Report - newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh

Report Overview

Submitted URL
newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
IP
185.155.184.11
ASN
#5398 AS5398 SA
Submitted
2024-05-09 19:27:10
Access
public
Website Title
It's better than Loveme!
Final URL
newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
48

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
newwinner.life	unknown	unknown	No data	No data	13 kB	787 kB	185.155.184.11
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-05-09	1.1 kB	37 kB	142.250.74.67

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-09	medium	newwinner.life	Sinkholed
2024-05-09	medium	newwinner.life	Sinkholed
2024-05-09	medium	newwinner.life	Sinkholed
2024-05-09	medium	newwinner.life	Sinkholed
2024-05-09	medium	newwinner.life	Sinkholed
2024-05-09	medium	newwinner.life	Sinkholed
2024-05-09	medium	newwinner.life	Sinkholed
2024-05-09	medium	newwinner.life	Sinkholed
2024-05-09	medium	newwinner.life	Sinkholed
2024-05-09	medium	newwinner.life	Sinkholed
2024-05-09	medium	newwinner.life	Sinkholed
2024-05-09	medium	newwinner.life	Sinkholed
2024-05-09	medium	newwinner.life	Sinkholed
2024-05-09	medium	newwinner.life	Sinkholed
2024-05-09	medium	newwinner.life	Sinkholed
2024-05-09	medium	newwinner.life	Sinkholed
2024-05-09	medium	newwinner.life	Sinkholed
2024-05-09	medium	newwinner.life	Sinkholed
2024-05-09	medium	newwinner.life	Sinkholed
2024-05-09	medium	newwinner.life	Sinkholed
2024-05-09	medium	newwinner.life	Sinkholed
2024-05-09	medium	newwinner.life	Sinkholed
2024-05-09	medium	newwinner.life	Sinkholed
2024-05-09	medium	newwinner.life	Sinkholed

ThreatFox

No alerts detected

JavaScript (14)

	URL	Size	First Seen	Last Seen
	newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3	667 B	2024-05-09	2024-05-09
Pretty URL newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3 IP 185.155.184.11 ASN #5398 AS5398 SA Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-09 21:27:17 Last Seen2024-05-09 21:27:17 Times Seen1 Hash 71e7583a4059b83c188f875596572449 6edea20adcf6131b4e606ad95a7069e5cce225c0 be89a87fbb1b9bcb31792156765e0aea83f03070815b18ef9300adb66aa6aae6 Loading...

	newwinner.life/media/nutra/exit_prize_pilz.js	18 kB	2023-03-07	2024-05-18
Pretty URL newwinner.life/media/nutra/exit_prize_pilz.js IP 185.155.184.11 ASN #5398 AS5398 SA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 22:53:38 Last Seen2024-05-18 00:53:08 Times Seen71 Hash f366370aec06655e09be3ad5fca4946a 119b5149fe07664e2943ee8909ebe467c5100676 7fb071f3c35791b0acb47ec89abafcdb6ea943e523a5ecf263b9c07b04b8acf3 Loading...

	newwinner.life/media/nutra/loveme2/vegas.js	9.0 kB	2023-03-14	2024-05-18
Pretty URL newwinner.life/media/nutra/loveme2/vegas.js IP 185.155.184.11 ASN #5398 AS5398 SA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-14 19:50:06 Last Seen2024-05-18 00:53:07 Times Seen44 Hash 8e11487fff453b6e963c4eb7f2c4bd70 5fb41a21f3b11defd1905f8ebcb470ad09b5f599 a372fa5de549c139567d30adfe75bfa6ee9a664b4b03652c4f6f1f6ba50b5f19 Loading...

	newwinner.life/media/nutra/loveme2/jquery_002.js	3.9 kB	2023-10-12	2024-05-18
Pretty URL newwinner.life/media/nutra/loveme2/jquery_002.js IP 185.155.184.11 ASN #5398 AS5398 SA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-12 23:31:57 Last Seen2024-05-18 00:53:08 Times Seen40 Hash bccdd4bd13fd19a1877f65f1a5681c65 23e0c83790488ae5b85a5b40dc560635dc4d9266 cc9cc4e6ae2bcb59f8c48f5473b37ffd90c1740ce4b0f6caaf686643642d9dc8 Loading...

	newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3	76 B	2023-10-12	2024-05-18
Pretty URL newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3 IP 185.155.184.11 ASN #5398 AS5398 SA Introduced by scriptElement Embedded in HTML true Observations First Seen2023-10-12 23:31:57 Last Seen2024-05-18 00:53:07 Times Seen19 Hash e27983ad41c3d9eea0ff490793ecef4c 52837f8e5ba9caed53957cfadc41a0c7926ec54f 8fec2ede5af3457d53849f7227809a6225a6d100096378a4e4a1f3a3d7574e3b Loading...

	newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3	0 B	2023-03-07	2024-05-20
Pretty URL newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3 IP 185.155.184.11 ASN #5398 AS5398 SA Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-20 13:58:12 Times Seen37876229 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	newwinner.life/media/nutra/loveme2/jquery.js	93 kB	2023-03-07	2024-05-19
Pretty URL newwinner.life/media/nutra/loveme2/jquery.js IP 185.155.184.11 ASN #5398 AS5398 SA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:20:48 Last Seen2024-05-19 21:49:02 Times Seen642 Hash 11468602df014a21b203dc9bcd84d369 2cf8733fe01e2d149140cb840595fa5d21769f93 29c9e8752f25b17961e3c6ff72de34b1f1a157dfc5fabb68bd148b8ec9002b17 Loading...

	unknown	11 B	2023-04-11	2024-05-20
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-11 08:35:16 Last Seen2024-05-20 06:08:38 Times Seen811 Hash 5452eef011a3de912784b42ce2fc7550 ef35f2fa750aebb1309d55e3dc4ca82837694bb7 72be2137d1548d058391455199b02fff349a49f4f11279bbea362f344f8188f3 Loading...

