80807cdd4f45e3bbb8fd5e2773340b421f0ea1bda7f0044b373b9abff63a2cf1f2b5639d","ssdeep":"3072:LxF1G4zn2Qbx7Lg5H+vCWpduOhWr8BqUH9d8YFdNxnuT5yQvfqGwUM3qFOZz74SK:hOEuNfqGwUM3qMz74SIxTrt","tlshash":"a9450039821527bf6bf2309469e53bb8648a9528c3d8f7dff5a07129108bdd5811ceec","first_seen":"2026-05-10T12:25:39.842121Z","last_seen":"2026-05-10T12:25:39.842121Z","times_seen":1,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":245,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/9796-477f833bec802edf.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/9796-477f833bec802edf.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 30594\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oa%2FirML9IXZPvtxCcT0kk9wquJjLnZfPD06NLeL3IZ04X8aEZMNR4W8rk8I466fCrkkzbtizFVFNGQj6nwQgWZt2xgM8xjqJnJbE%2B%2BICoab5nEuX22q5EDbBO%2B4Esg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec43ae705691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":261678,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3cd700563cd8e58c974d39b5117025a1","sha1":"8adb06045734081c226292a64b902365df367e22","sha256":"92c3493cdd4b2f4c088fc3c1aad125fee7a6efff6470de708bb5363e2c2b9e48","sha512":"89bd514505d7f05dc1d6d9124541bcc8aa98cb80bb21ecbf2ce07e05c4f9767ed6ff1f2ce6a99f5a994cdc9801fa416e5d37ef0bc5c046b18d4eb13df3a033db","ssdeep":"6144:cX68qDg+HzhjzH4Bs5ivB1hPYbRm0XiGwgwKZ7hmcVQoDMEFilOHIUJW3bXlB/C1:VjzH4Bs5ivB1hPYbRm0XiGwgwKZ7hmcJ","tlshash":"eb44101c8f7242edbb187c80ce4770698be586466fc784d8eafb5d244ba05ce5342f66","first_seen":"2026-04-13T13:34:34.615711Z","last_seen":"2026-08-07T13:24:55.369749Z","times_seen":6063,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/8648-f6bb2057c3669db8.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/8648-f6bb2057c3669db8.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 35048\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S3osvao39ypQf3R9sbCFY6nnugTgCvRZyicEbqwhvIFH1AFfw9Z4yLmqTqav%2BSdPKdQrWAALX0HtVIk1Xqt9TxQYGVQIBwMHGVyqhX3dawm5DqVQaOJ7fJhVP13dIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec43be725691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144718,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65454), with no line terminators","md5":"69bee25a0bf500c5e3b3026aebc2fb88","sha1":"7c7a6b6875f0db490b9a2e4051c71747b40251e8","sha256":"df5ea05cee1dc21e34a7a7d5497fa04e4e378e44dc94832061c4bf7a06a28e1a","sha512":"7762d820ba43daebc7b42a6358a63ec1ed7559a0942a15231be534d5f32ac9804777dc9af0e2b50def1b9680e523fbc614b8460e943bcce5772595d0b14428f3","ssdeep":"1536:Txe2nu/m82CFnMxwZCLVfvDzQjLY69xAqBSDQpUO9flVnoO1NzpGGVitgFdAYbJF:TgUH821N89bCQpxffTRp5bNeKbsK","tlshash":"f6e3e889f191f2fca6a224a9412f444ef22e3f4ce5255410e6f8dc083a586d9bb37fd5","first_seen":"2026-05-10T12:25:39.843692Z","last_seen":"2026-05-10T12:25:39.843692Z","times_seen":1,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/2501-1456818fb1917ccc.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/2501-1456818fb1917ccc.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 14011\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C5lyoqNlrsdKnuO7stVruN4zuDeTwylgitu7IdALKEr55%2BSwe0H88Xn%2FVpDeDP%2FyxWUV%2FGZbn%2F3%2BzEpaPsjA7RMOasi69P5n2qTXd4byhp7ma%2FPih%2FkGUDuIdbap7Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec43be785691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56944,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (56944), with no line