{"report_id":"41bf22bc-14ef-46e5-8b9e-7d36912ebfc9","version":0,"status":"done","tags":[],"date":"2026-09-14T20:28:19Z","url":{"schema":"http","addr":"winboxlog01.com/","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":0,"asn":202412,"as":"Omegatech LTD","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"winboxlog01.com/","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"title":"WinboxLog Warehouse – WinboxLog Warehouse provides reliable and flexible warehousing and storage solutions in Johor, Malaysia. We offer secure storage, inventory management, cargo handling, and distribution support for businesses of all sizes. With convenient access to major ports and industrial areas, we help businesses store, manage, and move their goods efficiently.","dom":{"size":146311,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (24716)","md5":"1372c6c14b5f15d66809488716fa5e63","sha1":"f93fe79120bdc808d828007bb1645d19a56f7d62","sha256":"c434b52c52b14f79a810b445180f757a4d5295186f0a99ea450afbe7b08e41e8","sha512":"e96a2449e6cd4482ad004cdfb2df25efd1e6a867ba763c80eede20337da10bd107287410600b6409ad8384c27dfc2ab9b22e8133f8aa3cef3b148979559634cc","ssdeep":"3072:dAc71MlZobxemlUVugam2X1/WjlABXNGeZH:uVZobxemlUVugam2X1/WjO7","tlshash":"61e3c662436048f97d6f879ed54cb729b248ee05de46a6e5f4e6c04864ccef708b360e","dom_hash":"domhash272fea912a420d7e891a47c9c8528844","first_seen":"2026-09-14T20:28:20.900557Z","last_seen":"2026-09-14T20:28:25.109546Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"winboxlog01.com/","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":0,"asn":202412,"as":"Omegatech LTD","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-19T20:28:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-09-14","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"winboxlog01.com/oarucini/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"winboxlog01.com","ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2026-08-17","domain_rank":0,"first_seen":"2026-09-14T20:28:13.520761Z","last_seen":"2026-09-14T20:28:13.520761Z","alert_count":46,"request_count":45,"received_data":3748617,"sent_data":23363,"comment":"","tags":null,"fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Drupal:9","description":"Drupal is a free and open-source web content management framework.","website":"https://www.drupal.org/","common_platform_enumeration":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","icon":"Drupal.svg","categories":["CMS"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"winboxlog01.com/ceechapy/contact-form-7/includes/js/index.js?ver=6.1.7","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-09-14T22:49:08.189812Z","times_seen":243995,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/oarucini/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0866401d2e6bf0b38495c9f278cf96a","sha1":"78a648d27819f61c8b8678d64632d2c35ac6801f","sha256":"726ac59577c8aeeec94c61bfb7791a709e401b5d871d35c39a65cd948f6124e3","sha512":"7889b5b5b511b2d7af4752fb4d4ae4edcf96b18351224867e39c5dbff54fb6fadf3e18a40bfa35cd803d34426e95623768e64a132282f1813525a7d1844f101f","ssdeep":"768:oqEYJ8Mc56JH6u0HpQPu3iU7bwUCD2XZjVV300FKKh:YYJC0cHWujsIl39KKh","tlshash":"37031af8b2a8703183ef50b5503f040bf3366968588d8068ba65d4eb68f454a51f7fbd","size":40106,"data":"","first_seen":"2026-05-21T20:58:39.683163Z","last_seen":"2026-09-14T23:21:06.01451Z","times_seen":11334,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-09-14","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"winboxlog01.com/oarucini/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/oarucini/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-14T22:51:43.798157Z","times_seen":1056698,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/xubympyp/assets/js/animate.min.js?ver=1.1.7","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5dc948ce39f374e2221be1bc66dcdc0","sha1":"c75c32196754a508b8c96ad67edeaa8017d58389","sha256":"d7be488d0d86a408d2997fcff0d6707fa14579aede2381b65ea20007d07112c5","sha512":"4c8c86c3708471ea8227418a47427326bbb05e101b32487bfe770d433834c116be7476578b6432390e19270970adc2f1afe11ac4a3c52b7c54fa92c43458ddb0","ssdeep":"","tlshash":"7121fc352389487f48831ee11c5f49d53eb02ea1aca191a328b8984f4eb4fc4d0ee9e0","size":1359,"data":"","first_seen":"2024-09-28T07:56:09.021332Z","last_seen":"2026-09-14T20:28:25.148529Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/oarucini/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2f655e068f223e5da12d436aac88d38","sha1":"003146f39636a30ac250b0f043d61bcc01117b17","sha256":"5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9","sha512":"c3fa9c3955bbe3b74e30755c4c551204aa1a034f8d48c8ab2747eca57466409ac0dfbdfc76a7a3554ea64cdbd730bf3cae3c1270382e66df24afc8b8ed48bf38","ssdeep":"96:oE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMs:Xhgws4WTBYNB1C9aNwAMPyd0R3SGaMSn","tlshash":"f6c1a8c979def056235910a594afb005e134be2870deb800aae0c4957eb44cdb1b7fba","size":5791,"data":"","first_seen":"2026-08-19T23:17:42.197722Z","last_seen":"2026-09-14T23:04:07.562401Z","times_seen":9364,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/wp-i18n-js-after","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"48c3b6ee5b43e0a5add8e685d3a7df3f","sha1":"5c39a5e5a251d57802f9579c04da34bd3a04d91c","sha256":"6a7a1c23838426c92f09ca6d4079504e0961608f8810cf0711abf17b0a67d0f3","sha512":"c6c0d64db15e4852959aec2b6b36edd78a717d54af9cafd1bdfc066f84242ccacb6c93916fca53c4fa6b8b034d62b292b2684b9a35e5f579d1dd7bdf0b2e1e62","ssdeep":"","tlshash":"c70112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":793,"data":"","first_seen":"2025-12-03T22:07:56.683555Z","last_seen":"2026-09-14T20:28:25.16322Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/oarucini/js/dist/script-modules/block-library/navigation/view.min.js?ver=1bf28ded04f9f188bdcb","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa40dd851aca7b8c45de7991f13a8683","sha1":"4b9cb946ef66b3cc547f971b7915f023dd84da37","sha256":"fbe11af6f29f55ae480e2058aad3ac400315d2792c3b14346f016b70cebf3bb3","sha512":"51ea7694116308ed78b1a417f96ad0c41e842f8a94dd9640f3456c60ae53eea18fb908405c059675b56278986671c42d37f5d9049db2159558c10e73e1f50100","ssdeep":"","tlshash":"39517179726575b6cefe4788f330d538b3619dc1040a1442bd1806dfaaaeea1c1e1f6a","size":3033,"data":"","first_seen":"2026-07-31T14:57:46.364913Z","last_seen":"2026-09-14T23:21:06.052726Z","times_seen":1118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/oarucini/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-14T22:49:08.194906Z","times_seen":966455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/oarucini/js/dist/hooks.min.js?ver=f0f188028580e8dc1255","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"140ad332a76e011554bcab096a37f4ac","sha1":"72c9da62a624a99da82f8b53ecd2ba8d8e1bca88","sha256":"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1","sha512":"ccf2833ab9908f740779b84bfd97903f96572aedf6eb0a37f08e51a88f0634e03408bd3e87e2e0586483835a6e09736848e44907848902ef11f8114a21029eca","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiB:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2B","tlshash":"4fb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5107,"data":"","first_seen":"2026-08-19T23:17:42.247117Z","last_seen":"2026-09-14T23:04:07.525348Z","times_seen":9503,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/ceechapy/contact-form-7/includes/swv/js/index.js?ver=6.1.7","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-09-14T22:49:08.195458Z","times_seen":237170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/contact-form-7-js-before","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"84a525712aab3a78f7d7d132dbdb4b5b","sha1":"b91c11d66b75c341be52cf53bf32af0ee235d68a","sha256":"0c6c6e60850c2af5e171daa2ebadde0ec63d8c099e95f81a50623ad78c83780b","sha512":"c3b0d2d2da0a4794c081b997f8923de19e3ec130b90d2f98aac9796b721c30499b88032b9c053a29ddd3f9f22f3994a60d9fc423e48770f69c686b7b87195462","ssdeep":"","tlshash":"20112296d5ec1c0910e1c234003c2222b120951bcb2b9e95b20e008c2fe807aa414186","size":890,"data":"","first_seen":"2026-09-14T20:28:21.005927Z","last_seen":"2026-09-14T20:28:25.164126Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://winboxlog01.com/oarucini/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"winboxlog01.com/oarucini/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.743Z","timestamp":1789417667743,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /oarucini/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1 HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 19 May 2026 12:30:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13846\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40106,"size_decoded":14449,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (40105)","md5":"f0866401d2e6bf0b38495c9f278cf96a","sha1":"78a648d27819f61c8b8678d64632d2c35ac6801f","sha256":"726ac59577c8aeeec94c61bfb7791a709e401b5d871d35c39a65cd948f6124e3","sha512":"7889b5b5b511b2d7af4752fb4d4ae4edcf96b18351224867e39c5dbff54fb6fadf3e18a40bfa35cd803d34426e95623768e64a132282f1813525a7d1844f101f","ssdeep":"768:oqEYJ8Mc56JH6u0HpQPu3iU7bwUCD2XZjVV300FKKh:YYJC0cHWujsIl39KKh","tlshash":"37031af8b2a8703183ef50b5503f040bf3366968588d8068ba65d4eb68f454a51f7fbd","first_seen":"2026-05-21T20:58:39.683163Z","last_seen":"2026-09-14T23:21:06.01451Z","times_seen":11334,"resource_available":true,"data":null}},"time_used":427,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-09-14","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"winboxlog01.com/oarucini/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-14T20:27:46.145Z","timestamp":1789417666145,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://winboxlog01.com/\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=0\r\nexpires: Mon, 14 Sep 2026 20:27:47 GMT\r\ncontent-encoding: gzip\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Drupal:9","description":"Drupal is a free and open-source web content management framework.","website":"https://www.drupal.org/","common_platform_enumeration":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","icon":"Drupal.svg","categories":["CMS"]}],"data":{"size":146488,"size_decoded":20422,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (24716)","md5":"21005dac628b7749afe766bc4cfb7133","sha1":"ddc2d9473131db521be566d5e02b743e468d2f26","sha256":"34afe6b518a29c9d97ccc2049b730f9421abdd07c5edb9a0cc744115c75f37fe","sha512":"7c5538f4b2434fdde256a7c1cdd8496c8f7fb664cb19e4994a93c5a4920d03e0e01f2473a229e035911c50ff9bd99702df48cd8137c2b58ba21783cca517cd70","ssdeep":"3072:sPL7rMJZMp84wvSAIeTVoTXFSrZABXNGeZL:6wZMp84wvSAIeTVoTXFSry/","tlshash":"f9e3d562436048f97d6f879ed54cb729b248ee06dd46a6e5f4e6c04864ccef708b360e","first_seen":"2026-09-14T20:28:20.980867Z","last_seen":"2026-09-14T20:28:25.11178Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1185,"timings":{"blocked":-1,"dns":103,"connect":92,"send":0,"wait":892,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/ceechapy/contact-form-7/includes/swv/js/index.js?ver=6.1.7","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.539Z","timestamp":1789417667539,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /ceechapy/contact-form-7/includes/swv/js/index.js?ver=6.1.7 HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 21 Aug 2026 14:42:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3171\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12512,"size_decoded":3773,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-09-14T22:49:08.195458Z","times_seen":237170,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/phylsoop/2026/08/vecteezy_ware-house-and-storage-very-good-managing-stock-ready-for_8025327-1536x1024.jpg","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.556Z","timestamp":1789417667556,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /phylsoop/2026/08/vecteezy_ware-house-and-storage-very-good-managing-stock-ready-for_8025327-1536x1024.jpg HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 18 Aug 2026 14:03:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 288918\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":288918,"size_decoded":289472,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1536x1024, components 3","md5":"6626a6c524e8efdad2fcf0bb59d49522","sha1":"07a9f0a42dbddc16a49d2faa12ecb9e9b922c579","sha256":"e7b467936b4ba4682066ad72362704fa5a1cdd25e21bb506da58b8b8c1c58ab1","sha512":"2032aae8cd65d57d5419f2d6d9b9c91a18948ac34b1f4126cb2fd21f9264fac2a0dfde71bab200ca5f0e9106d2370e3b9c1caa45ecb7cc98d9a32dbae8a1c96f","ssdeep":"6144:Rb2kXfMD9zJVO9Cvmnqs+U3X912T3zmepYiGC8NohHysd:0uMZTOo+qQ3XO3mepV84Ssd","tlshash":"aa54234b84cf24da7ec251e5ab4671bc555ddc90e07bd640803aeeea9633b8cb707c68","first_seen":"2026-09-14T20:28:20.952604Z","last_seen":"2026-09-14T20:28:25.113174Z","times_seen":2,"resource_available":false,"data":null}},"time_used":626,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":376,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/ceechapy/contact-form-7/includes/css/styles.css?ver=6.1.7","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.515Z","timestamp":1789417667515,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /ceechapy/contact-form-7/includes/css/styles.css?ver=6.1.7 HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 21 Aug 2026 14:42:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 844\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2979,"size_decoded":1438,"mime_type":"text/css","magic":"ASCII text","md5":"b2b463a5bdb73833be2a6afbc1843ddd","sha1":"ade55e90dd7694b7974edd336b555e765967e702","sha256":"a3b9f5df6bf638a4cb583480bed6e18a84ad7141cc3d75b81094f91dd7b82f32","sha512":"431fcb88c720bc2ee3cd950772bbf03194b28f5a00c602287ea4877829ed377f0742dcff523e88e07dd4a7968ea8618fae59b883617d9112d61feee5167ae191","ssdeep":"","tlshash":"aa510264660028504bff92db6eaddb047b6e7481cd1faf97b0c21a7c57782851223e5e","first_seen":"2026-05-15T04:06:26.038056Z","last_seen":"2026-09-14T22:49:08.227613Z","times_seen":26233,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/oarucini/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.528Z","timestamp":1789417667528,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /oarucini/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 28 Aug 2023 15:14:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 27470\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":87553,"size_decoded":28073,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-14T22:51:43.798157Z","times_seen":1056698,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/oarucini/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.529Z","timestamp":1789417667529,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /oarucini/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Jun 2023 