	newwinner.life/media/nutra/loveme2/bootstrap.js	28 kB	2023-03-13	2024-05-18
Pretty URL newwinner.life/media/nutra/loveme2/bootstrap.js IP 185.155.184.11 ASN #5398 AS5398 SA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 19:34:39 Last Seen2024-05-18 00:53:08 Times Seen41 Hash 43f87e19e0caf824b4bb3338f8d88ba0 431b09e5df9e7d1fe0542c036bac01ca07aed059 c3183b4a71dd09f8a015b3c5de5bd7deffbe8863c2307c9d7462f9ff2d022175 Loading...

	newwinner.life/media/nutra/loveme2/touchswipe.js	11 kB	2023-03-07	2024-05-20
Pretty URL newwinner.life/media/nutra/loveme2/touchswipe.js IP 185.155.184.11 ASN #5398 AS5398 SA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:06:23 Last Seen2024-05-20 12:38:04 Times Seen2052 Hash e18a1319eeff8fcb4b6374b3fdda08d8 6b3670f59186923576e343e6b8b8daa645d14dbc 0ab340987711378e8cb5582b1f97f6938037712213396d8e7c7f8fa7b1ab4e5a Loading...

	newwinner.life/util/utils-mh.js	1.8 kB	2023-03-07	2024-05-18
Pretty URL newwinner.life/util/utils-mh.js IP 185.155.184.11 ASN #5398 AS5398 SA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 22:53:38 Last Seen2024-05-18 00:53:08 Times Seen57 Hash 09331f23c18939eba80afa054c81863a e04fc1bceb45f5b9c2a75631757cfe14ee7d138f cad9fcbe6681f6d1481e5778c30f204a0431222ea2a0dddc9242938be81a5426 Loading...

	newwinner.life/media/nutra/backbutton_pilz.js	910 B	2024-04-26	2024-05-18
Pretty URL newwinner.life/media/nutra/backbutton_pilz.js IP 185.155.184.11 ASN #5398 AS5398 SA Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-26 17:38:16 Last Seen2024-05-18 00:53:08 Times Seen18 Hash 0096f2510761690c77644df720b76d4f 7d3433f3387a7465b18e871757d2a0fdbc196879 619aa3aa8c9a4f5f597b89256ec618837561b3c7752891abe1e0ccbb8c82bc3b Loading...

	newwinner.life/media/nutra/loveme2/wow.js	7.1 kB	2023-03-08	2024-05-18
Pretty URL newwinner.life/media/nutra/loveme2/wow.js IP 185.155.184.11 ASN #5398 AS5398 SA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 20:08:17 Last Seen2024-05-18 00:53:08 Times Seen48 Hash 2b6d9f6931f3d0d5a88fbc68b48571a7 fce8e557a02d15a129f7e683233ad513c46f03db 70394ae11e694041cb4aafd0069608eacd0dc7bf294abaf561b49416221c079e Loading...

	newwinner.life/media/nutra/loveme2/trls.js	11 kB	2023-10-12	2024-05-18
Pretty URL newwinner.life/media/nutra/loveme2/trls.js IP 185.155.184.11 ASN #5398 AS5398 SA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-12 23:31:57 Last Seen2024-05-18 00:53:07 Times Seen40 Hash 824e23b544e1ce33bd5cb0e0f08abee9 28e54cef2a7ee1a257e5846d5c365e676d988dec 0abeee71f27e5585afc24af28e8db09eec6cc56228d2014e62fb60c167a930aa Loading...

HTTP Transactions (26)

URL IP Response Size

newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3

185.155.184.11

200 OK

8.8 kB

URL User Request GET HTTP/1.1
newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
IP
185.155.184.11:443
ASN
#5398 AS5398 SA

Certificate
IssuerLet's Encrypt
Subjectnewwinner.life
FingerprintB6:09:22:D9:2B:52:70:64:A5:42:DE:C5:F0:F4:7B:A7:03:7F:F7:01
ValidityWed, 10 Apr 2024 13:53:07 GMT - Tue, 09 Jul 2024 13:53:06 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (1888), with CRLF line terminators
Size
8.8 kB (8788 bytes)
Hash
e9e964106d8a2b4770e70dd1ef69bf0c
521bc6c5898a36ee85a39ec323bba482b40a1206
d83dfb5c93e5b9e09a12a36c6179577e2a9e58ad6ad61f66d08a64b099ef5869

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3 HTTP/1.1
Host: newwinner.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 19:26:43 GMT
Content-Type: text/html
Content-Length: 8788
Connection: keep-alive
set-cookie: sid=t2~sdbgmbwwpuqh0w55pkliyzqc; path=/
cache-control: private, no-transform

newwinner.life/media/nutra/loveme2/css.css

185.155.184.11

200 OK

7.4 kB

URL GET HTTP/1.1
newwinner.life/media/nutra/loveme2/css.css
IP
185.155.184.11:443
ASN
#5398 AS5398 SA

Requested by
https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Certificate
IssuerLet's Encrypt
Subjectnewwinner.life
FingerprintB6:09:22:D9:2B:52:70:64:A5:42:DE:C5:F0:F4:7B:A7:03:7F:F7:01
ValidityWed, 10 Apr 2024 13:53:07 GMT - Tue, 09 Jul 2024 13:53:06 GMT

File type
ASCII text, with very long lines (7382), with no line terminators
Size
7.4 kB (7382 bytes)
Hash
a8821cca0a818145d4c06e747a266bda
58a134d24607efff46ef1885aea1b8afee4fb3aa
385e961982fb66b800473dff6f49506309965a0ce9d767d2891c9bd553974b2b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/nutra/loveme2/css.css HTTP/1.1
Host: newwinner.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Cookie: sid=t2~sdbgmbwwpuqh0w55pkliyzqc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 19:26:43 GMT
Content-Type: text/css
Content-Length: 7382
Connection: keep-alive
ETag: "a8821cca0a818145d4c06e747a266bda"
Last-Modified: Tue, 21 Nov 2023 12:30:35 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CDE8611CBE8704
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223550#932068350/gid:0/gname:root/mode:33188/mtime:1661786449#588051000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-08-29T15:20:49.588051Z
Expires: Fri, 09 May 2025 19:26:43 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

newwinner.life/media/nutra/loveme2/bootstrap.css

185.155.184.11

200 OK

100 kB

URL GET HTTP/1.1
newwinner.life/media/nutra/loveme2/bootstrap.css
IP
185.155.184.11:443
ASN
#5398 AS5398 SA