terminators","md5":"b796ef010d87f5e7fdda574639d51bcb","sha1":"e37048ff6fb3eab7b64c1249096011d2f9185255","sha256":"ff67b128ccdafcb0b368c4a9866fe0dfba31c1ed6ebbff74c69b5d78f3cbae5c","sha512":"18d41033de47491fb4ca399a30f5d4f485d3626a3595cf4f63885ac902eb52faf0b304b2d9281af2a61e64528f79088514f707648e21a72b074c401663ab6ab9","ssdeep":"1536:MIaQ+KAUl2qMG6rYVefWp+t45wvPz6h/Q9k4N:d5wvV","tlshash":"594374fd5bb009cda8ca46e67f0610ac373e51bab46d8948ed0f5538a1418e4fe27bc1","first_seen":"2026-05-10T12:25:39.844497Z","last_seen":"2026-06-25T11:11:41.170726Z","times_seen":3,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/404/index.html","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /404/index.html HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cestwin.com/404\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nvcmCp%2BUi%2Bxxm3QAYolo1jCXRybRvA%2B%2FcwVC6f4VFsg0fupYoI8s22%2BPBv3oxn%2FIcAo%2FZKE5T8RreaiMJsabA876MYf7%2FPnSj4byRI7YeDCF0C5FT1U1AHKc8C9B%2BA%3D%3D\"}]}\r\ncf-ray: 9f98ec43be795691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5628,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2199)","md5":"05224f1d1b4f4be693a6e422f576667c","sha1":"e3756c6798a83869902e2f5a35970de907ad4998","sha256":"5d79d0528bb817a86ed9168505aa018366ef0ce40dfc6c65eba701b50825ae7c","sha512":"17791fab2ea53f457b8b873c13121a1993b82b0ca65dbee0f122e24cc2dd8d9f2977ffccbca62e8191ae1d0e2f4776ca0a6b7bee0a3ebe071c03292aa7620184","ssdeep":"96:PVnyoLMy1vMyQiMyDQNJtU1hBDgbojHjeaU68hPlC7Fu3fTGpGTD5913f0fUqO:EUB1vBfBDXRHHyLzhPg7FefSpGB913MC","tlshash":"8fc185737c00842e13a38e4878db224cd26ae547cd35ede6b688586f01d97ec9477e4b","first_seen":"2026-05-10T12:25:39.845534Z","last_seen":"2026-05-10T12:25:39.845534Z","times_seen":1,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/greenColorDSGN/bg/preloader.svg","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /greenColorDSGN/bg/preloader.svg HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/_next/static/css/d4dbba7cd4889f6e.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 883\r\ncontent-type: image/svg+xml\r\ndate: Sun, 10 May 2026 12:24:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IiVovooW77%2Bg4lwbd9WgzmmfwQVK6DUzszYqgI42sv1OboMGdOg%2BXx45599JCox7kOcu%2BaFQ7UPkxrIC2tMVYbwOZkC84mPfFZoCK8Z7X1FKOgEp1PlIhLU1Wpgirw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f98ec43ce7a5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1652,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d4cf0d8e07d5ff0a22dde176b5e6926c","sha1":"bb3f41bbc80202459f3bd9a27054f855523f8ea7","sha256":"caa934ceb360955e8ef4eae0984d9ee475137fa2eee2b013586e25461bc1703d","sha512":"03fa93b18e1610abefaaeee02782234d164bd6de0d27aff61c5aa02e260d50e0b69233306e46bcabac18c6de2ce085a5859bd4ee71c2480acb0e4a719a3c5123","ssdeep":"","tlshash":"703122c04abc425cf604a6a9cf122875be1a64ce578564baf3ce9d06935805b8e0299b","first_seen":"2025-09-13T11:18:32.012309Z","last_seen":"2026-08-07T13:24:55.391517Z","times_seen":22103,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/muskColorDSGN/mix/preloader.svg","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /muskColorDSGN/mix/preloader.svg HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/auth/signup\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 19879\r\ncontent-type: image/svg+xml\r\ndate: Sun, 10 May 2026 12:24:47 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:47 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8rgUpixFop51GGb4GtSrCww7KF0xMnELKsjOC%2FVCq9Xx8u4eJB8JKSNIxx5IuI57zcIY4snm0PKGywp8ptPOQqTxp4P0eWeO%2FIW2EtAlIYh0burV3z%2FwRFFw6vCMeg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f98ec41be395691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72100,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"850e1745f4385099a3518d32d9145e74","sha1":"69969125e203608b7462ed6f8eaaa2917d48ab0f","sha256":"31ccdbf4baef0e8d2e5ef2d71b200f1b8288afa891e6ea50729feecd86dcb895","sha512":"617fd124ef9ca7077d4215668197b1bd456b3f6dd2063130545d4040c4ae11c1d37a569ad757ff74ee26ccedb5db2f150439c8c515bceef6c0434c81ae46edee","ssdeep":"768:YDpuRdZRXU55SUH2v9rirdHR96Hi3WdoanhrqCLUEBHp5ZuQ+Ip1xLtaD3LxUynT:Qk9eui+hrhUEBn8WXED3Lx/T8QdxGwlH","tlshash":"a06395ed2bf018c949c8c3d7ff5944a92d2a91fba5484908f65c4fac1b85c5eec47ac2","first_seen":"2025-11-16T06:53:31.140817Z","last_seen":"2026-08-07T13:24:55.380304Z","times_seen":23895,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/2643-f0046750557ecfce.