03:49:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4344\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13577,"size_decoded":4946,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-14T22:49:08.194906Z","times_seen":966455,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/nuphoost/assets/images/img10.png","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.766Z","timestamp":1789417667766,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /nuphoost/assets/images/img10.png HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 17 Aug 2026 14:38:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 73638\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":73638,"size_decoded":74190,"mime_type":"image/png","magic":"PNG image data, 781 x 581, 8-bit/color RGBA, non-interlaced","md5":"c531b0c2b0db6fe0009579ad6cd7a583","sha1":"3864373d1091241312143cc602bbc36cdb58dee1","sha256":"5c863963beeda4bfb2dd77e5212fc3810da92494ebdb9af3dea6030219490f4a","sha512":"295067c83821889e4197fd5af1bc9ee77efae130aa5cc48eafdc994b0b4bc82d8d38aad8b75ded1dc1b67b15c7ee2f01b0a38ee188fd7b1eca04462233768b5b","ssdeep":"1536:j881ckwOt7ItwnSCwa6N3CJsiOn4a9k4c2MtI6U6qJ7QSOCu1PGVt5VpWW:Q9bOt7wwnTwaICJ1Kb9Bc2CNU/JcSOde","tlshash":"c37301b14c648c71db84b7710ed337b83526e1529028c19f8fedf465a82a6f469d92e8","first_seen":"2026-04-16T19:46:42.956309Z","last_seen":"2026-09-14T20:28:25.116054Z","times_seen":3,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/nuphoost/assets/fonts/Poppins/Poppins-SemiBold.ttf","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.804Z","timestamp":1789417667804,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /nuphoost/assets/fonts/Poppins/Poppins-SemiBold.ttf HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 17 Aug 2026 14:38:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 155232\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":155232,"size_decoded":155784,"mime_type":"font/ttf","magic":"TrueType Font data, 13 tables, 1st \"GDEF\", 19 names, Microsoft, language 0x409","md5":"6f1520d107205975713ba09df778f93f","sha1":"8a4ace9392d06bcb7f8ea2f5169b07e4c383a90d","sha256":"248c0244b350ec68880996aa6be6d7796274b49992d5fcbbefe251906aa4ea36","sha512":"5e40d2ebe39605ed0c2d8be022dd716e51b018e1bb0ae0101164e1e02bcf6b7cca5ec0da2ebcb533d959ae766af8863b27d62efbba1755e9e8d45e7bce51fa36","ssdeep":"3072:0FyHGX8bZ0eysTnqHvobJixBp0TKf3H5z8MkKURj7i8w+fW+uQ:0kHGsysUnQ3tX","tlshash":"e8e3082bf7a7ca9ed7662a35cb76537715e9e436687f424b23066d13e8cb984ccc0201","first_seen":"2023-04-05T03:16:24Z","last_seen":"2026-09-14T21:50:08.037663Z","times_seen":4434,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/nuphoost/assets/fonts/Poppins/Poppins-Medium.ttf","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.807Z","timestamp":1789417667807,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /nuphoost/assets/fonts/Poppins/Poppins-Medium.ttf HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 17 Aug 2026 14:38:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 156520\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":156520,"size_decoded":157072,"mime_type":"font/ttf","magic":"TrueType Font data, 13 tables, 1st \"GDEF\", 19 names, Microsoft, language 0x409","md5":"bf59c687bc6d3a70204d3944082c5cc0","sha1":"283f21b44efbdbf276ba802be2d949a36bbc4233","sha256":"8d909883de81344e0fbcfef30e931872e92d9aeecdf85b6dcf6e0b28c078e98e","sha512":"b81b0bcafdd4279f3bf8d4d3865f51b9961292dad8b5ccbe88807c8acfb6b11d7cf185a09cfb7c9ef2217bbb842273cc15774b4e386c6a712ef65b03699805b8","ssdeep":"3072:AA8bVuDbH1JdRyEUrBDgd6KHzQ0yR859RH:AwbxRyECBDgd6KHzQ0Ky9R","tlshash":"8be3185bf7a7ce5ee7666a78e672636709ece835297f418f67026d13e8ca441cdc0200","first_seen":"2023-04-10T19:18:15Z","last_seen":"2026-09-14T21:50:08.053855Z","times_seen":3982,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/xubympyp/assets/css/animate.css?ver=1.1.7","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.524Z","timestamp":1789417667524,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /xubympyp/assets/css/animate.css?ver=1.1.7 HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 17 Aug 2026 14:36:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3361\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":69160,"size_decoded":3956,"mime_type":"text/css","magic":"ASCII text","md5":"8284a38d9a5f04491bd6b0bd667209e1","sha1":"19c1f4288b310c6d13e3b07015e55a03378e35a2","sha256":"59d580610ae2bcb5c14fdbb085c859ca365824723103d405eeaa3c62f54eeba5","sha512":"4beec943532f240a65fd4569d70ddab979682b9a7d99f9b93bc38d7b7bb91996a9b43b7188fafb2b92394826e2d9e0fe583d8cbf381693549e1fe30688a7b8ff","ssdeep":"384:43uuu32g2+uZublHlmGvG/01uHudaYLUJDpzEhZdQh:43uuuGt+uZuk01uHuO","tlshash":"f1631faf19d1114457634a5983df9e68273ce573182a9cee7382498bcf8bf9c63c9207","first_seen":"2023-05-05T09:28:13Z","last_seen":"2026-09-14T20:28:25.118581Z","times_seen":277,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/phylsoop/2026/08/ChatGPT-Image-Aug-17-2026-10_46_25-PM-150x150.png","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.548Z","timestamp":1789417667548,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /phylsoop/2026/08/ChatGPT-Image-Aug-17-2026-10_46_25-PM-150x150.png HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 17 Aug 2026 14:46:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 17583\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17583,"size_decoded":18135,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"d0b783ca6dae51e42847fdc74cd72d2e","sha1":"8922a60666ed91249efcead9c272468cad4f84c2","sha256":"407590ba00e4f81c39401f0dd8cd606e11fc6cddd8002d3394f68e49d9564f74","sha512":"d48d5de7df0ad08ee101a464ae2a22c1f41d051250c7ba34707d4d47c68a175667a44729962151604a52260f33e727018c875af148d0dd04870d434abd1ed87f","ssdeep":"384:/hskRdBq56cFwdjXGWjCd9FbH5woBCZKVH:2kNcczGWjCdLXwZKp","tlshash":"7c82d0b01eca6d9710f2402dd3acdf3a50b46be75c6168d7b86081712ebdbf65084a4f","first_seen":"2026-09-14T20:28:20.917216Z","last_seen":"2026-09-14T20:28:25.119896Z","times_seen":2,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/phylsoop/2026/08/vecteezy_cargo-airplane-with-open-loading-door-revealing-interior_79503349-1536x867.jpg","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.554Z","timestamp":1789417667554,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /phylsoop/2026/08/vecteezy_cargo-airplane-with-open-loading-door-revealing-interior_79503349-1536x867.jpg HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 18 Aug 2026 13:54:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 154591\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":154591,"size_decoded":155145,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1536x867, components 3","md5":"ac32d5a117e3ad297317bc34dccf99b0","sha1":"62ab0e7798dab1cb915419db4aeb5feb6857c9f3","sha256":"95fd5a2111d19d263b1170ea079bd8b2a0dc57d6b8703c8cbfe2f8053c50bf94","sha512":"8d8d0a6d22690df7aefbacb3665e55265373df7699e1412bed529a133fad83a6594a50302f4f6bad6b853d2c7a9fa41a888d11366dc562eb630f9c8d3ef96c82","ssdeep":"3072:quYATd+dNJulfqgtKt/mutS0cRk6oYUbMs/TRFIIBgMziO7IKGyzZ:quK+fcteuhskdYGIIBdH7IKPZ","tlshash":"3be3121f0f007b64060eb6dab007086f79219bf65553b8483abbeffd9ad49c59c813a1","first_seen":"2026-09-14T20:28:20.98956Z","last_seen":"2026-09-14T20:28:25.121268Z","times_seen":2,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":372,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/nuphoost/assets/images/img14.png","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.557Z","timestamp":1789417667557,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /nuphoost/assets/images/img14.png HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 17 Aug 2026 