Requested by
https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Certificate
IssuerLet's Encrypt
Subjectnewwinner.life
FingerprintB6:09:22:D9:2B:52:70:64:A5:42:DE:C5:F0:F4:7B:A7:03:7F:F7:01
ValidityWed, 10 Apr 2024 13:53:07 GMT - Tue, 09 Jul 2024 13:53:06 GMT

File type
ASCII text, with very long lines (65367), with CRLF line terminators
Size
100 kB (100253 bytes)
Hash
a41c95eb008b0ef5699d849b895cf2c5
59e328ad9922acdcd98c84a530237a32fd5394c5
8865775165a53d7ae0184858a69dd07de15a8a9628ba3290c13e0d6ddfe6760f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/nutra/loveme2/bootstrap.css HTTP/1.1
Host: newwinner.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Cookie: sid=t2~sdbgmbwwpuqh0w55pkliyzqc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 19:26:43 GMT
Content-Type: text/css
Content-Length: 100253
Connection: keep-alive
ETag: "a41c95eb008b0ef5699d849b895cf2c5"
Last-Modified: Wed, 20 Sep 2023 15:25:50 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CDE816B00DD6AD
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134512#716035310/gid:0/gname:root/mode:33188/mtime:1661786449#428050000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-08-29T15:20:49.42805Z
Expires: Fri, 09 May 2025 19:26:43 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

newwinner.life/media/nutra/loveme2/style.css

185.155.184.11

200 OK

4.8 kB

URL GET HTTP/1.1
newwinner.life/media/nutra/loveme2/style.css
IP
185.155.184.11:443
ASN
#5398 AS5398 SA

Requested by
https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Certificate
IssuerLet's Encrypt
Subjectnewwinner.life
FingerprintB6:09:22:D9:2B:52:70:64:A5:42:DE:C5:F0:F4:7B:A7:03:7F:F7:01
ValidityWed, 10 Apr 2024 13:53:07 GMT - Tue, 09 Jul 2024 13:53:06 GMT

File type
ASCII text, with CRLF line terminators
Size
4.8 kB (4829 bytes)
Hash
a0caba15403d6d90d1502d09dd31a719
2ec9ba652eb038be4589d8dcac47beec607a8ba1
5334acc3a26dab0288c09bad20a94318079a5f2e99e2fbc0826e04c46a6680de

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/nutra/loveme2/style.css HTTP/1.1
Host: newwinner.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Cookie: sid=t2~sdbgmbwwpuqh0w55pkliyzqc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 19:26:43 GMT
Content-Type: text/css
Content-Length: 4829
Connection: keep-alive
ETag: "a0caba15403d6d90d1502d09dd31a719"
Last-Modified: Wed, 20 Sep 2023 15:25:50 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CDE81698946B8F
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134512#716035310/gid:0/gname:root/mode:33188/mtime:1661844386#723709000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-08-30T07:26:26.723709Z
Expires: Fri, 09 May 2025 19:26:43 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

newwinner.life/media/nutra/loveme2/jquery_002.js

185.155.184.11

200 OK

3.9 kB

URL GET HTTP/1.1
newwinner.life/media/nutra/loveme2/jquery_002.js
IP
185.155.184.11:443
ASN
#5398 AS5398 SA

Requested by
https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Certificate
IssuerLet's Encrypt
Subjectnewwinner.life
FingerprintB6:09:22:D9:2B:52:70:64:A5:42:DE:C5:F0:F4:7B:A7:03:7F:F7:01
ValidityWed, 10 Apr 2024 13:53:07 GMT - Tue, 09 Jul 2024 13:53:06 GMT

File type
JavaScript source, ASCII text, with very long lines (3854), with no line terminators
Size
3.9 kB (3854 bytes)
Hash
bccdd4bd13fd19a1877f65f1a5681c65
23e0c83790488ae5b85a5b40dc560635dc4d9266
cc9cc4e6ae2bcb59f8c48f5473b37ffd90c1740ce4b0f6caaf686643642d9dc8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/nutra/loveme2/jquery_002.js HTTP/1.1
Host: newwinner.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Cookie: sid=t2~sdbgmbwwpuqh0w55pkliyzqc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 19:26:43 GMT
Content-Type: application/javascript
Content-Length: 3854
Connection: keep-alive
ETag: "bccdd4bd13fd19a1877f65f1a5681c65"
Last-Modified: Wed, 20 Sep 2023 15:25:50 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CDE816A5110024
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134512#716035310/gid:0/gname:root/mode:33188/mtime:1661786449#848051000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-08-29T15:20:49.848051Z
Expires: Fri, 09 May 2025 19:26:43 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

newwinner.life/media/nutra/loveme2/vegas.css

185.155.184.11

200 OK

10 kB

URL GET HTTP/1.1
newwinner.life/media/nutra/loveme2/vegas.css
IP
185.155.184.11:443
ASN
#5398 AS5398 SA

Requested by
https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Certificate
IssuerLet's Encrypt
Subjectnewwinner.life
FingerprintB6:09:22:D9:2B:52:70:64:A5:42:DE:C5:F0:F4:7B:A7:03:7F:F7:01
ValidityWed, 10 Apr 2024 13:53:07 GMT - Tue, 09 Jul 2024 13:53:06 GMT

File type
ASCII text, with very long lines (10453), with no line terminators
Size
10 kB (10453 bytes)
Hash
9ab6e9bb9e0bb4a7849c388ecc6012d0
d7564fd7e72c33618038153349e7eda4561d7f22
ed54db15188d20a7ef8b0d4b14b8bb777e7d77212a8976feab23e6a1680fd9d9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/nutra/loveme2/vegas.css HTTP/1.1
Host: newwinner.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Cookie: sid=t2~sdbgmbwwpuqh0w55pkliyzqc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 19:26:43 GMT
Content-Type: text/css
Content-Length: 10453
Connection: keep-alive
ETag: "9ab6e9bb9e0bb4a7849c388ecc6012d0"
Last-Modified: Tue, 21 Nov 2023 12:30:35 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CDE816A4215E19
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223550#984068461/gid:0/gname:root/mode:33188/mtime:1661786450#852052000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-08-29T15:20:50.852052Z
Expires: Fri, 09 May 2025 19:26:43 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

newwinner.life/media/nutra/loveme2/vegas.js

185.155.184.11

200 OK

9.0 kB

URL GET HTTP/1.1
newwinner.life/media/nutra/loveme2/vegas.js
IP
185.155.184.11:443
ASN
#5398 AS5398 SA