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/2643-f0046750557ecfce.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 71174\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oiwAy9Xxy4uKPM2iGEesBsxpDoCZPRrL6ECXiufVVjJ2n%2BJNJtNVKr3JU5JIATaWcb4YmZVHcUXCs%2FM2lsBVVKqVvkvXbOjdB0U9%2BSHc1%2BmOtlgsMFYy%2BihsoyMRww%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec439e685691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":276387,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65438), with no line terminators","md5":"22e80ddc9f6a618a74ae2024b1368d41","sha1":"92a5cb5a65b6db5e9fe377f30c867d91395fe65f","sha256":"cebfb1f5431b46b051bea9d7bb688099a15ae2d0bc9d906fad0678294dce11eb","sha512":"96d815f6d514ef47fafeed39af74b87f862781c464d29d2983b0b580da47867a08fe38b8f4cec9a32f181dc4174b981ade00e3b797cc8cdbcb48a0e7446a071f","ssdeep":"3072:lhsm2vphspSZ5qYHGKTG2Ucav/sLJ7T8Z2KxTofh5p0yEdQ8IeCp5+V0z0DLdD3K:Q3koZ5XG5sdSqfhwyEGASNBpH/","tlshash":"83440c2769c4127c2bc362569d675e4ef35ca918e215b419f3d7ca3d338c8c4b13aba8","first_seen":"2026-04-13T13:34:34.673947Z","last_seen":"2026-08-07T13:24:55.369279Z","times_seen":6064,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestwin.com/_next/static/chunks/3715-25fd8c526afc029e.js","fqdn":"cestwin.com","domain":"cestwin.com","tld":"com"},"ip":{"addr":"104.21.67.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestwin.com/auth/signup","date":"2026-05-10T12:24:47.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cestwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 09:20:28 GMT","end":"Thu, 06 Aug 2026 09:20:27 GMT"},"fingerprint":{"sha1":"51:44:DE:EB:73:49:2A:14:79:34:D5:7E:D7:B1:7C:A1:2D:93:0E:2B","sha256":"18:DD:DA:62:D2:C5:E1:9A:9A:F8:AD:62:5F:D2:A5:C3:D1:FE:36:D1:AB:FB:FB:9F:6A:1E:0F:83:6C:6C:C2:28"}}},"request":{"raw":"GET /_next/static/chunks/3715-25fd8c526afc029e.js HTTP/1.1\r\nHost: cestwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestwin.com/404\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\ncontent-length: 21150\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 10 May 2026 12:24:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 12:24:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d59B1cUc0QnyOMNfcrKwdvUT1bQMCdC8uxskpvF%2FJY33IqK4dPCyDIYSBa59sSqaum%2B0WfQosX4x%2BubY9%2B2XNP37cRrUsxfLkeyvZb2OKp68v4PWATFpNcA1VJminw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f98ec43ae6f5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80593,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65480), with no line terminators","md5":"5b83aa58d40f72554598cb39387dc6b9","sha1":"876c697f5f701a17f8948756ea848450e5921ab0","sha256":"47d55e2b6897b5fedee6dc34b6db8cf710ac324213bed70acd4c4b76927160d4","sha512":"0514186a377b5a2b70a7bd4c1c99e6c41ac5bc7f3bf7665ff8d7239047ebd22747e768c2d929860d4cccc3b9b83e3eb0356962c279bec65445fb25109713092b","ssdeep":"1536:G8iMZecncsspNYlpAsz1jzsRr3KTArL7ml1C+Rmsh409IsH:JiQe2sTQmYm8D","tlshash":"9e73c764f1e0f6d4e1575399c92e460df12f2eacea25782cb3f5d818b7044d8622eba4","first_seen":"2026-04-21T01:09:36.161505Z","last_seen":"2026-05-15T19:29:52.737735Z","times_seen":56,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"cestwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}