14:38:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4756\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4756,"size_decoded":5307,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"76e5b87ddccb321676098efa84c032f2","sha1":"74058434b929bdbd6542ea281ac9637a3d14e0ad","sha256":"70df0b5d79e2af1317107b07e4cfb91fb3f6f3251d40f0fb81d5594e3ee07475","sha512":"c0cda4639dc1c3b277d328c04dc76983bf66a778d53a59ad3d67122955829378c2fb967dcfc964441b1471099a914a8bb1a4dd591c9f5e12f528adfd1e8e9ada","ssdeep":"96:CV2jSVY6Osnw7aF/HIYnhJ80HEMfYweqi/VQ1cFe3c:hswWF/ln82fv1cMM","tlshash":"a5a15cad9ee07080148ddba105dab138f9b3084589d0b8a719cfbc475a9e8f50c1b1e3","first_seen":"2026-04-16T19:46:42.922613Z","last_seen":"2026-09-14T20:28:25.12216Z","times_seen":3,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/phylsoop/2026/08/vecteezy_huge-distribution-warehouse-with-high-shelves_22453176-1536x1024.jpg","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.549Z","timestamp":1789417667549,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /phylsoop/2026/08/vecteezy_huge-distribution-warehouse-with-high-shelves_22453176-1536x1024.jpg HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 17 Aug 2026 15:00:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 372065\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":372065,"size_decoded":372619,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1536x1024, components 3","md5":"b19b8502f5d1ce778e5ddccada314e75","sha1":"deca342d08b94353ac2abb1bdaa0486d25d674b6","sha256":"08d826c33e9b1dfd74b1d1546bcff2dec08f65f3e258c2538207880fa82425d0","sha512":"ce85ea77d7d159958fa256a497bdc9b323f6591fb0dc03498a0b09cb4e61e7f22a957603f66489506230f2c7c45906c5ec68ea574699fc054c9a809127b6214a","ssdeep":"6144:or3PbpKd0Fgr6MDaZGJbqf3EUPURwqSZwiYUbWdh8nUu7GwgUib:mfbkq46MbqfxsOLwiY2W3IBhib","tlshash":"7284232d46631123ce0f8ffac272cc24f518d420681de5e252d99659fff62d7087a9ad","first_seen":"2026-09-14T20:28:20.905097Z","last_seen":"2026-09-14T20:28:25.127319Z","times_seen":2,"resource_available":false,"data":null}},"time_used":635,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":472,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/nuphoost/assets/images/img16.png","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.560Z","timestamp":1789417667560,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /nuphoost/assets/images/img16.png HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 17 Aug 2026 14:38:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6675\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6675,"size_decoded":7226,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"6a91e9c3947d508869f2917e3b70914a","sha1":"280bc8a2e8a6735032bf6d89b6e5d7bd7315319c","sha256":"1eea7763e1c47c5bf75d576a69891d98228b58a765652340c5d4585a9db92aff","sha512":"953f32111b579a0448af3e385cc0509eab887acb2b7a36a190dda159048652be0ab4c98ae0cd34bfbaac1381be6f78b9ecc32e5fce2b2ff93db7e9676410e140","ssdeep":"192:Q8NnP5T0KFt6w9oZLg2aR9DDCecBM2hKLERt:Q8NnPp0MD9okRlDPcBRsc","tlshash":"ead18dcdbd249cd5c0fe191307eee07aa66e04d9f5f0cf610a9ee02bb4a137956512a1","first_seen":"2026-04-16T19:46:42.989338Z","last_seen":"2026-09-14T20:28:25.128918Z","times_seen":3,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/nuphoost/assets/images/img17.png","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.560Z","timestamp":1789417667560,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /nuphoost/assets/images/img17.png HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 17 Aug 2026 14:38:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4689\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4689,"size_decoded":5240,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"4cb54ed7eb5dd8a73949644ab3567cb4","sha1":"560b57041e31d602f8e8be53fc9ea3771c144936","sha256":"c2f1181e75856c412b6402c46ec6aee0d4a46a2246c259c5ce0e8ae3f931a5eb","sha512":"8e72394697124d78d911069df5defdfc963276a073578e75f430d746baaf7396197a2b21ddf7be0395d1364cfe46b0bf725ff7d54cd87ba16501fb02f5697074","ssdeep":"96:CV22fRxqj7aKB4jGLEN3Wo0a5Hcmt2TA9Kl3Y:ORSHtLENhHcLjlo","tlshash":"1da19f1678614f99d4de9e2624f276a34e07c4c4d1ccf4f729935ca44e370ad002aee7","first_seen":"2026-04-16T19:46:42.959231Z","last_seen":"2026-09-14T20:28:25.131613Z","times_seen":3,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/nuphoost/assets/fonts/Montserrat/Montserrat-Regular.ttf","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.794Z","timestamp":1789417667794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /nuphoost/assets/fonts/Montserrat/Montserrat-Regular.ttf HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 17 Aug 2026 14:38:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 330948\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":330948,"size_decoded":331500,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 36 names, Microsoft, language 0x409","md5":"203d753a80557746c23ce95191fbf013","sha1":"ec13ef1f2c99f8780d6f2eb3f9f27ef89f30161b","sha256":"ef9cf99f0175bef530b88934bd904fcf56f773cec6fd4dfb8ccaf7ce2bbd395e","sha512":"6e550ce93625419a15dae4f59966c18e26ae8cdcb54bf729de900463221fe33dfebd15777c87d5c49595daddfd908f448c16420f4c6432190fdb0ed99906a294","ssdeep":"6144:gNOIple1FXzYAOr387HRMsIHYuMYRU0vII9z6VTNGeNr:NFXzc74yz6tNnNr","tlshash":"07644b02bf06676dd5462d36dbb1c3b8b772be607f5d824bf48b6798e48f4b40984284","first_seen":"2025-09-28T22:24:11.457082Z","last_seen":"2026-09-14T20:28:25.132459Z","times_seen":478,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/oarucini/blocks/navigation/style.min.css?ver=7.1","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.511Z","timestamp":1789417667511,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /oarucini/blocks/navigation/style.min.css?ver=7.1 HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Aug 2026 02:44:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2178\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20776,"size_decoded":2773,"mime_type":"text/css","magic":"ASCII text, with very long lines (20776), with no line terminators","md5":"52314f0976fd06afc7a9bc305bf2f39c","sha1":"8830882b9876d959489386df254e31c096f81d91","sha256":"bfb2953c6eced1909de016645ff3d2da8cdbae613f956356a47188c8cc3e2dae","sha512":"d0d246270e71ac3b21d06160753f009750e7cf2386536ff59e3069867497642c8fb5903342e6f7bbb0223aaa8091c505cc189a3cb3b4ceca7448cb441a3fe278","ssdeep":"384:SsFyo7lc6g7jiUsA5zy1FW9X3MiUMFMTMqMfM3MqMSMWMCM9MVMz/UYvnkxrV7eG:SsFyo7lc6g7jiUsA5zy1FW9HMiUMFMTJ","tlshash":"fd92e3c05fb0acf4a9bb933b6e5490148623e903c5097ad5a0f3e694b68db545bd3f0b","first_seen":"2026-06-18T10:59:08.340618Z","last_seen":"2026-09-14T23:21:06.065719Z","times_seen":3265,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/oarucini/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.538Z","timestamp":1789417667538,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /oarucini/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216 HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 20 Aug 2026 02:44:11 