Requested by
https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Certificate
IssuerLet's Encrypt
Subjectnewwinner.life
FingerprintB6:09:22:D9:2B:52:70:64:A5:42:DE:C5:F0:F4:7B:A7:03:7F:F7:01
ValidityWed, 10 Apr 2024 13:53:07 GMT - Tue, 09 Jul 2024 13:53:06 GMT

File type
JavaScript source, ASCII text, with very long lines (9044), with no line terminators
Size
9.0 kB (9044 bytes)
Hash
8e11487fff453b6e963c4eb7f2c4bd70
5fb41a21f3b11defd1905f8ebcb470ad09b5f599
a372fa5de549c139567d30adfe75bfa6ee9a664b4b03652c4f6f1f6ba50b5f19

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/nutra/loveme2/vegas.js HTTP/1.1
Host: newwinner.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Cookie: sid=t2~sdbgmbwwpuqh0w55pkliyzqc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 19:26:43 GMT
Content-Type: application/javascript
Content-Length: 9044
Connection: keep-alive
ETag: "8e11487fff453b6e963c4eb7f2c4bd70"
Last-Modified: Wed, 20 Sep 2023 15:25:51 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CDE8612F3ACFDC
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134512#716035310/gid:0/gname:root/mode:33188/mtime:1661786450#920053000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-08-29T15:20:50.920053Z
Expires: Fri, 09 May 2025 19:26:43 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

newwinner.life/media/nutra/loveme2/trls.js

185.155.184.11

200 OK

11 kB

URL GET HTTP/1.1
newwinner.life/media/nutra/loveme2/trls.js
IP
185.155.184.11:443
ASN
#5398 AS5398 SA

Requested by
https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Certificate
IssuerLet's Encrypt
Subjectnewwinner.life
FingerprintB6:09:22:D9:2B:52:70:64:A5:42:DE:C5:F0:F4:7B:A7:03:7F:F7:01
ValidityWed, 10 Apr 2024 13:53:07 GMT - Tue, 09 Jul 2024 13:53:06 GMT

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
11 kB (11410 bytes)
Hash
824e23b544e1ce33bd5cb0e0f08abee9
28e54cef2a7ee1a257e5846d5c365e676d988dec
0abeee71f27e5585afc24af28e8db09eec6cc56228d2014e62fb60c167a930aa

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/nutra/loveme2/trls.js HTTP/1.1
Host: newwinner.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Cookie: sid=t2~sdbgmbwwpuqh0w55pkliyzqc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 19:26:43 GMT
Content-Type: application/javascript
Content-Length: 11410
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "824e23b544e1ce33bd5cb0e0f08abee9"
Last-Modified: Mon, 20 Feb 2023 09:36:06 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17CDE816A7C39193
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676822696#840029119/gid:0/gname:root/mode:33188/mtime:1661786450#788052000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-08-29T15:20:50.788052Z
Expires: Fri, 09 May 2025 19:26:43 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

newwinner.life/media/nutra/exit_prize_pilz.js

185.155.184.11

200 OK

18 kB

URL GET HTTP/1.1
newwinner.life/media/nutra/exit_prize_pilz.js
IP
185.155.184.11:443
ASN
#5398 AS5398 SA

Requested by
https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Certificate
IssuerLet's Encrypt
Subjectnewwinner.life
FingerprintB6:09:22:D9:2B:52:70:64:A5:42:DE:C5:F0:F4:7B:A7:03:7F:F7:01
ValidityWed, 10 Apr 2024 13:53:07 GMT - Tue, 09 Jul 2024 13:53:06 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (1617), with CRLF line terminators
Size
18 kB (17662 bytes)
Hash
f366370aec06655e09be3ad5fca4946a
119b5149fe07664e2943ee8909ebe467c5100676
7fb071f3c35791b0acb47ec89abafcdb6ea943e523a5ecf263b9c07b04b8acf3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/nutra/exit_prize_pilz.js HTTP/1.1
Host: newwinner.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Cookie: sid=t2~sdbgmbwwpuqh0w55pkliyzqc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 19:26:43 GMT
Content-Type: application/javascript
Content-Length: 17662
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "f366370aec06655e09be3ad5fca4946a"
Last-Modified: Mon, 20 Feb 2023 09:35:57 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17CDE877B08AD662
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843341#391674113/gid:0/gname:root/mode:33279/mtime:1655387453#414584649/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:53.414584649Z
Expires: Fri, 09 May 2025 19:26:43 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

newwinner.life/util/utils-mh.js

185.155.184.11

200 OK

1.8 kB

URL GET HTTP/1.1
newwinner.life/util/utils-mh.js
IP
185.155.184.11:443
ASN
#5398 AS5398 SA

Requested by
https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Certificate
IssuerLet's Encrypt
Subjectnewwinner.life
FingerprintB6:09:22:D9:2B:52:70:64:A5:42:DE:C5:F0:F4:7B:A7:03:7F:F7:01
ValidityWed, 10 Apr 2024 13:53:07 GMT - Tue, 09 Jul 2024 13:53:06 GMT

File type
JavaScript source, ASCII text, with very long lines (641), with CRLF line terminators
Size
1.8 kB (1751 bytes)
Hash
09331f23c18939eba80afa054c81863a
e04fc1bceb45f5b9c2a75631757cfe14ee7d138f
cad9fcbe6681f6d1481e5778c30f204a0431222ea2a0dddc9242938be81a5426