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2267\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5791,"size_decoded":2869,"mime_type":"text/javascript","magic":"data","md5":"d2f655e068f223e5da12d436aac88d38","sha1":"003146f39636a30ac250b0f043d61bcc01117b17","sha256":"5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9","sha512":"c3fa9c3955bbe3b74e30755c4c551204aa1a034f8d48c8ab2747eca57466409ac0dfbdfc76a7a3554ea64cdbd730bf3cae3c1270382e66df24afc8b8ed48bf38","ssdeep":"96:oE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMs:Xhgws4WTBYNB1C9aNwAMPyd0R3SGaMSn","tlshash":"f6c1a8c979def056235910a594afb005e134be2870deb800aae0c4957eb44cdb1b7fba","first_seen":"2026-08-19T23:17:42.197722Z","last_seen":"2026-09-14T23:04:07.562401Z","times_seen":9364,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/phylsoop/2026/08/Lot-13A-U10.jpg","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.555Z","timestamp":1789417667555,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /phylsoop/2026/08/Lot-13A-U10.jpg HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 18 Aug 2026 14:13:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 79151\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":79151,"size_decoded":79704,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.1 (Windows), datetime=2022:03:21 22:47:08], progressive, precision 8, 595x398, components 3","md5":"cb5400921b1b2df7ae564c63687cfb76","sha1":"d00768ac47c1c41b9017fec9aa52f0a140169490","sha256":"c2dc04307198b3d60b6f4e6175545af0c13008b192189692fd31133beb3fc05d","sha512":"6977d84d98872bc7b5153d55cc330dda636b970f8ce39001e255049bc2571aa56c5a075c2b802efc593cbff95dd90fb4c91f7294421f39324b389cca5be135f8","ssdeep":"1536:MGMTJqDoGMTJqDPeCglC7t15s64Vh1jKo/zDS:TQJe3QJemJC7vGnLnS","tlshash":"1173f129ffcacc20def9993455cad75b73039948f263235179bc21907b626c0ad8a5d3","first_seen":"2026-09-14T20:28:20.938559Z","last_seen":"2026-09-14T20:28:25.135121Z","times_seen":2,"resource_available":false,"data":null}},"time_used":613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":363,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/nuphoost/assets/images/img42.png","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.558Z","timestamp":1789417667558,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /nuphoost/assets/images/img42.png HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 17 Aug 2026 14:38:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1127\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1127,"size_decoded":1678,"mime_type":"image/png","magic":"PNG image data, 20 x 17, 8-bit/color RGBA, non-interlaced","md5":"ce65c5bf2e9b494ab3975a1bae29fbbc","sha1":"61da1dadc03fb0fd4c9201c13d2bc3d7958540cb","sha256":"a84008c7d9a220d088629b8a2024993584dc23ecdba70b76e034c9c856449937","sha512":"eb0d8188e8557fd1709cac7cb7af6179a44f54a048de5e780ff42102e40195a0b0db320f9a8cbe5f3205a9864438480c7781573fdaccdf714747e7a673f887d9","ssdeep":"","tlshash":"fe21638dfa9165428298d95224f66057d9260980e0d0f0f2becec4175e302b64d24adb","first_seen":"2026-04-16T19:46:42.951449Z","last_seen":"2026-09-14T20:28:25.136429Z","times_seen":4,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/nuphoost/assets/fonts/Montserrat/Montserrat-Medium.ttf","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.798Z","timestamp":1789417667798,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /nuphoost/assets/fonts/Montserrat/Montserrat-Medium.ttf HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 17 Aug 2026 14:38:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 330872\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":330872,"size_decoded":331424,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 38 names, Microsoft, language 0x409","md5":"9d496514aedf5c9bb3f689de8b094cd8","sha1":"77f3553415d858c653baea45aacab20196776334","sha256":"cd161cba3a3cdcf68ad721920fcd164c87e7b7cc9e6bad510278c3fa378d91d2","sha512":"43dc0f9044a94191eda3b726d43e8d6d834a31fa6889e71ab01524f49ccf7da1165595b683cc05f366af7037ee8f5a3d3a051e3548aee2f0d1a6b93d105ab141","ssdeep":"3072:SuN2F7rdVREAhtzpQCcfjg1bsxsKWt4ABDnLeSk4R42xNEYq3Y6MYrkwn+imOTes:RNUrWlee2fc7BxQPh2brf9VxNNdxvNr","tlshash":"3b644d02bb07976cd5562d36cbb1c3b8b375ff60bf5d810bf48a2a99e48f9740950289","first_seen":"2025-09-27T18:54:03.276886Z","last_seen":"2026-09-14T20:28:25.137459Z","times_seen":170,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/phylsoop/2026/08/ChatGPT-Image-Aug-17-2026-10_46_25-PM-150x150.png","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:48.224Z","timestamp":1789417668224,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /phylsoop/2026/08/ChatGPT-Image-Aug-17-2026-10_46_25-PM-150x150.png HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 17 Aug 2026 14:46:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 17583\r\ndate: Mon, 14 Sep 2026 20:27:48 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17583,"size_decoded":18135,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"d0b783ca6dae51e42847fdc74cd72d2e","sha1":"8922a60666ed91249efcead9c272468cad4f84c2","sha256":"407590ba00e4f81c39401f0dd8cd606e11fc6cddd8002d3394f68e49d9564f74","sha512":"d48d5de7df0ad08ee101a464ae2a22c1f41d051250c7ba34707d4d47c68a175667a44729962151604a52260f33e727018c875af148d0dd04870d434abd1ed87f","ssdeep":"384:/hskRdBq56cFwdjXGWjCd9FbH5woBCZKVH:2kNcczGWjCdLXwZKp","tlshash":"7c82d0b01eca6d9710f2402dd3acdf3a50b46be75c6168d7b86081712ebdbf65084a4f","first_seen":"2026-09-14T20:28:20.917216Z","last_seen":"2026-09-14T20:28:25.119896Z","times_seen":2,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/wp-json/contact-form-7/v1/contact-forms/56/feedback/schema","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:48.225Z","timestamp":1789417668225,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /wp-json/contact-form-7/v1/contact-forms/56/feedback/schema HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, */*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json; charset=UTF-8\r\nx-robots-tag: noindex\r\nlink: \u003chttps://winboxlog01.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link\r\naccess-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type\r\nallow: GET\r\nvary: Origin,Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=0\r\nexpires: Mon, 14 Sep 2026 20:27:48 GMT\r\ncontent-encoding: gzip\r\ndate: Mon, 14 Sep 2026 20:27:48 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1167,"size_decoded":1099,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"bec4ed59a05096abe07a660398416a56","sha1":"a6b5fb66496db93293e9897770cb33be49eb38d3","sha256":"8631e1f1dc5b73532cd6e2e967d417453cb4b3143c544347311482d63fcfe798","sha512":"414564b6d60a8ed3d63feccd155c97de69da4997d8bba1d1cf2890a4fa902ffdccd45045aa274808b5e15105cabca489ad9c256d183cea50bd013c04c5c9aeff","ssdeep":"","tlshash":"a521ad8206ca8d6f5d0d39dc74af8f1385cb94f6dee65c80e211c44654da63ae722cee","first_seen":"2026-01-28T05:56:22.979012Z","last_seen":"2026-09-14T20:28:25.138148Z","times_seen":3,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":427,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/xubympyp/assets/css/blocks.css?ver=7.1","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.513Z","timestamp":1789417667513,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /xubympyp/assets/css/blocks.css?ver=7.1 HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 17 Aug 2026 14:36:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1568\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7509,"size_decoded":2163,"mime_type":"text/css","magic":"ASCII text","md5":"20a551c47e5edc0a776c7bee94369932","sha1":"c25d854c80c2be3e3608cde41f6001867fa64d84","sha256":"a9efe97fa4878d92348947d916a4680f6370fe9edea65f8d2d3de94f3426dc49","sha512":"801b12123841a53509d5a02ce1d193910bbb061e2b7f283a22efab4e2ceb7cad87c24547ac35676d64afa837406e560e3f9c27b6115cdd045be5a02fdffdc556","ssdeep":"192:fDne9wBhQso8bQKkuFN/SF6FGFNFJkKrJE/Etk:fDJfo8iuFN/SF6FGFNFyKresu","tlshash":"2af1778262714db434a762196b883ac13f875031d60eebd27d91e27ce7c82ddda7274c","first_seen":"2025-04-11T09:24:42.850077Z","last_seen":"2026-09-14T20:28:25.139008Z","times_seen":99,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/oarucini/js/dist/hooks.min.js?ver=f0f188028580e8dc1255","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.536Z","timestamp":1789417667536,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /oarucini/js/dist/hooks.min.js?ver=f0f188028580e8dc1255 HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 20 Aug 2026 02:44:11 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1675\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5107,"size_decoded":2277,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"140ad332a76e011554bcab096a37f4ac","sha1":"72c9da62a624a99da82f8b53ecd2ba8d8e1bca88","sha256":"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1","sha512":"ccf2833ab9908f740779b84bfd97903f96572aedf6eb0a37f08e51a88f0634e03408bd3e87e2e0586483835a6e09736848e44907848902ef11f8114a21029eca","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiB:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2B","tlshash":"4fb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-08-19T23:17:42.247117Z","last_seen":"2026-09-14T23:04:07.525348Z","times_seen":9503,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/ceechapy/contact-form-7/includes/js/index.js?ver=6.1.7","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.541Z","timestamp":1789417667541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /ceechapy/contact-form-7/includes/js/index.js?ver=6.1.7 HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 21 Aug 2026 14:42:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3724\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13452,"size_decoded":4326,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-09-14T22:49:08.189812Z","times_seen":243995,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/nuphoost/assets/images/img24.png","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.552Z","timestamp":1789417667552,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /nuphoost/assets/images/img24.png HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 17 Aug 2026 14:38:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1771\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1771,"size_decoded":2322,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"dac48f6e7e7b30c024f5cfd63dd889b3","sha1":"bc530c623a4a39612bd0ea3cd3e4ab523fda63ee","sha256":"b5b88985f0465c834a0ec76667d8c197e94618c11dd7307ffa64a85cb4576e81","sha512":"f1499dcaa3b2cebef7bef9a6507c089fab2f258528cd7a7e5c3e32a5976558a07e30e3174e0ddb7d26161e6c230e31623779b525f24a5fd4ff3762a9d334a8be","ssdeep":"","tlshash":"7731a7896a53a981ab45c94134f114bfbe636080e2f5e433bdcbdc562e211ae04598cb","first_seen":"2026-04-16T19:46:42.904387Z","last_seen":"2026-09-14T20:28:25.14279Z","times_seen":5,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/oarucini/js/dist/script-modules/block-library/navigation/view.min.js?ver=1bf28ded04f9f188bdcb","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.753Z","timestamp":1789417667753,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /oarucini/js/dist/script-modules/block-library/navigation/view.min.js?ver=1bf28ded04f9f188bdcb HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 20 Aug 2026 02:44:11 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 949\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3033,"size_decoded":1550,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3032)","md5":"fa40dd851aca7b8c45de7991f13a8683","sha1":"4b9cb946ef66b3cc547f971b7915f023dd84da37","sha256":"fbe11af6f29f55ae480e2058aad3ac400315d2792c3b14346f016b70cebf3bb3","sha512":"51ea7694116308ed78b1a417f96ad0c41e842f8a94dd9640f3456c60ae53eea18fb908405c059675b56278986671c42d37f5d9049db2159558c10e73e1f50100","ssdeep":"","tlshash":"39517179726575b6cefe4788f330d538b3619dc1040a1442bd1806dfaaaeea1c1e1f6a","first_seen":"2026-07-31T14:57:46.364913Z","last_seen":"2026-09-14T23:21:06.052726Z","times_seen":1118,"resource_available":true,"data":null}},"time_used":417,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/nuphoost/assets/fonts/Poppins/Poppins-Bold.ttf","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.799Z","timestamp":1789417667799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /nuphoost/assets/fonts/Poppins/Poppins-Bold.ttf HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 17 Aug 2026 14:38:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 153944\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":153944,"size_decoded":154496,"mime_type":"font/ttf","magic":"TrueType Font data, 13 tables, 1st \"GDEF\", 17 names, Microsoft, language 0x409","md5":"08c20a487911694291bd8c5de41315ad","sha1":"875cf0cecd647bcf22e79d633d868c1b1ec98dfa","sha256":"7219547ee25334cbac0fe4b3acf0bf631e48ebb622c71af038edaaa652c60875","sha512":"d1b6430ab61dfb667b1393ef4377ab49b19be86f0f3ae7fa062b5eae1c5b1d20de5aa22fdf519824b31b2d0fe18073a9b3ea5011c735a1886767922ce9476b4d","ssdeep":"1536:ynWSOZkPJr4O8jORN5pJR1JOWgmd5Fju/qIzYq+qJi5ExrwpcWS7J5ffnVxjSZUp:vSW8WO8qnJ4Bmd5tIzYAl7ffVaO6YxmK","tlshash":"2ae3082bf6a7cf5ee7266d74da72636345d8e43569bf824bb7026943e88b480cdc4201","first_seen":"2023-05-01T03:42:21Z","last_seen":"2026-09-14T21:50:08.052847Z","times_seen":4230,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/nuphoost/assets/fonts/Poppins/Poppins-Regular.ttf","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.808Z","timestamp":1789417667808,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /nuphoost/assets/fonts/Poppins/Poppins-Regular.ttf HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 17 Aug 2026 14:38:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 158240\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":158240,"size_decoded":158792,"mime_type":"font/ttf","magic":"TrueType Font data, 13 tables, 1st \"GDEF\", 17 names, Microsoft, language 0x409","md5":"093ee89be9ede30383f39a899c485a82","sha1":"fdd3002e7d814ee47c1c1b8487c72c6bbb3a2d00","sha256":"707fdc5c8bab57a90061c6a8ed7b70d5ffb82fc810e994e79f90bace890c255a","sha512":"4be480df0b639750483eb09229b4edcfdcd16141eb95d92a3f28a13bf737146d7cc5db6ad03a5cde258f71b589e5310b6d9bc1563ac7b1d40408eea236d96f4b","ssdeep":"1536:iBLCaPkPJr9Q0T+GNqUESJ/8w/lF703hmTWH6lrGcRAbf9EpthYp0wf0IDh1jlG4:6LCY8zQjGfJ/AaHjxlzOk7gb3Va4J","tlshash":"50f3091bf6e7ceaee7672a78ea72636614dce8362d7f454b23016913e8da441cdd0301","first_seen":"2023-04-10T19:18:16Z","last_seen":"2026-09-14T21:50:08.047705Z","times_seen":7295,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/phylsoop/2026/08/ChatGPT-Image-Aug-17-2026-10_46_25-PM-300x300.png","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:48.222Z","timestamp":1789417668222,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /phylsoop/2026/08/ChatGPT-Image-Aug-17-2026-10_46_25-PM-300x300.png HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 17 Aug 2026 14:46:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 74747\r\ndate: Mon, 14 Sep 2026 20:27:48 