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /util/utils-mh.js HTTP/1.1
Host: newwinner.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Cookie: sid=t2~sdbgmbwwpuqh0w55pkliyzqc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 19:26:43 GMT
Content-Type: application/javascript
Content-Length: 1751
Connection: keep-alive
ETag: "09331f23c18939eba80afa054c81863a"
Last-Modified: Wed, 20 Sep 2023 15:26:19 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CDE877ACBEC850
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134513#312037172/gid:0/gname:root/mode:33188/mtime:1655386349#412168000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:32:29.412168Z
Expires: Fri, 09 May 2025 19:26:43 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

newwinner.life/media/nutra/backbutton_pilz.js

185.155.184.11

200 OK

910 B

URL GET HTTP/1.1
newwinner.life/media/nutra/backbutton_pilz.js
IP
185.155.184.11:443
ASN
#5398 AS5398 SA

Requested by
https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Certificate
IssuerLet's Encrypt
Subjectnewwinner.life
FingerprintB6:09:22:D9:2B:52:70:64:A5:42:DE:C5:F0:F4:7B:A7:03:7F:F7:01
ValidityWed, 10 Apr 2024 13:53:07 GMT - Tue, 09 Jul 2024 13:53:06 GMT

File type
JavaScript source, ASCII text, with very long lines (910), with no line terminators
Size
910 B (910 bytes)
Hash
0096f2510761690c77644df720b76d4f
7d3433f3387a7465b18e871757d2a0fdbc196879
619aa3aa8c9a4f5f597b89256ec618837561b3c7752891abe1e0ccbb8c82bc3b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/nutra/backbutton_pilz.js HTTP/1.1
Host: newwinner.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Cookie: sid=t2~sdbgmbwwpuqh0w55pkliyzqc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 19:26:43 GMT
Content-Type: text/javascript
Content-Length: 910
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "0096f2510761690c77644df720b76d4f"
Last-Modified: Mon, 29 Jan 2024 17:13:45 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17CDE713B6825E8F
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1706542825#367210492/gid:0/gname:root/mode:33279/mtime:1706548425#279446762/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2024-01-29T17:13:45.309Z
Expires: Fri, 09 May 2025 19:26:43 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

newwinner.life/media/nutra/loveme2/wow.js

185.155.184.11

200 OK

7.1 kB

URL GET HTTP/1.1
newwinner.life/media/nutra/loveme2/wow.js
IP
185.155.184.11:443
ASN
#5398 AS5398 SA

Requested by
https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Certificate
IssuerLet's Encrypt
Subjectnewwinner.life
FingerprintB6:09:22:D9:2B:52:70:64:A5:42:DE:C5:F0:F4:7B:A7:03:7F:F7:01
ValidityWed, 10 Apr 2024 13:53:07 GMT - Tue, 09 Jul 2024 13:53:06 GMT

File type
JavaScript source, ASCII text, with very long lines (7033), with CRLF line terminators
Size
7.1 kB (7064 bytes)
Hash
2b6d9f6931f3d0d5a88fbc68b48571a7
fce8e557a02d15a129f7e683233ad513c46f03db
70394ae11e694041cb4aafd0069608eacd0dc7bf294abaf561b49416221c079e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/nutra/loveme2/wow.js HTTP/1.1
Host: newwinner.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Cookie: sid=t2~sdbgmbwwpuqh0w55pkliyzqc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 19:26:43 GMT
Content-Type: text/javascript
Content-Length: 7064
Connection: keep-alive
ETag: "2b6d9f6931f3d0d5a88fbc68b48571a7"
Last-Modified: Tue, 21 Nov 2023 12:30:35 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CDE71F7132DB74
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223550#996068486/gid:0/gname:root/mode:33188/mtime:1661786450#980053000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-08-29T15:20:50.980053Z
Expires: Fri, 09 May 2025 19:26:43 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

newwinner.life/media/nutra/loveme2/animate.css

185.155.184.11

200 OK

45 kB

URL GET HTTP/1.1
newwinner.life/media/nutra/loveme2/animate.css
IP
185.155.184.11:443
ASN
#5398 AS5398 SA

Requested by
https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Certificate
IssuerLet's Encrypt
Subjectnewwinner.life
FingerprintB6:09:22:D9:2B:52:70:64:A5:42:DE:C5:F0:F4:7B:A7:03:7F:F7:01
ValidityWed, 10 Apr 2024 13:53:07 GMT - Tue, 09 Jul 2024 13:53:06 GMT

File type
ASCII text, with very long lines (45441), with no line terminators
Size
45 kB (45441 bytes)
Hash
29e266124fe67187233662b44d600146
533fc55c23eaa7e97ad193990b1ef3753fe3e03c
370a5fd4e65515aa26d2afe791d867fe031c685570d3a98e5441a5ad198c0640

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/nutra/loveme2/animate.css HTTP/1.1
Host: newwinner.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Cookie: sid=t2~sdbgmbwwpuqh0w55pkliyzqc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 19:26:43 GMT
Content-Type: text/css
Content-Length: 45441
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "29e266124fe67187233662b44d600146"
Last-Modified: Mon, 20 Feb 2023 09:36:06 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17CDE8169C0FD702
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676822696#836029113/gid:0/gname:root/mode:33188/mtime:1661786449#292050000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-08-29T15:20:49.29205Z
Expires: Fri, 09 May 2025 19:26:43 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

newwinner.life/media/nutra/loveme2/jquery.js

185.155.184.11

200 OK

93 kB

URL GET HTTP/1.1
newwinner.life/media/nutra/loveme2/jquery.js
IP
185.155.184.11:443
ASN
#5398 AS5398 SA

Requested by
https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Certificate
IssuerLet's Encrypt
Subjectnewwinner.life
FingerprintB6:09:22:D9:2B:52:70:64:A5:42:DE:C5:F0:F4:7B:A7:03:7F:F7:01
ValidityWed, 10 Apr 2024 13:53:07 GMT - Tue, 09 Jul 2024 13:53:06 GMT

File type
JavaScript source, ASCII text, with very long lines (32072), with CRLF line terminators
Size
93 kB (93113 bytes)
Hash
11468602df014a21b203dc9bcd84d369
2cf8733fe01e2d149140cb840595fa5d21769f93
29c9e8752f25b17961e3c6ff72de34b1f1a157dfc5fabb68bd148b8ec9002b17