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":74747,"size_decoded":75299,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"2ef610f56efe673cfaf9aac1368085fc","sha1":"59b21b3a783c5773aed64afded3c049614544c34","sha256":"246d5860b5340318a9b42d11deff2d84e47c63ac133572badd54eff320ed517e","sha512":"fc0481ad3f8645db5925d24d6193be965c0fe5ea221ec9edbf03e23aa316f1f213aed747d7c2bb47cbdaff910fa255b1b87f017cc724853737d92478d29c2213","ssdeep":"1536:sAC0jMY0z6Z+oVrJ+HkV6yDbTnRy3HHZZDNXjyqXebi:/DMY0WZv6EVVrR4HHZxNXjyqXebi","tlshash":"e27302a27e7ad7091c42235d0d506b69890bdcd54d9402d3c89ae8feec11f0059efebe","first_seen":"2026-09-14T20:28:21.002709Z","last_seen":"2026-09-14T20:28:25.145819Z","times_seen":2,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/xubympyp/style.css?ver=7.1","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.516Z","timestamp":1789417667516,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /xubympyp/style.css?ver=7.1 HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 17 Aug 2026 14:36:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 506\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1271,"size_decoded":1100,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (569)","md5":"fa7c4ad8a37cfdd1599c46000ec7891d","sha1":"c625e1a3cff333c94ae1afb090c685ba2111b0fa","sha256":"44e0dee780a0b6cc12a8f7215446e7bca48093b887e81a39deaa5d86047958ba","sha512":"a4b74b35ee3d984962c1c781d7e3da11e8e0438661268098cfec94fd7d2c841720283b9d936c5bab0646fb1658d37d6ddde3691da9a1a72702bd85a0c2f4a471","ssdeep":"","tlshash":"fa21451b6c3536762fc207a3ee391489db668349f3e511c1f45ec280029996d0fb232a","first_seen":"2025-12-17T12:02:13.641189Z","last_seen":"2026-09-14T20:28:25.147664Z","times_seen":53,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/xubympyp/assets/js/animate.min.js?ver=1.1.7","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.531Z","timestamp":1789417667531,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /xubympyp/assets/js/animate.min.js?ver=1.1.7 HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 17 Aug 2026 14:36:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 438\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1359,"size_decoded":1039,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1359), with no line terminators","md5":"a5dc948ce39f374e2221be1bc66dcdc0","sha1":"c75c32196754a508b8c96ad67edeaa8017d58389","sha256":"d7be488d0d86a408d2997fcff0d6707fa14579aede2381b65ea20007d07112c5","sha512":"4c8c86c3708471ea8227418a47427326bbb05e101b32487bfe770d433834c116be7476578b6432390e19270970adc2f1afe11ac4a3c52b7c54fa92c43458ddb0","ssdeep":"","tlshash":"7121fc352389487f48831ee11c5f49d53eb02ea1aca191a328b8984f4eb4fc4d0ee9e0","first_seen":"2024-09-28T07:56:09.021332Z","last_seen":"2026-09-14T20:28:25.148529Z","times_seen":133,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/phylsoop/2026/08/vecteezy_warehouse-workers-reviewing-inventory-on-laptop_56711479-1536x1024.jpeg","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.554Z","timestamp":1789417667554,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /phylsoop/2026/08/vecteezy_warehouse-workers-reviewing-inventory-on-laptop_56711479-1536x1024.jpeg HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 18 Aug 2026 13:53:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 202198\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":202198,"size_decoded":202752,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1536x1024, components 3","md5":"50f20377d0e85f63a1f65aff82b9924c","sha1":"294e48bb1764f7abba6392fa7b62b463621282b5","sha256":"47329011609b4d1a514b3495aff7d3887665457efe14220a2dc206858247c062","sha512":"f30d71eff26733e93d8250219f712424008d72edc1a911150a70b4e1927987d7c17c467a54b97deedb7c272df1499aaf83531169ddacf329215dbee20cf827c5","ssdeep":"3072:hIFZKq8DSZSKoaM+/n+njdWdbuy7HnKNgnVgyczHI3UbnNRdIzy/SSZabX:hIH0noM+mxWgy2NcgycTbNszuZaD","tlshash":"be1423a40ba269f31a384cd5dc05ae12fee723d6b4d18dd18743b68364579c7703ab8b","first_seen":"2026-09-14T20:28:20.950801Z","last_seen":"2026-09-14T20:28:25.149806Z","times_seen":2,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":383,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/nuphoost/assets/images/img18.png","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.561Z","timestamp":1789417667561,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /nuphoost/assets/images/img18.png HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 17 Aug 2026 14:38:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1727\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1727,"size_decoded":2278,"mime_type":"image/png","magic":"PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced","md5":"ee283f2a23108f208204dbd57c7d57ca","sha1":"f32357541cbc31d197fe1abd8508bee6d5ba483c","sha256":"f2689b7d3030de1ea6f44c74519adacc68e7078c9f9848ff8af870def6e1c4cc","sha512":"91f2e763ece16babb674bcfb4084f9305514fa4f15d8be00e61254460254689a60891cf5fee024e5e4cabf0488363e030be522d7699048bd9db26383679ef979","ssdeep":"","tlshash":"9531f80dc9d03c81f14eda4325da6013bf010820cbe8b46ab5ce85bae9703b99524acb","first_seen":"2026-04-16T19:46:42.952442Z","last_seen":"2026-09-14T20:28:25.150978Z","times_seen":4,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/phylsoop/2026/08/Screenshot-2026-08-21-225105.png","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.562Z","timestamp":1789417667562,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /phylsoop/2026/08/Screenshot-2026-08-21-225105.png HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 21 Aug 2026 14:51:51 GMT\r\naccept-ranges: bytes\r\ncontent-length: 142441\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":142441,"size_decoded":142994,"mime_type":"image/png","magic":"PNG image data, 592 x 436, 8-bit/color RGBA, non-interlaced","md5":"8bf1ec6a4e0935e54df81010a616e2de","sha1":"41308447c66b50cf53e44e3604ecb9557a1bca99","sha256":"ed0a1032a1e1c797c3f16ad05882a409da6faacfd8935349c9df50603ea64af5","sha512":"e78d9563af245dcd118bf22a8f9ce75d0c834c49d66829d5056b2151af8376ad3e468dc370686af8d3a80bd9e916af8585327eb2e03a2fd990d98494a4caf8f2","ssdeep":"3072:QJqXV6yC38t9nHPL8z+Vqg7FXb4HK6Oh0AbkfkmPG39a:QJcYH3qrVFXb4WifkSG34","tlshash":"6ad313e19ee0894615f00dc2ca740e2aae2d541d7dacfbb0e5a8f11440bbb9905fded7","first_seen":"2026-09-14T20:28:20.941958Z","last_seen":"2026-09-14T20:28:25.153171Z","times_seen":2,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":288,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/nuphoost/assets/fonts/Montserrat/Montserrat-SemiBold.ttf","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.796Z","timestamp":1789417667796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /nuphoost/assets/fonts/Montserrat/Montserrat-SemiBold.ttf HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 17 Aug 2026 14:38:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 333988\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":333988,"size_decoded":334540,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 38 names, Microsoft, language 0x409","md5":"c1bd726715a688ead84c2dbf4c82f88d","sha1":"79f74616d68b87d6cf89798fe72259036326567a","sha256":"9c4db3814875410e7d64fdc8e69676c3b84968bb15bf3ace8b3944c59fbc56b6","sha512":"488b7b04cc03f92dd23823c356414fee745b5f1848491d25f8a7bde36cc8b045f2c724820dedecc09c2a07f2e02b841362d1a7e44de9c517e7813daf5a73cad1","ssdeep":"3072:juN2JjhEMw0tzpQCcfjg1bsxsKWt4ABDnLeSk4R42xNEYq3Y6MYrkwn+imOTeAx+:qNLBe0BSzjXEdIxfGMpw4EPMaylyPK","tlshash":"d1643c02ba06976dd4462d3ad7b1c3b87771fe617f59920bf8ca6ae8e4cf5a40c40285","first_seen":"2025-09-27T18:54:03.354819Z","last_seen":"2026-09-14T20:28:25.153898Z","times_seen":370,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":179,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/wp-json/contact-form-7/v1/contact-forms/56/refill","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:48.232Z","timestamp":1789417668232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /wp-json/contact-form-7/v1/contact-forms/56/refill HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, */*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json; charset=UTF-8\r\nx-robots-tag: noindex\r\nlink: \u003chttps://winboxlog01.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link\r\naccess-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type\r\nallow: GET\r\nvary: Origin,Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=0\r\nexpires: Mon, 14 Sep 2026 20:27:48 GMT\r\ncontent-encoding: gzip\r\ndate: Mon, 14 Sep 2026 20:27:48 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":2,"size_decoded":861,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-09-14T22:29:40.905402Z","times_seen":326480,"resource_available":true,"data":null}},"time_used":611,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":611,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/oarucini/blocks/cover/style.min.css?ver=7.1","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.512Z","timestamp":1789417667512,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /oarucini/blocks/cover/style.min.css?ver=7.1 HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Aug 2026 02:44:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1477\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20316,"size_decoded":2072,"mime_type":"text/css","magic":"ASCII text, with very long lines (20316), with no line terminators","md5":"3b4be549cedeaeb1ff5db2229e1c0b3a","sha1":"822c628ab6a7a86ee1d3266c38a048224ca0f61c","sha256":"be3d9ac2ba79c8054eeb370c6f58189a86920decd27ed49c65c18c442214d618","sha512":"4c62998cfa01303b5cc164e44cfff5eeeb601db19b672772a8e7581a8712022e64e9ef4a9a878b85365435742cc8d6ca5d1db1816cb85214caf9d0c03eb27a82","ssdeep":"384:N95x4jp56/P14vPFgJUe3T1MHhZna/7cpFc39cecdX3cBZDn/sNNgkgLyg+gNgGi:N0eJ+pi36DdXELLdhaG5c","tlshash":"2192894122e58cfd75dfbf691f3deb88670b5c11c1894fdba52ae054634ca8888b3b16","first_seen":"2026-06-18T21:32:34.590319Z","last_seen":"2026-09-14T23:21:06.05329Z","times_seen":1196,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/nuphoost/style.css?ver=1.1.7","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.522Z","timestamp":1789417667522,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /nuphoost/style.css?ver=1.1.7 HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 17 Aug 2026 14:38:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 523\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1346,"size_decoded":1117,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (558), with CRLF line terminators","md5":"d547bec8d9dbd9d1ee71646694f6cae3","sha1":"8a8db8661dcac9f14381cace48a829b7188f9109","sha256":"d9425b515e61598186dc14d490665694f9ef4ed4be0c285205b27348630e1006","sha512":"4629e0a7dc870e50a7f9cabb90ed688f38776aba0fcbabf9e7dcf15e84095bea2485b89a47a444db9baf5c06c1ba36f3d1c75d4f34af0636f9fa703f10461f92","ssdeep":"","tlshash":"ec2111095435657a6fc205c2f96d1863ca72c39ee7a110e1f45ac280327a51e86bc31a","first_seen":"2026-04-16T19:46:42.926005Z","last_seen":"2026-09-14T20:28:25.159074Z","times_seen":4,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/xubympyp/assets/css/theme-style.css?ver=1.1.7","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.525Z","timestamp":1789417667525,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /xubympyp/assets/css/theme-style.css?ver=1.1.7 HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 17 Aug 2026 14:36:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 235\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":565,"size_decoded":829,"mime_type":"text/css","magic":"ASCII text","md5":"8120ed7f250621a2aa28f0779898ff84","sha1":"a2b8056b3663dd6045ad660bf75ef3c96a473203","sha256":"55ab34e049b977bec80b7f7249fb3321389b37917982e1f2671f0d0e5bc94eb7","sha512":"91dab51208d5b676a7ee15672f955f3e3f0aa7622aee665e308f74e9173d716c09afc0fe37be2376919a4b97f733575ead5ab4e6109b03263d0f4099e169b581","ssdeep":"","tlshash":"90f08ba0147288c044ff833746bd800461e79913538dbbd1bec9e144ef097340b92f45","first_seen":"2025-04-11T09:24:42.85739Z","last_seen":"2026-09-14T20:28:25.160444Z","times_seen":110,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/phylsoop/2026/08/vecteezy_forklift-transporting-pallet-of-boxes-in-warehouse_70869692-1536x838.jpg","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.550Z","timestamp":1789417667550,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /phylsoop/2026/08/vecteezy_forklift-transporting-pallet-of-boxes-in-warehouse_70869692-1536x838.jpg HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 18 Aug 2026 13:49:19 GMT\r\naccept-ranges: bytes\r\ncontent-length: 200074\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":200074,"size_decoded":200628,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1536x838, components 3","md5":"2ddb1131bed096b8c3654ac7f0654961","sha1":"cb03f5f79fa6a55bdc90b7839c026ac5ca073c26","sha256":"f6eee665e9c562e6b6d7de1120b949caeb329582e78ef993cfa1cd6d84783a34","sha512":"fe9f3f31ee32a8a3c91d0d8c489538c8ffe730e6803d1a9c24b52da66ebfffbdcfd6980eda9b67cb26b5318a83a0321ea8f22efef8a763132f600c5826776622","ssdeep":"3072:GovF0GD1bfIGPGrB2e65EwkjdDExWgTPuWdaPJpR1CjROO5HoHHMIW515BpXv+u:J0sq2e62w8dDrgbuWda1qRO+KMh13p/r","tlshash":"fb14236807e3644498fa6ded2e75418840f051ce3ae4fc26d6dcd4e7a8c63b6c1ee4e1","first_seen":"2026-09-14T20:28:20.909495Z","last_seen":"2026-09-14T20:28:25.161399Z","times_seen":2,"resource_available":false,"data":null}},"time_used":633,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":471,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winboxlog01.com/nuphoost/assets/images/img15.png","fqdn":"winboxlog01.com","domain":"winboxlog01.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winboxlog01.com/","date":"2026-09-14T20:27:47.559Z","timestamp":1789417667559,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.winboxlog01.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 10:20:41 GMT","end":"Fri, 11 Dec 2026 10:20:40 GMT"},"fingerprint":{"sha1":"EB:CF:A3:44:FA:1B:D8:D6:76:6B:D5:0A:8C:10:81:6D:C3:52:E1:AF","sha256":"5F:AA:46:97:F3:5F:2D:DC:F8:61:B6:B6:89:8B:53:1B:27:68:D1:41:0D:DA:AC:CC:B0:8F:FD:24:59:F6:88:19"}}},"request":{"raw":"GET /nuphoost/assets/images/img15.png HTTP/1.1\r\nHost: winboxlog01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winboxlog01.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\nexpires: Tue, 14 Sep 2027 20:27:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 17 Aug 2026 14:38:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4652\r\ndate: Mon, 14 Sep 2026 20:27:47 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-download-options: noopen\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4652,"size_decoded":5203,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"0b0ff2b5fe8c0c37099f61eb89b7342b","sha1":"e873291f6ad223f322866e726e337dedefeac6e1","sha256":"d9bef719958afb746a8407719ff913bd71d92f81ec444384318addd4ff71edac","sha512":"8ccdc63b0d8b0e07c91c53affcfab4d108b7811b8b25094ac31179909a8431225ad3e56585b5821c20ca0fdf18d899ee502c93fd635e991483a5272911e78af0","ssdeep":"96:CV2KBw9QvZ5mt7JhG3HTe/UGEyvBaa/7Sqhej:q8AZpTecFyv7S0ej","tlshash":"81a17d50a5817e0422847eb320fe02a72ef29995dfc9f27afcc7c09b20a05724df5462","first_seen":"2026-04-16T19:46:42.978065Z","last_seen":"2026-09-14T20:28:25.162423Z","times_seen":3,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"winboxlog01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}