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/nutra/loveme2/jquery.js HTTP/1.1
Host: newwinner.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Cookie: sid=t2~sdbgmbwwpuqh0w55pkliyzqc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 19:26:43 GMT
Content-Type: application/javascript
Content-Length: 93113
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "11468602df014a21b203dc9bcd84d369"
Last-Modified: Mon, 20 Feb 2023 09:36:06 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17CDE81658BE806B
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676822696#840029119/gid:0/gname:root/mode:33188/mtime:1661786449#784051000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-08-29T15:20:49.784051Z
Expires: Fri, 09 May 2025 19:26:43 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

newwinner.life/media/nutra/loveme2/bootstrap.js

185.155.184.11

200 OK

28 kB

URL GET HTTP/1.1
newwinner.life/media/nutra/loveme2/bootstrap.js
IP
185.155.184.11:443
ASN
#5398 AS5398 SA

Requested by
https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Certificate
IssuerLet's Encrypt
Subjectnewwinner.life
FingerprintB6:09:22:D9:2B:52:70:64:A5:42:DE:C5:F0:F4:7B:A7:03:7F:F7:01
ValidityWed, 10 Apr 2024 13:53:07 GMT - Tue, 09 Jul 2024 13:53:06 GMT

File type
JavaScript source, ASCII text, with very long lines (27650), with no line terminators
Size
28 kB (27650 bytes)
Hash
43f87e19e0caf824b4bb3338f8d88ba0
431b09e5df9e7d1fe0542c036bac01ca07aed059
c3183b4a71dd09f8a015b3c5de5bd7deffbe8863c2307c9d7462f9ff2d022175

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/nutra/loveme2/bootstrap.js HTTP/1.1
Host: newwinner.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Cookie: sid=t2~sdbgmbwwpuqh0w55pkliyzqc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 19:26:43 GMT
Content-Type: application/javascript
Content-Length: 27650
Connection: keep-alive
ETag: "43f87e19e0caf824b4bb3338f8d88ba0"
Last-Modified: Wed, 20 Sep 2023 15:25:50 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CDE71F7CA65D3D
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134512#716035310/gid:0/gname:root/mode:33188/mtime:1661786449#528050000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-08-29T15:20:49.52805Z
Expires: Fri, 09 May 2025 19:26:43 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

newwinner.life/media/nutra/loveme2/touchswipe.js

185.155.184.11

200 OK

11 kB

URL GET HTTP/1.1
newwinner.life/media/nutra/loveme2/touchswipe.js
IP
185.155.184.11:443
ASN
#5398 AS5398 SA

Requested by
https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Certificate
IssuerLet's Encrypt
Subjectnewwinner.life
FingerprintB6:09:22:D9:2B:52:70:64:A5:42:DE:C5:F0:F4:7B:A7:03:7F:F7:01
ValidityWed, 10 Apr 2024 13:53:07 GMT - Tue, 09 Jul 2024 13:53:06 GMT

File type
JavaScript source, ASCII text, with very long lines (11417), with no line terminators
Size
11 kB (11417 bytes)
Hash
e18a1319eeff8fcb4b6374b3fdda08d8
6b3670f59186923576e343e6b8b8daa645d14dbc
0ab340987711378e8cb5582b1f97f6938037712213396d8e7c7f8fa7b1ab4e5a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/nutra/loveme2/touchswipe.js HTTP/1.1
Host: newwinner.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Cookie: sid=t2~sdbgmbwwpuqh0w55pkliyzqc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 19:26:43 GMT
Content-Type: application/javascript
Content-Length: 11417
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "e18a1319eeff8fcb4b6374b3fdda08d8"
Last-Modified: Mon, 20 Feb 2023 09:36:06 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17CDE71F7F3A674A
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676822696#840029119/gid:0/gname:root/mode:33188/mtime:1661786450#720052000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-08-29T15:20:50.720052Z
Expires: Fri, 09 May 2025 19:26:43 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

newwinner.life/media/nutra/exit_prize_pilz.css

185.155.184.11

200 OK

2.7 kB

URL GET HTTP/1.1
newwinner.life/media/nutra/exit_prize_pilz.css
IP
185.155.184.11:443
ASN
#5398 AS5398 SA

Requested by
https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Certificate
IssuerLet's Encrypt
Subjectnewwinner.life
FingerprintB6:09:22:D9:2B:52:70:64:A5:42:DE:C5:F0:F4:7B:A7:03:7F:F7:01
ValidityWed, 10 Apr 2024 13:53:07 GMT - Tue, 09 Jul 2024 13:53:06 GMT

File type
ASCII text, with CRLF line terminators
Size
2.7 kB (2660 bytes)
Hash
79fd23f33edac74d3d36cce82e59034f
08100d5e924894c2550ff2643441de5cfe4818f2
f61d61e21e118725699a14b9b85a45185b12fbfea3220818c5ea6f811d520f29

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/nutra/exit_prize_pilz.css HTTP/1.1
Host: newwinner.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Cookie: sid=t2~sdbgmbwwpuqh0w55pkliyzqc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 19:26:43 GMT
Content-Type: text/css
Content-Length: 2660
Connection: keep-alive
ETag: "79fd23f33edac74d3d36cce82e59034f"
Last-Modified: Wed, 20 Sep 2023 15:25:44 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CDE898CD71F87F
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134512#300034010/gid:0/gname:root/mode:33279/mtime:1655385891#19286000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:24:51.019286Z
Expires: Fri, 09 May 2025 19:26:43 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

newwinner.life/media/nutra/loveme2/logo_loveme_w2.svg

185.155.184.11

200 OK

4.6 kB

URL GET HTTP/1.1
newwinner.life/media/nutra/loveme2/logo_loveme_w2.svg
IP
185.155.184.11:443
ASN
#5398 AS5398 SA

Requested by
https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Certificate
IssuerLet's Encrypt
Subjectnewwinner.life
FingerprintB6:09:22:D9:2B:52:70:64:A5:42:DE:C5:F0:F4:7B:A7:03:7F:F7:01
ValidityWed, 10 Apr 2024 13:53:07 GMT - Tue, 09 Jul 2024 13:53:06 GMT

File type
SVG Scalable Vector Graphics image
Size
4.6 kB (4564 bytes)
Hash
896592d7f2fa3d761c0b767e9399b010
ed1c0502263392938f4cbdd72afb1a8704bf840e
3417f549b6a1018ee687dd84aec136cb7fba2bb5b4c83cf269f9f8e958cc48de

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/nutra/loveme2/logo_loveme_w2.svg HTTP/1.1
Host: newwinner.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Cookie: sid=t2~sdbgmbwwpuqh0w55pkliyzqc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 19:26:43 GMT
Content-Type: image/svg+xml
Content-Length: 4564
Connection: keep-alive
ETag: "896592d7f2fa3d761c0b767e9399b010"
Last-Modified: Wed, 20 Sep 2023 15:25:50 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CDE71F7011B6AD
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134512#716035310/gid:0/gname:root/mode:33188/mtime:1661844386#659709000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-08-30T07:26:26.659709Z
Expires: Fri, 09 May 2025 19:26:43 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

newwinner.life/media/nutra/loveme2/slide1.jpg

185.155.184.11

200 OK

93 kB

URL GET HTTP/1.1
newwinner.life/media/nutra/loveme2/slide1.jpg
IP
185.155.184.11:443
ASN
#5398 AS5398 SA

Requested by
https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Certificate
IssuerLet's Encrypt
Subjectnewwinner.life
FingerprintB6:09:22:D9:2B:52:70:64:A5:42:DE:C5:F0:F4:7B:A7:03:7F:F7:01
ValidityWed, 10 Apr 2024 13:53:07 GMT - Tue, 09 Jul 2024 13:53:06 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2004x1252, components 3
Size
93 kB (93191 bytes)
Hash
d20559fa23a3b6ac3d2dc7198b4d9aeb
f9d6f585bc9795437e625f08cc564ed7457352c2
2f0c29a292967270877c10164fdbfc2ba99433f2f2954a8a5e9b7923d345deda

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/nutra/loveme2/slide1.jpg HTTP/1.1
Host: newwinner.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Cookie: sid=t2~sdbgmbwwpuqh0w55pkliyzqc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 19:26:43 GMT
Content-Type: image/jpeg
Content-Length: 93191
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "d20559fa23a3b6ac3d2dc7198b4d9aeb"
Last-Modified: Mon, 20 Feb 2023 09:36:06 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17CDE791B4E2A806
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676822696#840029119/gid:0/gname:root/mode:33188/mtime:1661786450#172051000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-08-29T15:20:50.172051Z
Expires: Fri, 09 May 2025 19:26:43 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

newwinner.life/media/nutra/loveme2/slide3.jpg

185.155.184.11

200 OK

88 kB

URL GET HTTP/1.1
newwinner.life/media/nutra/loveme2/slide3.jpg
IP
185.155.184.11:443
ASN
#5398 AS5398 SA

Requested by
https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Certificate
IssuerLet's Encrypt
Subjectnewwinner.life
FingerprintB6:09:22:D9:2B:52:70:64:A5:42:DE:C5:F0:F4:7B:A7:03:7F:F7:01
ValidityWed, 10 Apr 2024 13:53:07 GMT - Tue, 09 Jul 2024 13:53:06 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2004x1252, components 3
Size
88 kB (87796 bytes)
Hash
753c3dafd47b3d873bcb93bea0e9b843
692295a7b8c7feef4e95533572f2c78a955d7636
63a0fd6a584349b3d9aeb1143e700ec055de9767415e3cd789ddb42abdb2dafa

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/nutra/loveme2/slide3.jpg HTTP/1.1
Host: newwinner.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Cookie: sid=t2~sdbgmbwwpuqh0w55pkliyzqc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 19:26:43 GMT
Content-Type: image/jpeg
Content-Length: 87796
Connection: keep-alive
ETag: "753c3dafd47b3d873bcb93bea0e9b843"
Last-Modified: Tue, 21 Nov 2023 12:30:35 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CDE791B572E502
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223550#964068418/gid:0/gname:root/mode:33188/mtime:1661786450#448052000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-08-29T15:20:50.448052Z
Expires: Fri, 09 May 2025 19:26:43 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

newwinner.life/media/nutra/exit_prize_pilz.js

185.155.184.11

200 OK

18 kB

URL GET HTTP/1.1
newwinner.life/media/nutra/exit_prize_pilz.js
IP
185.155.184.11:443
ASN
#5398 AS5398 SA

Requested by
https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Certificate
IssuerLet's Encrypt
Subjectnewwinner.life
FingerprintB6:09:22:D9:2B:52:70:64:A5:42:DE:C5:F0:F4:7B:A7:03:7F:F7:01
ValidityWed, 10 Apr 2024 13:53:07 GMT - Tue, 09 Jul 2024 13:53:06 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (1617), with CRLF line terminators
Size
18 kB (17662 bytes)
Hash
f366370aec06655e09be3ad5fca4946a
119b5149fe07664e2943ee8909ebe467c5100676
7fb071f3c35791b0acb47ec89abafcdb6ea943e523a5ecf263b9c07b04b8acf3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/nutra/exit_prize_pilz.js HTTP/1.1
Host: newwinner.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Cookie: sid=t2~sdbgmbwwpuqh0w55pkliyzqc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 19:26:43 GMT
Content-Type: application/javascript
Content-Length: 17662
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "f366370aec06655e09be3ad5fca4946a"
Last-Modified: Mon, 20 Feb 2023 09:35:57 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17CDE877B08AD662
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843341#391674113/gid:0/gname:root/mode:33279/mtime:1655387453#414584649/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:53.414584649Z
Expires: Fri, 09 May 2025 19:26:43 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

newwinner.life/media/nutra/loveme2/slide2.jpg

185.155.184.11

200 OK

104 kB

URL GET HTTP/1.1
newwinner.life/media/nutra/loveme2/slide2.jpg
IP
185.155.184.11:443
ASN
#5398 AS5398 SA

Requested by
https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Certificate
IssuerLet's Encrypt
Subjectnewwinner.life
FingerprintB6:09:22:D9:2B:52:70:64:A5:42:DE:C5:F0:F4:7B:A7:03:7F:F7:01
ValidityWed, 10 Apr 2024 13:53:07 GMT - Tue, 09 Jul 2024 13:53:06 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2004x1252, components 3
Size
104 kB (103995 bytes)
Hash
a65ee09fd92937f92c41528c44f39946
c925204f8ee6575efe6a362297b52f40f07c239e
5049e8e1f171d39e568b07af76e8ce851a23a7803e08c2ac4030e15d0f7c668a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/nutra/loveme2/slide2.jpg HTTP/1.1
Host: newwinner.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Cookie: sid=t2~sdbgmbwwpuqh0w55pkliyzqc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 19:26:43 GMT
Content-Type: image/jpeg
Content-Length: 103995
Connection: keep-alive
ETag: "a65ee09fd92937f92c41528c44f39946"
Last-Modified: Wed, 20 Sep 2023 15:25:50 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CDE791BB886FFD
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134512#716035310/gid:0/gname:root/mode:33188/mtime:1661786450#316052000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-08-29T15:20:50.316052Z
Expires: Fri, 09 May 2025 19:26:43 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

newwinner.life/media/nutra/loveme2/slide4.jpg

185.155.184.11

200 OK

98 kB

URL GET HTTP/1.1
newwinner.life/media/nutra/loveme2/slide4.jpg
IP
185.155.184.11:443
ASN
#5398 AS5398 SA

Requested by
https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Certificate
IssuerLet's Encrypt
Subjectnewwinner.life
FingerprintB6:09:22:D9:2B:52:70:64:A5:42:DE:C5:F0:F4:7B:A7:03:7F:F7:01
ValidityWed, 10 Apr 2024 13:53:07 GMT - Tue, 09 Jul 2024 13:53:06 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2004x1252, components 3
Size
98 kB (98428 bytes)
Hash
505914d1ef7c9f4866de134238786a97
b653182306330f5b317f615623276244e78f7011
2e13a5b271e5e599502c948f583a4ffbd3ce3c8a998b73318552672fcdc8da66

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/nutra/loveme2/slide4.jpg HTTP/1.1
Host: newwinner.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Cookie: sid=t2~sdbgmbwwpuqh0w55pkliyzqc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 19:26:43 GMT
Content-Type: image/jpeg
Content-Length: 98428
Connection: keep-alive
ETag: "505914d1ef7c9f4866de134238786a97"
Last-Modified: Tue, 21 Nov 2023 12:30:35 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CDE791B57767F7
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223550#968068427/gid:0/gname:root/mode:33188/mtime:1661786450#592052000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-08-29T15:20:50.592052Z
Expires: Fri, 09 May 2025 19:26:43 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

fonts.gstatic.com/s/roboto/v15/Hgo13k-tfSpn0qi1SFdUfVtXRa8TVwTICgirnJhmVJw.woff2

142.250.74.67

200 OK

14 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v15/Hgo13k-tfSpn0qi1SFdUfVtXRa8TVwTICgirnJhmVJw.woff2
IP
142.250.74.67:443
ASN
#15169 GOOGLE

Requested by
https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 14524, version 2.0
Size
14 kB (14524 bytes)
Hash
16ddb1541046ada9b90cacf4adec839a
7346f70d00c734b1c4536a0c72ff8aa4ed49f667
d4911437335fe7ef206a68aa9ec2722381752db60a451c8223d141f79d3f3785

HTTP Headers

GET /s/roboto/v15/Hgo13k-tfSpn0qi1SFdUfVtXRa8TVwTICgirnJhmVJw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://newwinner.life
DNT: 1
Connection: keep-alive
Referer: https://newwinner.life/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14524
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 13:50:05 GMT
expires: Fri, 09 May 2025 13:50:05 GMT
cache-control: public, max-age=31536000
age: 20198
last-modified: Wed, 14 Jan 2015 22:47:08 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/raleway/v11/JbtMzqLaYbbbCL9X6EvaI_k_vArhqVIZ0nv9q090hN8.woff2

142.250.74.67

200 OK

20 kB

URL GET HTTP/2
fonts.gstatic.com/s/raleway/v11/JbtMzqLaYbbbCL9X6EvaI_k_vArhqVIZ0nv9q090hN8.woff2
IP
142.250.74.67:443
ASN
#15169 GOOGLE

Requested by
https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 20528, version 3.0
Size
20 kB (20528 bytes)
Hash
06f1c8615c08750cfa3d4a6a5b626298
82cd28ece4f64fa587e2858178f52b74ddd7fc5f
cb9e995177b57d7c077041796176f1c1a95c3105d6a1437c3d8d970d0d8f81fa

HTTP Headers

GET /s/raleway/v11/JbtMzqLaYbbbCL9X6EvaI_k_vArhqVIZ0nv9q090hN8.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://newwinner.life
DNT: 1
Connection: keep-alive
Referer: https://newwinner.life/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20528
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 22:12:47 GMT
expires: Fri, 02 May 2025 22:12:47 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 19 May 2016 23:53:43 GMT
content-type: font/woff2
age: 594837
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

newwinner.life/favicon.ico

185.155.184.11

204 No Content

0 B

URL GET HTTP/1.1
newwinner.life/favicon.ico
IP
185.155.184.11:443
ASN
#5398 AS5398 SA

Requested by
https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Certificate
IssuerLet's Encrypt
Subjectnewwinner.life
FingerprintB6:09:22:D9:2B:52:70:64:A5:42:DE:C5:F0:F4:7B:A7:03:7F:F7:01
ValidityWed, 10 Apr 2024 13:53:07 GMT - Tue, 09 Jul 2024 13:53:06 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: newwinner.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newwinner.life/?cid=1mrupbrrh5uje&o=b8ep4qq&t=solu.sh_Dating&u=x9nw0k2&x=3
Cookie: sid=t2~sdbgmbwwpuqh0w55pkliyzqc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 204 No Content
Server: nginx
Date: Thu, 09 May 2024 19:26:44 GMT
Connection: keep-alive
Cache-Control: no-transform

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (14)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL