{"report_id":"4b30c31e-2791-4c4d-9858-abb50cea27cb","version":0,"status":"done","tags":[],"date":"2026-08-30T02:38:54Z","url":{"schema":"http","addr":"winnersbank.online/","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":0,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"winnersbank.online/","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"title":"Equity World Holdings | Credit Card, Mortgage, Banking, Auto | EWH Online","dom":{"size":58618,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1061)","md5":"1790dc4968b00910f362e8f369a8841e","sha1":"4797632c28f0606906ccb86353a1694885ca1a67","sha256":"d9fd8472bcd8afa4d697290e465fd6dfb8a200c7d0d4d8c7d2c12924b771fdf6","sha512":"d7012256d2ae0418a3eb903cdb6c898a20dbb8814f72641585c055c410996279930ccf44a589ccc5820c5f6df0a8b6b3995d2d6ab89bf7de01b2aa7253dd2c50","ssdeep":"1536:Q4MWKkK5yKZpGyF6t72PdOYsoYvw9U7HIKx3KR4ccXi74ccreKofQ2rq5ccXi741:qgIAXUXbXxXnMIcE5M2z4","tlshash":"12431d2188b040370593a1e46a399f2bafe1ea17cd9b59107bfd07cd5fc3d928e67168","dom_hash":"domhash25dbc796f4834f33aa6790009de9538d","first_seen":"2026-08-30T02:39:00.453168Z","last_seen":"2026-08-30T02:39:00.453168Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"winnersbank.online/","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":0,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-04T02:38:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-23T22:23:59.870946Z","alert_count":0,"request_count":1,"received_data":30928,"sent_data":582,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"translate.google.com","ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-08-25T00:27:05.115589Z","alert_count":0,"request_count":2,"received_data":422,"sent_data":1020,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"3.79.72.4","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-08-28T18:32:04.579007Z","alert_count":0,"request_count":1,"received_data":1580,"sent_data":539,"comment":"","tags":null,"fingerprints":null},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-08-28T18:32:03.30552Z","alert_count":0,"request_count":4,"received_data":330891,"sent_data":1885,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"3.121.249.239","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-08-28T20:21:23.360467Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":633,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"assets.chaport.com","ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-07-07","domain_rank":504466,"first_seen":"2024-01-31T17:02:32Z","last_seen":"2026-08-24T03:22:50.105221Z","alert_count":0,"request_count":1,"received_data":84480,"sent_data":506,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"winnersbank.online","ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"domain_registered":"2026-02-10","domain_rank":0,"first_seen":"2026-04-06T21:11:45.746964Z","last_seen":"2026-04-06T21:11:45.746964Z","alert_count":40,"request_count":40,"received_data":3297585,"sent_data":21813,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Tiny Slider","description":"Tiny Slider is a vanilla javascript slider for all purposes.","website":"https://github.com/ganlanyuan/tiny-slider","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Tidio","description":"Tidio is a customer communication product. It provides multi-channel support so users can communicate with customers on the go. Live chat, messenger, or email are all supported.","website":"https://www.tidio.com","common_platform_enumeration":"","icon":"Tidio.svg","categories":["Live chat"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"app.chaport.com","ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-07-07","domain_rank":87646,"first_seen":"2015-08-24T06:07:03Z","last_seen":"2026-08-29T08:04:55.344327Z","alert_count":0,"request_count":4,"received_data":5051,"sent_data":2142,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-23T22:20:52.902616Z","alert_count":0,"request_count":6,"received_data":242174,"sent_data":3432,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-08-28T18:32:03.449136Z","alert_count":0,"request_count":1,"received_data":7743,"sent_data":521,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"code.tidio.co","ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-06-01","domain_rank":120056,"first_seen":"2014-11-27T09:26:14Z","last_seen":"2026-08-28T16:50:36.331803Z","alert_count":0,"request_count":2,"received_data":1054,"sent_data":974,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-08-28T18:32:04.297063Z","alert_count":0,"request_count":1,"received_data":18547,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"embed.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2026-08-24T21:09:43.85782Z","alert_count":0,"request_count":1,"received_data":365,"sent_data":488,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"app.chaport.com/javascripts/insert.js","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"29d2e99d5fcb02404184a538c82b6254","sha1":"ef4318b50add95249beac94e8433544a180f3960","sha256":"27b579092e300cf8d2457274b442dc87db8a173d97c72e19b41ba1d90c613c31","sha512":"76aa1c05f8bd676ec62cdd147fddd7c472b5e8241806ce2a4b0e6d72590237969e3652c442ec06fa7fd84be60c1a0f41d7167f37a1bf8cefaecbf23f89feadb6","ssdeep":"","tlshash":"5211be11a565905b0db92176bb2b730eb4bff7168a4c9a44291df6003b038d3a826cf9","size":998,"data":"","first_seen":"2025-03-16T17:07:37.611527Z","last_seen":"2026-08-30T06:24:29.572797Z","times_seen":1922,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.chaport.com/assets/insert-main-44130e3574b7e1b9a766249043f659de.js","fqdn":"assets.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"56db69a15fd0e641ce5559d3e4f700be","sha1":"401c15c1fcf0e8157177c3f03eae7d94983d8316","sha256":"c2e80cfcb8f09eb3c75630de54602ef3d460434ab825b2f20d17d94a0e7170ea","sha512":"32a30d76e464219b72e7da5dd68ea15c9d394518495a17e28ad89ee69e74795c55e69b71718c2d72b78aa701eaedcb44ef02c09d7e54c2b93aafce081a966f70","ssdeep":"1536:a6VmkhM1hDaYGcvezlk516w8N6Od9T2KBjtrEjv4SpkHBKlqWfw2:ZQc4yk5yKp5ffL","tlshash":"cb8329897040343b0aeb21b6357f310a213fe2696e495460b53ad7d07e7ae5b621bf7c","size":83508,"data":"","first_seen":"2026-08-11T14:07:40.77286Z","last_seen":"2026-08-30T06:24:29.314219Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-DabC6aZO.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"484b339ab8994cd2aa6196b02c94bf40","sha1":"4859d1218ce4eabd728109388b5e999e361399cf","sha256":"6f1773ddd0916b4b176d423ef1ac87883da34e76dd895250be5ccca462fbf0b6","sha512":"ed195878480c14d1a519189d01ea5f90e05ba387f64c7f6958515af3a5cb3375f3a73ff98cf9f9602eaf50f779fc32521c76640ae170c056a00d76ec42f0cf92","ssdeep":"384:a2NcFT88tMPdBgaw5O+mvRan7/AKsDoKVwA3Q+crsbUzgfTtQfQIeIa:ZNcFX+dBgaw5O+aanrkoK2A3Q+cwbUwZ","tlshash":"9672e8741210743f712fac492a6df497723ad298e597c5289a2fdd5c36c8cc0a873bb5","size":16028,"data":"","first_seen":"2026-08-27T10:24:41.410826Z","last_seen":"2026-08-30T04:53:38.319479Z","times_seen":149,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"75a92bf0b7262ea95aeb905148bbdc0e","sha1":"878ef66813fe4ea27c7a26d305cfe8725b60719a","sha256":"551f05790db1227ade331411938bf15f6eef4de8329649c7d4f40f38c493ccc6","sha512":"648224477ebffcb9bc340f550d5a4f0e49dac46b2a95833fbd4faa0aec48d78d566322363bb443a58de62a9917a0779f2054f51074809815c7401e24558b1bac","ssdeep":"","tlshash":"5fc09247f5b0164b049ae20ae387488c72bc8509463a0e292791a0ca3eb3f9d070e1a8","size":132,"data":"","first_seen":"2023-03-13T22:54:55Z","last_seen":"2026-08-30T06:24:29.613484Z","times_seen":1558,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb28ed4220ce3f3cc5c1f5de25945c34","sha1":"c267fa439629af4662a3db09d6576744503f0f08","sha256":"52c17ee371ddf1b92fba13ef16c5ac720946097241179a55ac6544457d968421","sha512":"541708637cd82d0220916bf4cfcfd1ae694fa84355d2ecb50a488810b0a3df96a3616f20e6ae7f4d7147c0186080010300abde51ba7b80d33f74110f5e9b8b5b","ssdeep":"","tlshash":"3d31d25a0cb110236003f43a9d9e9306e224d20fcc68bc357d8e02946f4e62e26fe791","size":1514,"data":"","first_seen":"2026-06-21T08:16:26.109978Z","last_seen":"2026-08-30T02:39:00.554449Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"7f8cc642a92ffb31b230319065b27a7a","sha1":"d43de31bf7cc3013edef96ab8c2fa0e959df054e","sha256":"63cf909bced83be52b780bf59bc583c8310d5284bbc998406d9f8e515e6c5d66","sha512":"ae9bce8a92c2c56b437822f57a7a1e1a1275639ffa7fb0c8522bb66f9a0353b362b9a3ec7b77bbbd2ec19bffaa8fb00f0163327d41c759c57801875c28fe4ea9","ssdeep":"","tlshash":"45e0269c3a807c359253559754f3de4c35e33028a569eca1999f8c492a18a8dc52dfa8","size":338,"data":"","first_seen":"2026-08-30T02:39:00.556176Z","last_seen":"2026-08-30T02:39:00.556176Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"73e6c5532e9d1dbf234f860969682fa2","sha1":"c503f5f509173d84099683c79ffe52c6e689f195","sha256":"d1aca0b952386de1adab92699d9222b00bb2ec59891dededad30396d9d613409","sha512":"1df4e9e409aca2436cd89b334e304a49bd6e85a6b313bb470a04a2687c1535406148eb1ce7ed345fa716ad244f0f3fdabda1db98cbbaebb827165e0c1c3bf3a0","ssdeep":"","tlshash":"9ff0d49d3d00103625473034a3b7c909729fe2581255d708849adc053d76aedcc05d2c","size":472,"data":"","first_seen":"2026-08-30T02:39:00.557425Z","last_seen":"2026-08-30T02:39:00.557425Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"c26729ee252e7f4c5aa5be2e4f8ba6a4","sha1":"45caf3c12e41b0a778640c75bf04ed790b84cce1","sha256":"d5157e978572daf67a5e2de0f26df5eccb6a3100e17345bee143f8c4e57a45fa","sha512":"9561990f653eb4d8e24d3acd24d270516f69e1b32a81e4bb6c6f298bee64344488356d8ead177fa72d3dd68db3d83e7ad42d49595c93d66a991ba24f3ae614c7","ssdeep":"","tlshash":"67e0ab7c3c744044079300b4c0a7e2293a4b30604065dd57849688791cf0fc9ad02994","size":416,"data":"","first_seen":"2026-08-26T04:09:56.647078Z","last_seen":"2026-08-30T02:48:43.848626Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/js/jquery.min.js","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0875e8621fafec58e50b8cf9c9bf00c","sha1":"e7d58789c3daf3efaac87be3d54d87f2dce6c104","sha256":"250dbc3e90117abd3ec4631299787ca4446e971548e403bb4e351e58c7c60d9f","sha512":"0a85e1929195d706b8974d78f62ace287311835588633bc46a5b763a2e162650e936039911b8a0587dad150a1eb758e331835a68f42aae2ad7bd9db44876bc6d","ssdeep":"3072:AYh8eip3huuf6IidlrvakdtQ47GKjPhQDb:Ai8eGRuufsr5zQ47GKjPyDb","tlshash":"83a308ddb2c670224ba731b9407f510bf136199d684d8450f269d8eabc7ca4e823bf6d","size":100700,"data":"","first_seen":"2023-03-14T00:12:17Z","last_seen":"2026-08-30T02:39:00.53299Z","times_seen":161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/js/bootstrap.min.js","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"2aa3c63a2d8b20e00b03d74e1fdcdb61","sha1":"be3fe98a267e61f474a7d265697633d3a056409e","sha256":"234637632bb4c986788d73ea7a97084ef9bcb55a52745b3cb8e9f6cbeea290ca","sha512":"8b4cb9966178ce39c9b717f65c945469687e5736a3b158b82e511628b3c57838f7e88aee4ac7bbaf7853484818b918d96659d7c98be0aa90f45e75320469bc74","ssdeep":"768:wVgB79Mr3uDTVayu8Of8rm7MT5ZFcHUbw8gpQCYewiTlAx17j0FhlG8KktWyh6O:wQYY28meG+zgA8OO","tlshash":"0b53924ab254787206cf7475817f060fb33a6899a446813cb96ad8de1b7cc897173fb8","size":61772,"data":"","first_seen":"2023-03-08T08:18:24Z","last_seen":"2026-08-30T02:39:00.517109Z","times_seen":240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/js/glightbox.min.js","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1c6320483ed2ea08bd134dd7677d395","sha1":"443be7989be8d06a2b89852561cf9d55147cb2bd","sha256":"f20640b91ad814f8e36fc22e49adec01e6e22b5797569c1e6ed21cf4733e4c7b","sha512":"837996951397652605234d2057bd1864286c95fc2a8478de86ee6ea8207f1d98d8bd9decc93441ad7693a159cdbf265bb395aea6d636db9e0ae3202e42efd318","ssdeep":"768:j6f+pzn1TR/ZIMUbAN6+VQny3UOPEIOf2IvIYf0X+F5GYxbnZzw+XeNgq91Nk/wp:HfN6s3UMEwa5GqbnZzw+XeNgG1Nk/w5D","tlshash":"7413f809b286747604db617aa03f970bb2b621092902d09cf47edcd66db8d9e3167ff1","size":44919,"data":"","first_seen":"2023-03-08T02:17:38Z","last_seen":"2026-08-30T02:39:00.502807Z","times_seen":260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/js/wow.min.js","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"164b265e6089f412b7927848018ae6a1","sha1":"1717e6b487126c5c3e992d47dba4c6c10f4529bc","sha256":"81c4cb0bc57b5cce1816bd704f7a2b12ec2b143c6a067402644d4a139b273350","sha512":"956bbda2e4f3069c72d8dbc003d04d02a6026428beb9b9c8b0b78eb1dcce9b73b6f619b5558a4eec9c6d681eaec6ebb45e4ecd504a77ef9ad69b9b95373a3270","ssdeep":"192:7mEE6yAmu6qUxbU5C9nrr1GkEPIAeJ3KO4poIR:iEE/Amu6qUxVBxGkAI///IR","tlshash":"58f1bba5374a70718a9b6176c92f0202a532256e74d4c8ec747cddd4aeb4a29336bf3c","size":8157,"data":"","first_seen":"2023-03-07T01:42:37Z","last_seen":"2026-08-30T04:45:17.604566Z","times_seen":3565,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/info/widget-assets?jsonpCallback=true\u0026id=10617afa608d0dc1d592c4cdfd385d737247a84d","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"819fea29753c98623edd35dc8da4152b","sha1":"e54330e7ba3cb3419361dbc04472987b10c657e0","sha256":"70af5fcde233c11f3cc5ae70fd8122b850abdcb42d24d3901382d42ba85d1d70","sha512":"d29008058ac1b9355d076f5735393b75d7f8336648e3f5193612327ee128a1b0b234416852621a60b0be6163cac8f16c013c690884102439de3b1a4cb3ddfbca","ssdeep":"","tlshash":"78e02b02da410a564f2477296a0a179a746e43114b44d2ac6471da14211ac8140b487d","size":383,"data":"","first_seen":"2026-08-30T02:39:00.463497Z","last_seen":"2026-08-30T02:39:00.463497Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","size":18024,"data":"","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-08-30T04:54:51.7563Z","times_seen":8978,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/js/tiny-slider.js","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a15fe924e0c32a7a3f442406147b981","sha1":"ded1e40389053f4df865d837a8b5942fbc06b216","sha256":"ad73299f4179f8228823e24f2b254b80694f7906d535cafb283da6e33dadd0d8","sha512":"6a90700e1106e1df2f3fd76c03d214e3e027d8a8bcf775989a7f324cc18da8c3e6569317e3b7a870f4dc06b985fe89381db9a7035a19e6ed70e196be453f1d3a","ssdeep":"768:VbsyNMH0JXmZ5lW2E9nUbTJuyynhdHbtv:R9NMH0Y5l+RUJuyQntv","tlshash":"f9e20ad97220713282d721ea12ef820a73365928dd038e849439fdd83dfd569626fd6e","size":31911,"data":"","first_seen":"2023-03-07T15:01:49Z","last_seen":"2026-08-30T02:39:00.501309Z","times_seen":295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-DqnxneoL.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"00e2016c8eaa5d81104f61ec86462ef5","sha1":"16249d91aa367532b08f1dc494900a84520301c3","sha256":"d7da9bee8ad6397d1e6788b169f82b37f111b2628a998188e707329483ce5596","sha512":"caefb7d25ba6b24a5864f3ef23b2c5200246c88d0fe8e22095b3672597b729e0b3b99447d4c1458c2c5d74204846caee20095e727b273020593b4e12dc878952","ssdeep":"6144:FMAopqOWSr8ad2jJKaQqhJp9cuRgufObV:4qOW2Rd29d/DRJfObV","tlshash":"f9443ad53294b035439b51e6906f2106f33e5c19580d812cf269ece639baec4a2f7fb8","size":274225,"data":"","first_seen":"2026-08-27T10:24:41.327319Z","last_seen":"2026-08-30T04:53:38.279284Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/js/main.js","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"da505e4cfd8087582597eabb81e86c1c","sha1":"779ec7136d2ec513b68b71a5b218be7ad5f3147d","sha256":"8d20e8e648ce5faf7e04e9dc665e80d7aaea0a0f6e203693c1a21ed15342379e","sha512":"cf31217b372a2f9dc14b4661c4b74661091bbfd4b8d2005183dce49e6fa163b7a32c259afde3d6e66ecb375bed89f29ce226b8779bacf32487aebbc7ac24fa95","ssdeep":"","tlshash":"dd81f0193e58613145bbe32eebba6385fa79006b510290123c6d8d581fb0ef116fcecd","size":3837,"data":"","first_seen":"2023-05-12T13:19:57Z","last_seen":"2026-08-30T02:39:00.547682Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.3.2","filename":"https://winnersbank.online/js/jquery.min.js","line_number":4,"column_number":709}]},"http":[{"url":{"schema":"https","addr":"winnersbank.online/css/animate.css","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.009Z","timestamp":1788057500009,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /css/animate.css HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"113c0-6a8f0595-28581e;br\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 3926\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":70592,"size_decoded":4347,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a3294e2069601cf477721abc9c7854d1","sha1":"3e63620978feef0d38710b6442914721025d1ff2","sha256":"d3ac73fa8c5f074a9ab7fc8ed9351e03a7b6aecdb0588cbb284d29a36b721697","sha512":"05b039f6f86642124e42a794dfeacaa6a6d148db0af306ac59f66b442fd833451641e844182dc89a5004eb44d4511024b0c7dc04617a1a76e85230a45d5528b5","ssdeep":"192:2HQvFpjIBz+a+pjxm7YfPZBWgQc95YKm/0kLyJgprWXhOX8yRTeVSqwMbPeCC/AF:x7CY+Y7VQV4YuYG","tlshash":"9d63c96a1c91114447720b25d7de8f6ceb3ca57318226efa73c2588b8f61bac13cda57","first_seen":"2023-04-11T12:14:16Z","last_seen":"2026-08-30T02:39:00.457862Z","times_seen":240,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/images/testimonial/3.jpg","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.059Z","timestamp":1788057500059,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /images/testimonial/3.jpg HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"809b-6a8f0590-285842;;;\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 32923\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":32923,"size_decoded":33301,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 510x500, components 3","md5":"88f88df6af099929e935d6d5ba8ee77b","sha1":"cabe698b50b763c0c6e10f6b0ebe845da42f7519","sha256":"437c02842458f014291e874c1284cb952a9825fbf828844f1e1fabb05a422572","sha512":"9dfa61d2e1e8c4589cdab6e7b0c1fe8bce68a7ad3a148ea4d62882dd1d198be06865d73b17fd337b11b9661744e2ef1ca8d84cd227b1065a08bb7ec5e64c4bf7","ssdeep":"384:nDLaM3snGAQVFBEM855g8bG7GFm0aofGJkIrWxbOpiFvBY58HbGsUz64zRz6bpB2:nDRsnGA6LU88A0aEGFruS5870z6VBaJ3","tlshash":"f0e2e183b8158251f3849a368f5857b3bb3850676f059ea342c829d287f13db651eec3","first_seen":"2023-05-12T13:19:57Z","last_seen":"2026-08-30T02:39:00.459334Z","times_seen":130,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":490,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/info/widget-assets?jsonpCallback=true\u0026id=10617afa608d0dc1d592c4cdfd385d737247a84d","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:23.785Z","timestamp":1788057503785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"GET /info/widget-assets?jsonpCallback=true\u0026id=10617afa608d0dc1d592c4cdfd385d737247a84d HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 30 Aug 2026 02:38:23 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\netag: W/\"17f-5UMw57o8s0GTYdvARHKYexDGV+A\"\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=taDex%2B26pPSFpktK2lnH00i5eteR5CoaiFABf6a71BzZRyDXXxJx1mEz3T5fYKhk3uSjuVTQRPWAAkTV42ey3vfmpZUj9noHJ1pIjEGtoVUw7FPf6748ZMgE%2FsIMPtmDFA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a3306b46affb56a8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":383,"size_decoded":1062,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (383), with no line terminators","md5":"819fea29753c98623edd35dc8da4152b","sha1":"e54330e7ba3cb3419361dbc04472987b10c657e0","sha256":"70af5fcde233c11f3cc5ae70fd8122b850abdcb42d24d3901382d42ba85d1d70","sha512":"d29008058ac1b9355d076f5735393b75d7f8336648e3f5193612327ee128a1b0b234416852621a60b0be6163cac8f16c013c690884102439de3b1a4cb3ddfbca","ssdeep":"","tlshash":"78e02b02da410a564f2477296a0a179a746e43114b44d2ac6471da14211ac8140b487d","first_seen":"2026-08-30T02:39:00.463497Z","last_seen":"2026-08-30T02:39:00.463497Z","times_seen":1,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@300;400;500;600;700;800;900\u0026family=Roboto:wght@300;400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.000Z","timestamp":1788057500000,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@300;400;500;600;700;800;900\u0026family=Roboto:wght@300;400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 30 Aug 2026 02:38:20 GMT\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30244,"size_decoded":2665,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"39739dbe7d0e1b23667ad8c77863e615","sha1":"f092310ab86e1a59e375e04403839168a6367a93","sha256":"c9f9b49e9c10b67c2b5c6475a250e15ad235fff388d621520e57e87d8e6f1df6","sha512":"127291746098ff3ca1052ed45da395e9b2d0d1b2b8a6de4d4c06d487d67df16abb9a88c62922e0573c67be1dd65ca30deb639064696e4423bce82f45e13ed6fc","ssdeep":"768:PDS99YURRuWDyjooYhREHPM5svvYaR7AI8:/ylv","tlshash":"42d2309104179400eb431cc623cfbf35ee1e61617095c0b9abfd6eaaaddbc22436976d","first_seen":"2026-03-01T18:15:26.121678Z","last_seen":"2026-08-30T02:39:00.469797Z","times_seen":19,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":33,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/css/tiny-slider.css","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.010Z","timestamp":1788057500010,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /css/tiny-slider.css HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"830-6a8f0595-285821;br\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 586\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2096,"size_decoded":1004,"mime_type":"text/css","magic":"ASCII text, with very long lines (2096), with no line terminators","md5":"d9cd03c98ddd36d21fe610520214798c","sha1":"be446fe22d58de2ba7275ad586f76f7e66191bfc","sha256":"083ff92b0fec9e507d15550936c3a714688d5706c0b6f5c89883a31fe6ea74ad","sha512":"a6f171f89423c92a68cd444c6038ee33587a09720b8c60956c7393d63f85713dc590de3a06f0fc2a953fc6370a1e58231215fec59db6d78d9004bef03cd4fc81","ssdeep":"","tlshash":"dd41792993603644d9e3d7107af89b298538fd95fb334cde264ebb024743a5a5412a89","first_seen":"2023-04-09T19:25:54Z","last_seen":"2026-08-30T02:39:00.474325Z","times_seen":278,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/images/projects/03.jpg","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.048Z","timestamp":1788057500048,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /images/projects/03.jpg HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"620e-6a8f0590-285861;;;\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25102\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25102,"size_decoded":25480,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x600, components 3","md5":"f72f5111b51fc9e51dd403f0a2bc9c4e","sha1":"c87c1fca40e882193adebfd2485034f8466b1ba8","sha256":"f88bcaa4fe041d8c62d56dec0ba7f4a91c809865c03c179ef82d5d7687b58bd4","sha512":"1d39a578699b29968e5478da3c2a0408962deacf707bb43ed48e87d8500b45a0ca4876f50f5b19705a234c162d748944d92b620597c8c8e9a8d2bba7c8c86bce","ssdeep":"384:8Dq6X07+1nUhJl4dCTmL6Og9Ra339lqr18r6HuaI7hpbcr0fNmLEXn80TVELaKz+:8DqT9t4WRolyuagJ19UMT8+r7","tlshash":"b5b2e1d35e139eb1e68f64603e24c761754a8dacb4b4fb32e85740f686d82b805d2cb8","first_seen":"2023-05-12T13:19:57Z","last_seen":"2026-08-30T02:39:00.476341Z","times_seen":129,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/elementa0d8.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.357Z","timestamp":1788057500357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:42 GMT","end":"Mon, 02 Nov 2026 08:37:41 GMT"},"fingerprint":{"sha1":"CB:38:34:2F:7D:9E:35:93:25:09:7C:BC:CF:D5:8B:CD:34:CD:70:E7","sha256":"50:17:03:01:AA:C0:DB:75:43:0B:A6:DC:1F:27:C3:AA:1E:93:2F:67:A7:8C:54:7D:FE:7B:6A:E6:F1:9F:C7:FF"}}},"request":{"raw":"GET /translate_a/elementa0d8.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/html; charset=UTF-8\r\nreferrer-policy: no-referrer\r\ncontent-length: 1587\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T06:22:58.106875Z","times_seen":18180477,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/10617afa608d0dc1d592c4cdfd385d737247a84d.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"3.79.72.4","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:23.966Z","timestamp":1788057503966,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/10617afa608d0dc1d592c4cdfd385d737247a84d.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://winnersbank.online\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 30 Aug 2026 02:38:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 6cb79abf75047496934c7756b55ec6f26e7d2373\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4c8-20ECtfIJx1N09NXN7TN7XM71HbM\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1224,"size_decoded":881,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4ed2d8371d4bfbfef80b8e2d1f2d231e","sha1":"db4102b5f209c75374f4d5cded337b5ccef51db3","sha256":"e1f007a9e844d5a3c1d74fec3f2a515db90ca42991b7b9f7bf8c58ac00c1ea74","sha512":"d671e7812af847e7b39f7f8e1c8f250861bd0778ea07d18f7c07678b775a94ea4401617a4d0e105ecf3a5a006915f4c526e7ccdb06a722df8907399d98abd459","ssdeep":"","tlshash":"32218b7d4a6822ed5245c7d6c5047e076bbcdcb371043e7eea0d1a4e70db2e5113646b","first_seen":"2026-07-27T05:48:05.884402Z","last_seen":"2026-08-30T02:48:43.760022Z","times_seen":7,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":13,"connect":21,"send":0,"wait":26,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-CliJwUTR.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:27.493Z","timestamp":1788057507493,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/style-CliJwUTR.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://winnersbank.online\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 30 Aug 2026 02:38:27 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a4cb803-8d68\"\r\nexpires: Wed, 07 Jul 2027 08:30:01 GMT\r\nlast-modified: Tue, 07 Jul 2026 08:25:39 GMT\r\nx-77-nzt: k6N+X/30jWbpzilQSMve+W6Smv1bFhbRHJnvtxafSu0LMyaKu+2dwuyCrIjWHSzfE+sEN8A\r\nx-77-nzt-ray: e2f75420f13f72e9c897936a8324771d\r\nx-77-cache: HIT\r\nx-77-age: 4644465\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":36200,"size_decoded":8208,"mime_type":"text/css","magic":"ASCII text, with very long lines (36187)","md5":"840dfdb09fc1a11a5c3a5b5f808e3160","sha1":"46140a50b100fa33b974027c13bb9f2de5c784b7","sha256":"b5b9a339413a55a0d828ab6be236e2a495594a19fb3283f846c607d7b6996ad7","sha512":"61e37700ee60ed584c8ae7b6313c5dddf6950c9664aa57f32bb4a70d775b1a1d5bfc249c6c1238495ef2cb7e12bae5f00c4ddb3df4dde44a01081117b74e2ba2","ssdeep":"384:F8fY2l091g7Tc6/WYtGLadKzSVX8Kj6+eZcrNSN56qB56YR9evZLLq51vZLLq5G:F8wM091gTcCWYtG4XqcrNSN56DwQ43","tlshash":"05f2966daad9093dac23c179e3f8e58c911af5d5df3226daf74239008ac17ff0986514","first_seen":"2026-07-07T11:50:17.712499Z","last_seen":"2026-08-30T06:28:19.663751Z","times_seen":3883,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/css/glightbox.min.css","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.012Z","timestamp":1788057500012,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /css/glightbox.min.css HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"363c-6a8f0595-285822;br\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 2402\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13884,"size_decoded":2822,"mime_type":"text/css","magic":"ASCII text, with very long lines (13884), with no line terminators","md5":"d93b9325b36618fef73308137a8431b8","sha1":"d70974b1ad1afdb4d227b5299309f1e3a404ca74","sha256":"ed4864fd009907c6bc1f2a41b77b7dd26871ea22f34bf299470a9b3f887eff8e","sha512":"a1027b2d0b74211e5fc587b261de8598e53580c6180b77c6b861fca6eba0c0b667c41c8390c6985427500e602b5f81391ee93ac4906b09803bf25ef19bef6b55","ssdeep":"96:/YUoW2dCjwDBwSDlPlgXDW8qD2LzyPi3AFkW6LpjxTc4Ak3:/RoA87riq8quzbvd9c4n","tlshash":"d9521512579032144097861a2accd7b80b6dc533aa225fffb7d1ea91c7c3a8b15b2797","first_seen":"2023-04-09T19:25:54Z","last_seen":"2026-08-30T02:39:00.483789Z","times_seen":304,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/style.css","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.015Z","timestamp":1788057500015,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"d0ed-6a8f362a-13d546;br\"\r\nlast-modified: Wed, 26 Aug 2026 18:53:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 7957\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53485,"size_decoded":8377,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"5001b40351138f3cbb2b6e3f72595cad","sha1":"7d363644cc8556d485d535af31b3336331932738","sha256":"597c779f8aa59fb4f9fbc8e5ba30443a054583355e50997e1ffe7e925ffe129f","sha512":"816682425859453ab2180b34647f10fd1f33ef703386aa982c2e1cc7ae6137921b00806b28efa49cd18835f0452136a350bd646eb86f575e810ea75c7439ee2b","ssdeep":"1536:haWd2E3ZO9s2NKW49xgUC2E3DO9s2rKW49xCUoNNDEjBDfoqMCa54ooh5zGmIlDy:6","tlshash":"093320eaed53304f5353faa8e7b55b64ef9810219f0a06eab4f5204496c16fd112eecc","first_seen":"2023-05-12T13:19:57Z","last_seen":"2026-08-30T02:39:00.484623Z","times_seen":121,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/account/logo.png","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.039Z","timestamp":1788057500039,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /account/logo.png HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"1fc9-6a8f0590-284a94;;;\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 8137\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8137,"size_decoded":8513,"mime_type":"image/png","magic":"PNG image data, 222 x 61, 8-bit/color RGBA, non-interlaced","md5":"ff665f5997dc89d095ff941808583871","sha1":"07fd87c42b476d6036c30f62236feb28d6fadcba","sha256":"3cc742dddb15351ddcd483af9a1c50909eae21958dff14bd6301c2cce5f9e92a","sha512":"e551a264e2a7706be4a0ce9b75ac5a839218934ed0c0ae2762c5191c54f70168e60e93e6850c051af019513199e9b531b1d6551ad3e2c4a39665ddc42b9bf304","ssdeep":"192:HSPOknELkflo8WXflYZ3rg7fnlBVfjBZArzGuFnO/PV:y9nELkflRKfzVfVZKSuVA","tlshash":"15f17e2efa529d60475bba40ecdc6047e7e34a44cac18255fcdd8c936ce1274789e786","first_seen":"2026-08-30T02:39:00.489231Z","last_seen":"2026-08-30T02:39:00.489231Z","times_seen":1,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/images/curve-arrow-shape.png","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.050Z","timestamp":1788057500050,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /images/curve-arrow-shape.png HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"e9a-6a8f0590-285846;;;\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 3738\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3738,"size_decoded":4113,"mime_type":"image/png","magic":"PNG image data, 313 x 69, 8-bit/color RGBA, non-interlaced","md5":"3db6fd1f43b688c5660eb2a524f13629","sha1":"bad3a641ade74b7865ecd7b40f15277a216754eb","sha256":"1adb4888527acfe8374e9d5339484dd3300f3721102de5f5b051da996859018a","sha512":"60b66260d38e4f4e3e05098546ada8876851e145fbb7f08b1d98387eff02f0d23da3c9462049cc984c1fa6ce3c6ce471ebe806a678a41d36cf640e1e548106e4","ssdeep":"","tlshash":"6e717db85f555a7d7d31c0af27a921395c9d3784b18316ac0bb0c978d9c245522c7acf","first_seen":"2023-05-12T13:19:57Z","last_seen":"2026-08-30T02:39:00.493169Z","times_seen":139,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":497,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/images/clients/logo4.jpg","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.056Z","timestamp":1788057500056,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /images/clients/logo4.jpg HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"e1d-6a8f0590-285839;;;\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3613\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3613,"size_decoded":3989,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 250x100, components 3","md5":"44026a51d60167201556d2eaa29d742a","sha1":"5683ca96bae6af9d770ea6dfb38a8588cd97e0bc","sha256":"8d3353ddf208e39498e878f22739b06b86e454c309bf323f3323b9e4f839a930","sha512":"66e9a3aee8cc7d810d7b4695fcba62bffcebcda2fa12597f7ed4b8c9e2e48ac3120fe1d4d3a1914f10246f6ddf66a8e4937b9814210e80231620701c5a1e7729","ssdeep":"","tlshash":"b5715b85ee0318a1cfb913fd49534f27d316587248c2de3b989619d1e2faf8c8907309","first_seen":"2023-05-12T13:19:57Z","last_seen":"2026-08-30T02:39:00.496827Z","times_seen":139,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/images/map-2.png","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.513Z","timestamp":1788057500513,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /images/map-2.png HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/style.css\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"66de-6a8f0590-285845;;;\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 26334\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26334,"size_decoded":26711,"mime_type":"image/png","magic":"PNG image data, 936 x 454, 8-bit/color RGBA, non-interlaced","md5":"25914795cf8037c4514ea15a6e6bd7cd","sha1":"b1e8004e06da8340d284f91da39ae8acd5c37044","sha256":"a7da6b106a8fda0f469abe738ee2ef9b1f2cce0edfa9805ad6d3896c9f99cf9f","sha512":"37d4fc8bb1e1be963081734bea969ebd74fd77ae9c8e53c547c9f63b9dae8c1a2ca4343a37db1ca5bf0f8f2a0e5252098e4fdde728283c73a987e21081d7502a","ssdeep":"768:DkH/duBBmKsBZ361aWwGgbqL4IA7I8WNbi9FTSco8tq:D6dujmzq1naegLSV84","tlshash":"98c2f11c49d93b4be54d03b369d516baa7df8c402fe0866b418fea494c1b80edd614a7","first_seen":"2023-05-12T13:19:57Z","last_seen":"2026-08-30T02:39:00.498324Z","times_seen":143,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.535Z","timestamp":1788057500535,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://winnersbank.online\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 28 Aug 2026 18:08:07 GMT\r\nexpires: Sat, 28 Aug 2027 18:08:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 117013\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-30T06:21:09.281312Z","times_seen":554751,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.537Z","timestamp":1788057500537,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://winnersbank.online\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 28 Aug 2026 18:08:07 GMT\r\nexpires: Sat, 28 Aug 2027 18:08:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 117013\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-30T06:21:09.281312Z","times_seen":554751,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/js/tiny-slider.js","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.026Z","timestamp":1788057500026,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /js/tiny-slider.js HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\netag: \"7ca7-6a8f0590-28586c;br\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:08 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 12334\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31911,"size_decoded":12683,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31911), with no line terminators","md5":"9a15fe924e0c32a7a3f442406147b981","sha1":"ded1e40389053f4df865d837a8b5942fbc06b216","sha256":"ad73299f4179f8228823e24f2b254b80694f7906d535cafb283da6e33dadd0d8","sha512":"6a90700e1106e1df2f3fd76c03d214e3e027d8a8bcf775989a7f324cc18da8c3e6569317e3b7a870f4dc06b985fe89381db9a7035a19e6ed70e196be453f1d3a","ssdeep":"768:VbsyNMH0JXmZ5lW2E9nUbTJuyynhdHbtv:R9NMH0Y5l+RUJuyQntv","tlshash":"f9e20ad97220713282d721ea12ef820a73365928dd038e849439fdd83dfd569626fd6e","first_seen":"2023-03-07T15:01:49Z","last_seen":"2026-08-30T02:39:00.501309Z","times_seen":295,"resource_available":true,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/js/glightbox.min.js","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.028Z","timestamp":1788057500028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /js/glightbox.min.js HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\netag: \"af77-6a8f0590-285868;br\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:08 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 12480\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44919,"size_decoded":12829,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (44919), with no line terminators","md5":"f1c6320483ed2ea08bd134dd7677d395","sha1":"443be7989be8d06a2b89852561cf9d55147cb2bd","sha256":"f20640b91ad814f8e36fc22e49adec01e6e22b5797569c1e6ed21cf4733e4c7b","sha512":"837996951397652605234d2057bd1864286c95fc2a8478de86ee6ea8207f1d98d8bd9decc93441ad7693a159cdbf265bb395aea6d636db9e0ae3202e42efd318","ssdeep":"768:j6f+pzn1TR/ZIMUbAN6+VQny3UOPEIOf2IvIYf0X+F5GYxbnZzw+XeNgq91Nk/wp:HfN6s3UMEwa5GqbnZzw+XeNgG1Nk/w5D","tlshash":"7413f809b286747604db617aa03f970bb2b621092902d09cf47edcd66db8d9e3167ff1","first_seen":"2023-03-08T02:17:38Z","last_seen":"2026-08-30T02:39:00.502807Z","times_seen":260,"resource_available":true,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/images/projects/02.jpg","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.047Z","timestamp":1788057500047,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /images/projects/02.jpg HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"7be5-6a8f0590-285860;;;\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31717\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31717,"size_decoded":32095,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x600, components 3","md5":"6fb829dea78e4f92029f93fed47a3582","sha1":"1b862951c80004ad2b7e20eedc5272b79dfaf5bc","sha256":"21c109403837d5df288be4e88ee66e980ea800f979751ec4c9bb2373ac199aab","sha512":"797173d01962cbf51e20d02404934c993c0e060bc3a61c54fe86d3ba10d4acd950ec1e34fdbc82f5c57cd64effbd8c2e51f0d0feaa2673176082e7dff3e89e25","ssdeep":"768:24NT9JljQwxj05lY9qQBetV6fwS3jQm1VqGHzTof:247fjpj8luhwSzBasof","tlshash":"9fe2f127f7625c5e0a137f72005c0038be5a71ef1c8726749b04d6a256a2e76cbec973","first_seen":"2023-05-12T13:19:57Z","last_seen":"2026-08-30T02:39:00.504025Z","times_seen":130,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/javascripts/insert.js","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.589Z","timestamp":1788057500589,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"GET /javascripts/insert.js HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 30 Aug 2026 02:38:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Aug 2026 13:41:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i7cypke6MyxBRcTch5Z3BtnVoojZ5%2BxkZIH9nl6NTU2e%2FhqRUW0YtbKYaC2grxuWaSIhj0%2FqTLhBORT2ALZedQmexoEUFWPvQ2nwDOiuhXg59v0RqN0Ik4jrUKIq5JSqxw%3D%3D\"}]}\r\nage: 781531\r\ncf-cache-status: HIT\r\netag: W/\"6a870417-3e6\"\r\ncontent-encoding: br\r\ncf-ray: a3306b462fc756a8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":998,"size_decoded":1309,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (998), with no line terminators","md5":"29d2e99d5fcb02404184a538c82b6254","sha1":"ef4318b50add95249beac94e8433544a180f3960","sha256":"27b579092e300cf8d2457274b442dc87db8a173d97c72e19b41ba1d90c613c31","sha512":"76aa1c05f8bd676ec62cdd147fddd7c472b5e8241806ce2a4b0e6d72590237969e3652c442ec06fa7fd84be60c1a0f41d7167f37a1bf8cefaecbf23f89feadb6","ssdeep":"","tlshash":"5211be11a565905b0db92176bb2b730eb4bff7168a4c9a44291df6003b038d3a826cf9","first_seen":"2025-03-16T17:07:37.611527Z","last_seen":"2026-08-30T06:24:29.572797Z","times_seen":1922,"resource_available":true,"data":null}},"time_used":3182,"timings":{"blocked":-1,"dns":6,"connect":3,"send":0,"wait":64,"receive":0,"ssl":3108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:27.615Z","timestamp":1788057507615,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 18:41:05 GMT","end":"Tue, 10 Nov 2026 18:41:04 GMT"},"fingerprint":{"sha1":"4C:F2:C9:AE:0A:0F:37:5A:43:AE:8B:25:45:7E:69:B8:F0:0B:25:F8","sha256":"74:06:C6:4E:FC:30:3B:58:27:F6:ED:89:28:89:31:20:1A:62:99:AF:A6:73:D6:1A:88:29:39:44:E3:B2:B1:6C"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winnersbank.online/\r\nOrigin: https://winnersbank.online\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 30 Aug 2026 02:38:27 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 143765d349003193ebd3783518e376c4c54f428f\r\nx-77-nzt: k+ZLJLs/LiTwdpvkXPDYTav8PiLW5QofRiumoWzc3r/gZYj0ouDHMx55U8uXRcfctcqJBCU\r\nx-77-nzt-ray: e2f754209361e602c897936a326e3228\r\nage: 0\r\nx-77-cache: HIT\r\nx-77-age: 302\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7219,"size_decoded":3357,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0259a73d21d0110609c1b3d5cab20ebe","sha1":"f80fcc484290999d3c48fe3d75f434cb63a00b4a","sha256":"ff798ee596d00dfbc59c3916cde6ce6cc8fd9183e1cd673c45dc6be9b333e582","sha512":"fbb7720f87a9673084b909fc940d2861fb5b1a7ce80d7a60d469eabe47765e69bce287d2bece28eb226d2e75e1c8202283aeda38f34ff354c2466f567ee3535b","ssdeep":"192:Ccdft/hcRl6WKHSY8pZcqq+jT0UHAfoW/Ymz8:CgF/hcSWbYKZcF+jhqoWQmw","tlshash":"ede1b64f9a144ea987c643c276cfb84675bc807342509d7afd8cc9b842697cda3e3b94","first_seen":"2026-07-27T13:24:21.79927Z","last_seen":"2026-08-30T04:53:38.320489Z","times_seen":1241,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":34,"connect":8,"send":0,"wait":8,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"3.121.249.239","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:27.738Z","timestamp":1788057507738,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 24 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"4F:1A:3B:79:00:E3:DC:1F:92:62:7C:DC:85:3A:BE:8C:D1:68:F2:57","sha256":"7F:93:E6:29:5D:CA:78:BD:30:0D:25:11:3B:E2:01:C9:DC:80:3C:80:90:3F:84:D2:72:1B:0D:42:F1:20:13:D9"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://winnersbank.online\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: m7caBfEcWx+b4icfCjJLUg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 30 Aug 2026 02:38:27 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: badfVsGFmViLUACRz+ybzdID/1Y=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":224,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T06:22:58.106875Z","times_seen":18180477,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":0,"dns":92,"connect":110,"send":0,"wait":23,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/images/testimonial/1.jpg","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.061Z","timestamp":1788057500061,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /images/testimonial/1.jpg HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"6a07-6a8f0590-285844;;;\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27143\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27143,"size_decoded":27521,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=350, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=350], progressive, precision 8, 120x120, components 3","md5":"ad2e62eb0c06508ba1058b1715894e5f","sha1":"0c12180ef8ffe51dcb144472cdc723706f952ca9","sha256":"2028d76bdef1045c40fd78af5a09f56c25961fd6b3357c7a770a59c4c87d1261","sha512":"ece6045bfa6ae57aac34791657ef5e925872b3d88a033b67e09711dba21e4e6b0903b9603f583128efa4ed3c11ce506b7e346bcfb0c56637589d0d59a8c7a043","ssdeep":"768:dLGu79LGZEf2MqTQ2ZqCcr/7t11xuXYjn:da8aZC2M32xcrZ1Duojn","tlshash":"f4c2b0a9bbd31d50fdf0553879a4e3a396017f94ea83a65374dd2488bfbb6c12c08186","first_seen":"2023-05-12T13:19:57Z","last_seen":"2026-08-30T02:39:00.507134Z","times_seen":131,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":487,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/images/footer-bg.jpg","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.514Z","timestamp":1788057500514,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /images/footer-bg.jpg HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/style.css\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"65c80-6a8f0590-285850;;;\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 416896\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":416896,"size_decoded":417276,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=1130, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=1920], baseline, precision 8, 1920x1100, components 3","md5":"8cece25ea5cc6732cf3e06bd1f14c704","sha1":"0b7a330189aa4b92ae3c1fa9445f33f21a79c7c2","sha256":"1155dbba7bf3554f0b7b748d847e8ba8f8bdf2255c3d0d62da16f70e59ddf7e2","sha512":"e161c2652fdc0d055447cdd0422cf040652d5aad7b4339c472e851447ae002ecb61faa630889d574c35690ee2e7740aaed3fdbca1b7e48ac50c2ed5b500e7724","ssdeep":"6144:vwLbG/SU1Xbj3KNIkmDC3OVS8pQYvSp5YDSl83VoNdtdn7UzRK7PelFB6LuS:0bEXbjxcWzmYu6ecevcKLYquS","tlshash":"ec94e0e58875af0af2062d28d3799f9d211c2e3f17d0a35c741eae4b7322ad9314f598","first_seen":"2023-05-12T13:19:57Z","last_seen":"2026-08-30T02:39:00.508965Z","times_seen":136,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-DabC6aZO.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:27.489Z","timestamp":1788057507489,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/main-DabC6aZO.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://winnersbank.online\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 30 Aug 2026 02:38:27 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a8ffde6-3e9c\"\r\nexpires: Fri, 27 Aug 2027 09:09:57 GMT\r\nlast-modified: Thu, 27 Aug 2026 09:05:42 GMT\r\nx-77-nzt: k1kRPJmluPogHE7Nb0EUzAYZb9+w0rhqkuLxdLWLhsSpYr8kyfc7fMZHkPg0yu/eUFhvGnk\r\nx-77-nzt-ray: e2f75420f13f72e9c897936aee8f391d\r\nage: 0\r\nx-77-cache: HIT\r\nx-77-age: 235691\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":16028,"size_decoded":6763,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15620)","md5":"484b339ab8994cd2aa6196b02c94bf40","sha1":"4859d1218ce4eabd728109388b5e999e361399cf","sha256":"6f1773ddd0916b4b176d423ef1ac87883da34e76dd895250be5ccca462fbf0b6","sha512":"ed195878480c14d1a519189d01ea5f90e05ba387f64c7f6958515af3a5cb3375f3a73ff98cf9f9602eaf50f779fc32521c76640ae170c056a00d76ec42f0cf92","ssdeep":"384:a2NcFT88tMPdBgaw5O+mvRan7/AKsDoKVwA3Q+crsbUzgfTtQfQIeIa:ZNcFX+dBgaw5O+aanrkoK2A3Q+cwbUwZ","tlshash":"9672e8741210743f712fac492a6df497723ad298e597c5289a2fdd5c36c8cc0a873bb5","first_seen":"2026-08-27T10:24:41.410826Z","last_seen":"2026-08-30T04:53:38.319479Z","times_seen":149,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/images/testimonial/2.jpg","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.060Z","timestamp":1788057500060,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /images/testimonial/2.jpg HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"1cb8-6a8f0590-285843;;;\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7352\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7352,"size_decoded":7729,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 174x175, components 3","md5":"84041d852e85f4f10d235ca08ad84feb","sha1":"ef829cb679a071e6ba234aa68aee09dd6cfe2bac","sha256":"8d1c27b23a0e774220a0bdf56acf46bb3c24b15fc119c5c4b633f9f54ee968a3","sha512":"e91ff5d4d182ba641bab82d1118a78484d49e053d6e7704c1731343a7440ee169a764d4ae877b2681bc8804c7964084c3add922e975f7285abf06521821c8210","ssdeep":"192:pCCI2dqKxwBx0KfNp78wklzD0/Fe60eEmC:MD2Bxsx0KlR8hZ+U60EC","tlshash":"e8e19e6773afd4128a02c7b5a621e2c970996e35f894366e2b70d3d05c21f9434a1dcf","first_seen":"2023-05-12T13:19:57Z","last_seen":"2026-08-30T02:39:00.512282Z","times_seen":130,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":490,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/10617afa608d0dc1d592c4cdfd385d737247a84d","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.591Z","timestamp":1788057500591,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 20:48:23 GMT","end":"Tue, 17 Nov 2026 21:48:09 GMT"},"fingerprint":{"sha1":"A5:45:1F:A3:11:15:24:79:E1:DF:21:FD:FB:BB:07:64:A3:36:EA:A0","sha256":"03:50:0F:F5:B3:92:09:57:C2:06:97:D1:F2:1E:31:76:ED:B8:67:6E:44:BD:F4:CD:8B:C3:68:D9:BE:15:DD:B5"}}},"request":{"raw":"GET /10617afa608d0dc1d592c4cdfd385d737247a84d HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 9\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2MGEgG1Q%2FJVFRhWu2f8ARFHAorNFquX5sNm9ADExgSk4ltiFuUc0OFWyjwahTvYfwruAwXNBlcA5EP6m%2Bvk2yr32Wpy0Iv4X1WIkpO9FWF0S0SRTT6ohBbyvPtknYjA%3D\"}]}\r\ncf-ray: a3306b32b9853181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T06:22:58.106875Z","times_seen":18180477,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-30T02:38:19.037Z","timestamp":1788057499037,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nset-cookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 02:38:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"9dj4rhgu56g2m6q0mrcs41jluk","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Tiny Slider","description":"Tiny Slider is a vanilla javascript slider for all purposes.","website":"https://github.com/ganlanyuan/tiny-slider","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Tidio","description":"Tidio is a customer communication product. It provides multi-channel support so users can communicate with customers on the go. Live chat, messenger, or email are all supported.","website":"https://www.tidio.com","common_platform_enumeration":"","icon":"Tidio.svg","categories":["Live chat"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":35249,"size_decoded":7682,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (378)","md5":"2f2e13dd2115c3a04b1600cc40889d1d","sha1":"a8730ddefb0065963c93873ebc23354837522fb9","sha256":"6f00eddeceb6fa121edecce5b42257009147f32451ec574ec9047c6cf65b4bc5","sha512":"d3b96fa6cee2f2d6c1bf5490efc32c146690f57e5795be7e1086a343ff73a7f6a10521f5e9f9f2175ce9761c5a52dd3984ed473af2556658f6d56c76bd82dd2f","ssdeep":"768:qShFMoRkqIlPrXzPoFpIcE5M2zt4DD0zNmFX:zFMohItXzoLIcE5M2zt4DD0zcFX","tlshash":"c1f20c2258f1507b019390e46ab5af1bbfe1ea17ca6b5a1076fc0bc85fd3d8acd17148","first_seen":"2026-08-30T02:39:00.514254Z","last_seen":"2026-08-30T02:39:00.514254Z","times_seen":1,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":35,"connect":109,"send":0,"wait":173,"receive":0,"ssl":227},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/js/bootstrap.min.js","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.023Z","timestamp":1788057500023,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /js/bootstrap.min.js HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\netag: \"f14c-6a8f0590-28586d;br\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:08 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 15271\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":61772,"size_decoded":15620,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (61484)","md5":"2aa3c63a2d8b20e00b03d74e1fdcdb61","sha1":"be3fe98a267e61f474a7d265697633d3a056409e","sha256":"234637632bb4c986788d73ea7a97084ef9bcb55a52745b3cb8e9f6cbeea290ca","sha512":"8b4cb9966178ce39c9b717f65c945469687e5736a3b158b82e511628b3c57838f7e88aee4ac7bbaf7853484818b918d96659d7c98be0aa90f45e75320469bc74","ssdeep":"768:wVgB79Mr3uDTVayu8Of8rm7MT5ZFcHUbw8gpQCYewiTlAx17j0FhlG8KktWyh6O:wQYY28meG+zgA8OO","tlshash":"0b53924ab254787206cf7475817f060fb33a6899a446813cb96ad8de1b7cc897173fb8","first_seen":"2023-03-08T08:18:24Z","last_seen":"2026-08-30T02:39:00.517109Z","times_seen":240,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:24.080Z","timestamp":1788057504080,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://winnersbank.online\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 30 Aug 2026 02:38:27 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6a8ffde6-891\"\r\nexpires: Thu, 27 Aug 2026 09:14:57 GMT\r\nlast-modified: Thu, 27 Aug 2026 09:05:42 GMT\r\nx-77-nzt: k9PicyXZuLwStuwZBw4fiXrM3MVqxogtUeIfGSzbEa6sUS5x8z+Uy1hUzqOIOWg1WGtycfw\r\nx-77-nzt-ray: e2f75420f13f72e9c897936a9c75151a\r\nage: 0\r\nx-77-cache: HIT\r\nx-77-age: 5\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":2193,"size_decoded":1040,"mime_type":"application/json","magic":"JSON text data","md5":"3ded3abaf6c1a95ebff2e809b79b1f3f","sha1":"8bee79313cbd2343a5d8fe682c610dccfb4e7ce9","sha256":"dd0efbaaabb66b220cdb59495717217194b811a8628ac2320a7e01c0867fdda1","sha512":"9811f31ea8d46776ab6e53c1708dc2d82014654587c61be61c1bde347f9c30f83a7bc7cb647c7baae1d440885dc6182806faa17a2eede9c95a8c5ed53a840313","ssdeep":"","tlshash":"69412593c4b80d8317dc6627b89586415d908387a8893d0d36ae9a7f6f4cda910e77bc","first_seen":"2026-08-27T10:24:41.408958Z","last_seen":"2026-08-30T04:53:38.314638Z","times_seen":148,"resource_available":false,"data":null}},"time_used":3364,"timings":{"blocked":-1,"dns":34,"connect":9,"send":0,"wait":8,"receive":0,"ssl":3313},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/js/wow.min.js","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.025Z","timestamp":1788057500025,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /js/wow.min.js HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\netag: \"1fdd-6a8f0590-285869;br\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:08 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2627\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8157,"size_decoded":2975,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8099), with CRLF line terminators","md5":"164b265e6089f412b7927848018ae6a1","sha1":"1717e6b487126c5c3e992d47dba4c6c10f4529bc","sha256":"81c4cb0bc57b5cce1816bd704f7a2b12ec2b143c6a067402644d4a139b273350","sha512":"956bbda2e4f3069c72d8dbc003d04d02a6026428beb9b9c8b0b78eb1dcce9b73b6f619b5558a4eec9c6d681eaec6ebb45e4ecd504a77ef9ad69b9b95373a3270","ssdeep":"192:7mEE6yAmu6qUxbU5C9nrr1GkEPIAeJ3KO4poIR:iEE/Amu6qUxVBxGkAI///IR","tlshash":"58f1bba5374a70718a9b6176c92f0202a532256e74d4c8ec747cddd4aeb4a29336bf3c","first_seen":"2023-03-07T01:42:37Z","last_seen":"2026-08-30T04:45:17.604566Z","times_seen":3565,"resource_available":true,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/fonts/fontawesome-webfont3e6e3e6e.woff2?v=4.7.0","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.550Z","timestamp":1788057500550,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /fonts/fontawesome-webfont3e6e3e6e.woff2?v=4.7.0 HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/css/font-awesome.min.css\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"12d68-6a8f0595-28582f;;;\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:13 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 77160\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":77160,"size_decoded":77539,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-08-30T06:23:47.057204Z","times_seen":536689,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.chaport.com/assets/insert-main-44130e3574b7e1b9a766249043f659de.js","fqdn":"assets.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:23.883Z","timestamp":1788057503883,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"GET /assets/insert-main-44130e3574b7e1b9a766249043f659de.js HTTP/1.1\r\nHost: assets.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 30 Aug 2026 02:38:23 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 27319\r\nserver: cloudflare\r\nlast-modified: Tue, 11 Aug 2026 09:45:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6a7aef4f-6ab7\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\nage: 1603213\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=frErehVzg23dBBg7Xf%2BqBf7EZUSy%2BGXm9WkucNzsf%2FXfH4epy5luEKwLS%2Fq2ge06sjr9yOgt%2FjI0o7dMJKtZVCvvSFiNS04NyblOW4%2FbJC2cze9s4oby%2B9V5%2Fxin54P%2Bx27QkA%3D%3D\"}]}\r\ncf-ray: a3306b47484956a8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83508,"size_decoded":28291,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"56db69a15fd0e641ce5559d3e4f700be","sha1":"401c15c1fcf0e8157177c3f03eae7d94983d8316","sha256":"c2e80cfcb8f09eb3c75630de54602ef3d460434ab825b2f20d17d94a0e7170ea","sha512":"32a30d76e464219b72e7da5dd68ea15c9d394518495a17e28ad89ee69e74795c55e69b71718c2d72b78aa701eaedcb44ef02c09d7e54c2b93aafce081a966f70","ssdeep":"1536:a6VmkhM1hDaYGcvezlk516w8N6Od9T2KBjtrEjv4SpkHBKlqWfw2:ZQc4yk5yKp5ffL","tlshash":"cb8329897040343b0aeb21b6357f310a213fe2696e495460b53ad7d07e7ae5b621bf7c","first_seen":"2026-08-11T14:07:40.77286Z","last_seen":"2026-08-30T06:24:29.314219Z","times_seen":53,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":6,"connect":1,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/error-report","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:24.661Z","timestamp":1788057504661,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"POST /error-report HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1529\r\nOrigin: https://winnersbank.online\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1529,"data":"source=insert\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026url=https%3A%2F%2Fassets.chaport.com%2Fassets%2Finsert-main-4413\u0026ln=1\u0026col=60681\u0026message=api%20request%20failed%3A%20400%3Ahttps%3A%2F%2Fapp.chaport.com%2Fapi%2Fpublic%2Fv1%2Faccounts%2F10617afa608d0dc1d592c4cdfd385\u0026stack=rn%2Fi.onreadystatechange%40https%3A%2F%2Fassets.chaport.com%2Fassets%2Finsert-main-44130e3574b7e1b9a766249043f659de.js%3A1%3A60681%0AEventHandlerNonNull*rn%40https%3A%2F%2Fassets.chaport.com%2Fassets%2Finsert-main-44130e3574b7e1b9a766249043f659de.js%3A1%3A60464%0AloadAccountEssentials%40https%3A%2F%2Fassets.chaport.com%2Fassets%2Finsert-main-44130e3574b7e1b9a766249043f659de.js%3A1%3A19263%0An%40https%3A%2F%2Fassets.chaport.com%2Fassets%2Finsert-main-44130e3574b7e1b9a766249043f659de.js%3A1%3A47354%0AUt%40https%3A%2F%2Fassets.chaport.com%2Fassets%2Finsert-main-44130e3574b7e1b9a766249043f659de.js%3A1%3A54748%0AsetTimeout%20handler*Pt%40https%3A%2F%2Fassets.chaport.com%2Fassets%2Finsert-main-44130e3574b7e1b9a766249043f659de.js%3A1%3A47276%0AS%3C%40https%3A%2F%2Fassets.chaport.com%2Fassets%2Finsert-main-44130e3574b7e1b9a766249043f659de.js%3A1%3A25813%0Ae%40https%3A%2F%2Fassets.chaport.com%2Fassets%2Finsert-main-44130e3574b7e1b9a766249043f659de.js%3A1%3A2626%0AEventListener.handleEvent*on%40https%3A%2F%2Fassets.chaport.com%2Fassets%2Finsert-main-44130e3574b7e1b9a766249043f659de.js%3A1%3A2392%0Aonce%40https%3A%2F%2Fassets.chaport.com%2Fassets%2Finsert-main-44130e3574b"}},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 30 Aug 2026 02:38:24 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://winnersbank.online\r\netag: W/\"2-eoX0dku9ba8cNUXvu/DyeabcC+s\"\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ecZsqCpnef8spUuAE4HvZQgV7UHhRppTEe2zEN28GRgXjZEZvVngAx0Nuq4J0Ww%2FIWJiHUDhD1hGAKOMEzaSHeeX13EHw1nOoJYxZm2gb89lLMHTpgKT0bCQdLm2%2Bd9XPw%3D%3D\"}]}\r\ncf-ray: a3306b4c1a2556a8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2,"size_decoded":857,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-30T06:24:02.264021Z","times_seen":454153,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/css/LineIcons.2.0.css","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.004Z","timestamp":1788057500004,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /css/LineIcons.2.0.css HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"6e64-6a8f0595-285824;br\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 4474\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28260,"size_decoded":4894,"mime_type":"text/css","magic":"ASCII text","md5":"9bdd836bfef4e60ac3b5c337ded27292","sha1":"6c8041b87228dac6ea6c5b7a54e506c894840a34","sha256":"56d09c4cd80f372c855706df481c12ff5d22e25cab78db087cc92b283f1d107b","sha512":"218bdc1700f2a14bebd69352c5e2f03c9066482680dfed4bcd358675d7a4f868603db7e88b12f5b6f0c552680def612097596d0f6d69a58fa21db1609634586d","ssdeep":"192:fq1XhYDGyqlxTBsdXK9EYEBPJljOET5TEVpfeAfbMJVxp5OyohTrfj4fGUxH7n/E:wlsU0jSET5TE/9/IlxH7nZUt","tlshash":"83c222e4d9ff0cd09b0dd0dd2247a620eb1cb2b5a8074c1dd7a2798e67e261464dabdc","first_seen":"2023-04-17T09:05:25Z","last_seen":"2026-08-30T02:39:00.521602Z","times_seen":758,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/fonts/flaticon.css","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.007Z","timestamp":1788057500007,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /fonts/flaticon.css HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"1755-6a8f0595-28582a;br\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 1104\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5973,"size_decoded":1524,"mime_type":"text/css","magic":"ASCII text","md5":"6f8726832733a659e24ec121619ddbd2","sha1":"f1cd75b4321fc5822c87fb0c82fb2085d6302915","sha256":"183c57067811984d5a232fe148293a68832e0bc27d06501f5ac2316b0ac5fd36","sha512":"9c324127aca35511edc650b41f5b25ebb2e2a6f576a555c7495ee9cef7adf89a6b60d72c81a1520014459dfe438cca4e6e0f450b7c8a91b858b53e583b698d4a","ssdeep":"48:w+sV2eHHTa5BMphlTyZVXd0EW7XvHL8Q2lmKjigfIIgzeltsh:9j4ThDsnmEW7/HFoPV3Ch","tlshash":"08c1db9891be18904311d9c156af6210ff1db12e9dc5ac5cf282bf9cfee1a15c7862dc","first_seen":"2023-05-12T13:19:57Z","last_seen":"2026-08-30T02:39:00.522411Z","times_seen":108,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/images/projects/01.jpg","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.045Z","timestamp":1788057500045,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /images/projects/01.jpg HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"7acb-6a8f0590-28585d;;;\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31435\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31435,"size_decoded":31813,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x600, components 3","md5":"d3199949f3645bb9378ea8840ccdd127","sha1":"8e93c63647855689d24fd744ae7b7b262c866e0e","sha256":"090d5c8da8df46449ca78fb26463b7cccec1f59c5c1c024e71939cda93d3ae73","sha512":"61b0ed9efda413f9da4e20e8d60c14fad8a49985caa06712cf8ac75aa39b4354412e667176660f78058db2632a89b6551843df2243a0c3cc528304a9c7197d56","ssdeep":"768:8wcptBPG0Y1mqWxd3EXMTk5vhQ5QodRgHF0XWcqFBIsWj:8ltBU1mNUco1JodRa0W7fLWj","tlshash":"b4e2f1ef994e5226f766ef3cb0181bce142614253f86de02051dda88cfc81c26a79bd5","first_seen":"2023-05-12T13:19:57Z","last_seen":"2026-08-30T02:39:00.530147Z","times_seen":141,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/fonts/LineIcons.woff2","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.540Z","timestamp":1788057500540,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /fonts/LineIcons.woff2 HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/css/LineIcons.2.0.css\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"c9dc-6a8f0595-285831;;;\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:13 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 51676\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":51676,"size_decoded":52054,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51676, version 1.0","md5":"ab4f93708f366ab8c6576d60e1646dbd","sha1":"099c8552ddc2cfb05159333577c1821d2c6d4919","sha256":"22d65627d2483a04af29571b0637043746d2536c84a977860bc3ece769cf3418","sha512":"922a15cc852de48f4c1f6456d1c35bd3c37d434d6071c7ce9513176cf10ecfe85c484cfe06e7258c75ae028ea31116e96ea9449a75403d8af4d81b142299419b","ssdeep":"1536:300E1+oUoXBAlRcofcklQagQN4zBiKgNT:k0q+JoXBY+S6QOBRgNT","tlshash":"5933f12c3416b2d2567850afb84e8afa4c5ef576ecc257ad98110650cd833c9fe7d08a","first_seen":"2023-04-30T20:48:07Z","last_seen":"2026-08-30T02:39:00.531962Z","times_seen":664,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/css/typography.css","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.013Z","timestamp":1788057500013,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /css/typography.css HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"0-6a8f0595-285820;;;\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 0\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":369,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T06:22:58.106875Z","times_seen":18180477,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/js/jquery.min.js","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.021Z","timestamp":1788057500021,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\netag: \"1895c-6a8f0590-28586a;br\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:08 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 33138\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":100700,"size_decoded":33488,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"f0875e8621fafec58e50b8cf9c9bf00c","sha1":"e7d58789c3daf3efaac87be3d54d87f2dce6c104","sha256":"250dbc3e90117abd3ec4631299787ca4446e971548e403bb4e351e58c7c60d9f","sha512":"0a85e1929195d706b8974d78f62ace287311835588633bc46a5b763a2e162650e936039911b8a0587dad150a1eb758e331835a68f42aae2ad7bd9db44876bc6d","ssdeep":"3072:AYh8eip3huuf6IidlrvakdtQ47GKjPhQDb:Ai8eGRuufsr5zQ47GKjPyDb","tlshash":"83a308ddb2c670224ba731b9407f510bf136199d684d8450f269d8eabc7ca4e823bf6d","first_seen":"2023-03-14T00:12:17Z","last_seen":"2026-08-30T02:39:00.53299Z","times_seen":161,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/images/service/shape.png","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.044Z","timestamp":1788057500044,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /images/service/shape.png HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"1313-6a8f0590-285858;;;\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 4883\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4883,"size_decoded":5259,"mime_type":"image/png","magic":"PNG image data, 224 x 108, 8-bit/color RGBA, non-interlaced","md5":"d5dcf6bfca96b58478baeea94157cf89","sha1":"850bfeadcd3896003e71b72c4e7f5e97478d5054","sha256":"89813806af6d831e14be6a35b4751f1ad34cce16fa7f4bcdddfe2ef9f56668cc","sha512":"3d7fdaee2ca02da535c366317f1725a1ac89d768c72d8e4ff40e4c056ca5807b191d58e76ce1daca570237edaa062aeea530a1f7116497a5bd1ebaab4a106c6a","ssdeep":"96:n0oNyy+Xkj2xvohpmqYxqB5rogVhCZQKGsvffiucq1mdazYMNrHN8y:0oNywavbfq/rouhCZQKp6g1mktNf","tlshash":"f4a19eaa0a53da8cff835c03a61a111acd9b553370134650572dd3e5337ae69d9da0f1","first_seen":"2023-05-12T13:19:57Z","last_seen":"2026-08-30T02:39:00.534274Z","times_seen":136,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":502,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.594Z","timestamp":1788057500594,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:43 GMT","end":"Wed, 11 Nov 2026 18:42:42 GMT"},"fingerprint":{"sha1":"4D:89:37:9F:84:1B:FF:C9:39:F5:29:BC:64:5C:81:B9:FC:B4:62:34","sha256":"19:44:D1:D4:0E:46:63:2F:1C:79:F2:43:C1:52:6B:F1:4B:C5:2B:F4:3D:04:55:0E:C7:74:B5:03:A3:6F:91:CA"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 30 Aug 2026 02:38:23 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6a2663cd-4668\"\r\nexpires: Mon, 08 Jun 2026 06:46:12 GMT\r\nlast-modified: Mon, 08 Jun 2026 06:40:13 GMT\r\nx-77-nzt: k22OvywBtF/WA2XXzi3HXlVvhsEEzxchRlb9xfT7zFLNm8XMDYE09FVUk6SQfApL7hqfztA\r\nx-77-nzt-ray: fdb54123f4834d77c497936a30fd0638\r\nx-77-cache: HIT\r\nx-77-age: 32\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18024,"size_decoded":6042,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17951)","md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-08-30T04:54:51.7563Z","times_seen":8978,"resource_available":true,"data":null}},"time_used":3351,"timings":{"blocked":-1,"dns":93,"connect":8,"send":0,"wait":8,"receive":0,"ssl":3242},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/api/public/v1/accounts/10617afa608d0dc1d592c4cdfd385d737247a84d-67c8c93f6674f7d1441b95292f681e8a06b93690ea783a9d0e3c809251e1712d","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:24.463Z","timestamp":1788057504463,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"GET /api/public/v1/accounts/10617afa608d0dc1d592c4cdfd385d737247a84d-67c8c93f6674f7d1441b95292f681e8a06b93690ea783a9d0e3c809251e1712d HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://winnersbank.online\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 \r\ndate: Sun, 30 Aug 2026 02:38:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 312\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://winnersbank.online\r\naccess-control-allow-headers: Content-Type, cp-app-id\r\netag: W/\"138-HsgJnhbo54cdr5ztTist6awOliY\"\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hSIQX2cmL%2F0Wc2djKznAE4o1O9vSopoFhqAS6YZrfxP15PLjH3K82g59g08kbU46usf%2FWW4aLHRLqb7fn2%2B12mo48trP6L4wmYCTmOrNgojr%2BCIwrEBPxKE5bBBqyzFglA%3D%3D\"}]}\r\ncf-ray: a3306b4ae9a756a8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":312,"size_decoded":1095,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6ce94d51f781c7b1151cbcc70be6f367","sha1":"1ec8099e16e8e7871daf9ced4e2b2de9ac0e9626","sha256":"128519b9ab14f366dcba6aead37ef33ceb0fe60e3f9db0ef9bee0faf470326f3","sha512":"f0bc35381c70a7a6542de79a55f0299480e7005c48c1446ad1007000c9ece4cd3e4010541cacbe807033ef109ccfd6efa40f25f4909f2a147841af68063c9741","ssdeep":"","tlshash":"59e07de60ac438084ec25009694d4ab29beb6440557d7efde798592c324b7a4c016f5e","first_seen":"2026-08-30T02:39:00.536672Z","last_seen":"2026-08-30T02:39:00.536672Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/account/images/favicon.png","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:21.310Z","timestamp":1788057501310,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /account/images/favicon.png HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:21 GMT\r\netag: \"d89-6a8f0591-28576b;;;\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 3465\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 02:38:21 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3465,"size_decoded":3840,"mime_type":"image/png","magic":"PNG image data, 151 x 196, 8-bit/color RGBA, non-interlaced","md5":"545a22c58d76858eed7493a0ca4826e7","sha1":"1d7b9fcb40a009708d30eddb56a8e97acc86a92a","sha256":"72b548cd33b60fbae0f4397963e5f8cead79b155a1e7f51b8e8ffa469565f91d","sha512":"a3af2f34750b2750b63deb6be60f7c0f85a84ae51da1c0c431e1e833a76855322c8ac68d4386a2f098ae635dd4b76eabdc30a050fd33a8a1c9b25a98d58973bc","ssdeep":"","tlshash":"96617b14aba7c0bc201a39017cc0c80bf10ae76821f1411e28fb3c15fb74588eba7f62","first_seen":"2023-10-26T04:59:23Z","last_seen":"2026-08-30T02:39:00.537647Z","times_seen":51,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/css/bootstrap.min.css","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.003Z","timestamp":1788057500003,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:19 GMT\r\netag: \"32224-6a8f0595-285823;br\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 21663\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 02:38:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":205348,"size_decoded":22085,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (562)","md5":"77b4f9a11af423516ef2d297a41268c8","sha1":"036fac7b3efa298490944c32bacbec51f6731f6a","sha256":"72ebc935d61dedf776bacf885c3de8169adde0d10537513d7b2a3d2601e3381e","sha512":"52f8d3ee8c06b3aa7bc42511734cce93fc0d109bc9816b4443b3fc2b711bf0600e2b3d9ef8688fefa873dd5b9820fb7a9e24c32cd2981419d5e6412ebd905ee5","ssdeep":"1536:wCnpb1FYhxIWqb7MpBhGUtF6WMQVUJCI8stszleSQmuw:w9hxytszleSQmuw","tlshash":"9014304aecf21959184b816c69ee6bb5b33c4083d31edd79bd8e3354cf492918d62f88","first_seen":"2023-06-02T00:15:33Z","last_seen":"2026-08-30T02:39:00.538865Z","times_seen":133,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/10617afa608d0dc1d592c4cdfd385d737247a84d","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.031Z","timestamp":1788057500031,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /10617afa608d0dc1d592c4cdfd385d737247a84d HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 9\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VumanWuFVlbPkbuJlUAXCBWiJwa5V8%2BGZXKJR0gdFUlZTTvigVBJskk6n0bAON%2FY8qEp%2Fdr5XbsWb32C8bzvP0FpIEX7kEZ%2Fxh8G2Uarbt9Bd%2Bs8zwXw5dcUR2vuEpY%3D\"}]}\r\ncf-ray: a3306b2f4e153181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T06:22:58.106875Z","times_seen":18180477,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.539Z","timestamp":1788057500539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://winnersbank.online\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 10:17:38 GMT\r\nexpires: Fri, 27 Aug 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 231642\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-30T06:24:09.263615Z","times_seen":279778,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.541Z","timestamp":1788057500541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://winnersbank.online\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 28 Aug 2026 18:08:07 GMT\r\nexpires: Sat, 28 Aug 2027 18:08:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 117013\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-30T06:21:09.281312Z","times_seen":554751,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/css/font-awesome.min.css","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.006Z","timestamp":1788057500006,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /css/font-awesome.min.css HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"794d-6a8f0595-28581f;br\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 6656\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31053,"size_decoded":7076,"mime_type":"text/css","magic":"ASCII text, with very long lines (30890)","md5":"3cb2868226348d035a03c34241a4f374","sha1":"810f1478bd82cdbb541b7f9c7261d920f0fd7e7d","sha256":"dc7430ba612de67fffab85534dd42ead2825332cfab3348384882b6a0e689df0","sha512":"5d6fa28e518e4e47fda9f300e3178abb2e11d534d140f4f0e55a27ad6eb662dfd3c6d1bf6633ef649d7131baf5b2d4ccc4644dfa6dd20375ff652c426669f676","ssdeep":"384:cHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:cwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"d5d242e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d22a512c5fba","first_seen":"2023-05-12T13:19:57Z","last_seen":"2026-08-30T02:39:00.540567Z","times_seen":111,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/elementa0d8.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.017Z","timestamp":1788057500017,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /translate_a/elementa0d8.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-type: text/html; charset=UTF-8\r\nreferrer-policy: no-referrer\r\ncontent-length: 1587\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T06:22:58.106875Z","times_seen":18180477,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/images/clients/logo3.jpg","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.055Z","timestamp":1788057500055,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /images/clients/logo3.jpg HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"cd5-6a8f0590-28583a;;;\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3285\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3285,"size_decoded":3661,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 250x100, components 3","md5":"b4c060837cf81277335e99c0bd4e5be5","sha1":"6a194c086d656ed79b4e648cc0b046511025a636","sha256":"df77c46631aa8ed3002611d4b0fc81fb193183f34a548a081dcea4f3ee67a25f","sha512":"17c1007935a5119c4c974ba29680ab5fb84450ba38ea4c1f2cbd17721d8b6f0c5dbd9d18d71bb2e5f00eb8d430d0f55d0773ed03ebad16e89b4c786ef010ac56","ssdeep":"","tlshash":"c3611bcedc0110dacdd914fa27cb49d7d01b7068be63f91a1842bc1ae9e6fec1663545","first_seen":"2023-05-12T13:19:57Z","last_seen":"2026-08-30T02:39:00.541828Z","times_seen":139,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/images/counter/counter-bg.jpg","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.511Z","timestamp":1788057500511,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /images/counter/counter-bg.jpg HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/style.css\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"11da78-6a8f0590-28583f;;;\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1170040\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1170040,"size_decoded":1170422,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=942, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=1920], baseline, precision 8, 1920x950, components 3","md5":"67192367efc12051095d28ce35847834","sha1":"479277a3814f390bedb10ba7ff228ff59756eb18","sha256":"e5586313c1c6231e7ce3255d71672302765d571d62f4854c424498fe9427160f","sha512":"c29ff4dc12ada17324a690afb7f581a6a473e5a887b0501dfce449b9768843be8d5673e517f8c57e41cb0e5cc2201f88cd14b088b23020b356ad0bbf034ecdf6","ssdeep":"12288:gJfBzviDeWGh4YHvTVu/P75dwQ1FNvT19xrvtBzg5MY3az8dax768OiE3Y1TW4Ud:gSr6fHbVWAsR9dguUaz8dafE3Y66M","tlshash":"dd252361c861af05ff9e2e38b3a19e9c1008573b57d8911c356dcf43b7876ea3a5e488","first_seen":"2023-11-28T03:07:00Z","last_seen":"2026-08-30T02:39:00.543391Z","times_seen":88,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":253,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/10617afa608d0dc1d592c4cdfd385d737247a84d","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.587Z","timestamp":1788057500587,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /10617afa608d0dc1d592c4cdfd385d737247a84d HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://winnersbank.online\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sun, 30 Aug 2026 02:38:21 GMT\r\ncontent-type: application/x-javascript\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncache-control: max-age=7200\r\ncf-cache-status: MISS\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3306b32c9983181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":366,"mime_type":"application/x-javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T06:22:58.106875Z","times_seen":18180477,"resource_available":true,"data":null}},"time_used":509,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":493,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/images/clients/logo5.jpg","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.057Z","timestamp":1788057500057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /images/clients/logo5.jpg HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"10b7-6a8f0590-28583d;;;\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4279\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4279,"size_decoded":4656,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 250x100, components 3","md5":"26bab8bb7e4bdae258f33840e5a408e2","sha1":"6072ee8b2db6caef7baf48ec8d38c38a956b980b","sha256":"e81bd90f92c0ca7b488a9b58614704157747bed9bad91e6d0e2eb561e80df6d1","sha512":"b424cd8d6471b3dac4ae4204c022b3e9c471bc29667ddf9f59af61fae55b62dc79eba4c6edd60fae2c692daf750e57fd25259101cae59e7b2414b808b88d0979","ssdeep":"96:HwR1cZDOlgD1Nl7OasVVu5IFGu1IRbfSjLOse3KZEk:euZylgrdzsVVFJKVSjqsdEk","tlshash":"4c914dcbc950a66ac9c5c27d7fc14e31a219d6143b3bdc17c6e9ac84f6d639d0946360","first_seen":"2023-05-12T13:19:57Z","last_seen":"2026-08-30T02:39:00.544994Z","times_seen":139,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.547Z","timestamp":1788057500547,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://winnersbank.online\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 28 Aug 2026 18:08:07 GMT\r\nexpires: Sat, 28 Aug 2027 18:08:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 117013\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-30T06:21:09.281312Z","times_seen":554751,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-DqnxneoL.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:27.491Z","timestamp":1788057507491,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/shared-DqnxneoL.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://winnersbank.online\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 30 Aug 2026 02:38:27 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a8ffde6-42f31\"\r\nexpires: Fri, 27 Aug 2027 09:09:57 GMT\r\nlast-modified: Thu, 27 Aug 2026 09:05:42 GMT\r\nx-77-nzt: k+msf4lEP8XXUFaIRSe3LL/SyTcKPPLnybJItN3CO1HWhk6JY5BRX78nUVkXLWOVCFYOrJw\r\nx-77-nzt-ray: e2f75420f13f72e9c897936ad7ee5c1d\r\nage: 0\r\nx-77-cache: HIT\r\nx-77-age: 235691\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":274225,"size_decoded":93070,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44710)","md5":"00e2016c8eaa5d81104f61ec86462ef5","sha1":"16249d91aa367532b08f1dc494900a84520301c3","sha256":"d7da9bee8ad6397d1e6788b169f82b37f111b2628a998188e707329483ce5596","sha512":"caefb7d25ba6b24a5864f3ef23b2c5200246c88d0fe8e22095b3672597b729e0b3b99447d4c1458c2c5d74204846caee20095e727b273020593b4e12dc878952","ssdeep":"6144:FMAopqOWSr8ad2jJKaQqhJp9cuRgufObV:4qOW2Rd29d/DRJfObV","tlshash":"f9443ad53294b035439b51e6906f2106f33e5c19580d812cf269ece639baec4a2f7fb8","first_seen":"2026-08-27T10:24:41.327319Z","last_seen":"2026-08-30T04:53:38.279284Z","times_seen":148,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/images/clients/logo2.jpg","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.053Z","timestamp":1788057500053,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /images/clients/logo2.jpg HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"d28-6a8f0590-28583b;;;\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3368\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3368,"size_decoded":3744,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 250x99, components 3","md5":"cec70591c0d66675f46ba2f831cb005e","sha1":"50167d8304a248682bf3a4c0e75d5929cd800eb8","sha256":"b4201c7999cdfdd4a482fd62026fb5ca4d2576fb3cde667392206fe6f9c20d0a","sha512":"615672ab44ae171e98f012782fde5d2c333c038339d6b4607a81ccdea18ea425f9142e559453750d2a470ec6e117c4d54d14646ea736784acaf57745a1b44187","ssdeep":"","tlshash":"c1616d45e08516d0ce6e3fbc2603ea7be10866944c56ee232ac144b1f9f7f6a8420709","first_seen":"2023-05-12T13:19:57Z","last_seen":"2026-08-30T02:39:00.546603Z","times_seen":139,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":495,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/js/main.js","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.029Z","timestamp":1788057500029,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\netag: \"efd-6a8f0590-28586b;br\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:08 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1038\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3837,"size_decoded":1385,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"da505e4cfd8087582597eabb81e86c1c","sha1":"779ec7136d2ec513b68b71a5b218be7ad5f3147d","sha256":"8d20e8e648ce5faf7e04e9dc665e80d7aaea0a0f6e203693c1a21ed15342379e","sha512":"cf31217b372a2f9dc14b4661c4b74661091bbfd4b8d2005183dce49e6fa163b7a32c259afde3d6e66ecb375bed89f29ce226b8779bacf32487aebbc7ac24fa95","ssdeep":"","tlshash":"dd81f0193e58613145bbe32eebba6385fa79006b510290123c6d8d581fb0ef116fcecd","first_seen":"2023-05-12T13:19:57Z","last_seen":"2026-08-30T02:39:00.547682Z","times_seen":139,"resource_available":true,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/images/about/about.png","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.041Z","timestamp":1788057500041,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /images/about/about.png HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"6c954-6a8f0590-28585b;;;\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 444756\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":444756,"size_decoded":445135,"mime_type":"image/png","magic":"PNG image data, 600 x 536, 8-bit/color RGBA, non-interlaced","md5":"7103a40b4dff4d9448a58225820e3657","sha1":"2c9b93b35e7b8949f6271acfaecede164451278b","sha256":"914973a23e0f2238f7598483c1edd31ab4ddb91d601e9ceb054ec32869d1e7d6","sha512":"71352b4b748fa729221379f70556ff29b5a1890ce3ceb056801e615f45ee4e0ca2bf53f42bd67271d054c0b30c04d6a2081694684e95af2738da1baba8f1987c","ssdeep":"12288:T/yVmebSOJLS2u1O8RWFye/3PYobPqgkDcF2:eQ/szvPYozqpck","tlshash":"ce9423a144cf916b2394f0b1a9fffd592ea48119b8d17f4f3e9e5d458f8429c0e6240e","first_seen":"2023-05-12T13:19:57Z","last_seen":"2026-08-30T02:39:00.548585Z","times_seen":128,"resource_available":false,"data":null}},"time_used":722,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":326,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/images/map.png","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.515Z","timestamp":1788057500515,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /images/map.png HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/style.css\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"1b52-6a8f0590-285863;;;\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 6994\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6994,"size_decoded":7370,"mime_type":"image/png","magic":"PNG image data, 320 x 156, 8-bit/color RGBA, non-interlaced","md5":"845ab7254bdc4ff8631582624a0fe6da","sha1":"e0c49dacb1aa90e778c5218c26e473dce05a1396","sha256":"065c9a2b71d02c8b89224f9e43c2002f47e66ae7d775ae0c8e266cc0bca08d53","sha512":"699da96324c0467a78c587851ebf4f39bcac0b280a281231ccb98a3f2a90f4db1acf6e9fc71645c0559aba44663dad6bcad44e058f7a95cfb3dc04a01570304b","ssdeep":"96:Rhd89n3czC+8u+6696mukFgrqw7WnWsSQtcx8uJTEMLo52Zx0U3pKq7EUoikp+Pu:hzqurhaWKW6CJxj9Zv7MiQo/O0k","tlshash":"70e19e95899101fc1ca13da1e3aae2c10d7ff40450e187bb5afbd41d1b9caf898f6630","first_seen":"2023-05-12T13:19:57Z","last_seen":"2026-08-30T02:39:00.549928Z","times_seen":142,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.348Z","timestamp":1788057500348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://winnersbank.online\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 10:17:38 GMT\r\nexpires: Fri, 27 Aug 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 231642\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-30T06:24:09.263615Z","times_seen":279778,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":2,"connect":30,"send":0,"wait":17,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/images/hero/hero.jpg","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.508Z","timestamp":1788057500508,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /images/hero/hero.jpg HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/style.css\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"1eb5e-6a8f0590-285852;;;\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 125790\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":125790,"size_decoded":126170,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=LESZEK GLASNER], baseline, precision 8, 1920x1080, components 3","md5":"7bfab6f11497db778c82c6f17ae78e72","sha1":"173bc5c8012beae9e370979b6b4f78d128b98a26","sha256":"9cdba8050d3ab914bb0fe4051bf59be597f4b1584d498fc42c7f2cf09d2170c1","sha512":"d467d7e44dc57fbc54597cf0465be0e6f84776ddd973b77e71f79dcdbd497c9bbe0297acbd1f59dc9f6abc0b3627dd40feb23e2edfdfc50bbcb8ee5cf1f30338","ssdeep":"3072:yx0JXqfauxhArDit6CPefWgI3yGqtaMshU4qdSVAhE:c09qCuxhai5GJtku+Z","tlshash":"35c312878ec5c7d2c0fc4bbb994f22612b6f86f44f849329645058fa61b2593ef3ad44","first_seen":"2023-05-12T13:19:57Z","last_seen":"2026-08-30T02:39:00.551384Z","times_seen":123,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/fonts/flaticond8bfd8bf.ttf?613050ed3a59da38efe753f9a8ce0cc9","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.546Z","timestamp":1788057500546,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /fonts/flaticond8bfd8bf.ttf?613050ed3a59da38efe753f9a8ce0cc9 HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/fonts/flaticon.css\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"116cc-6a8f0595-285836;br\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:13 GMT\r\ncontent-type: application/x-font-ttf\r\ncontent-length: 29501\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":71372,"size_decoded":29937,"mime_type":"application/x-font-ttf","magic":"TrueType Font data, 11 tables, 1st \"GSUB\", 16 names, Macintosh, type 1 string, flaticonRegularflaticonflaticonVersion 1.0flaticonGenerated by svg2ttf from Fontello project.htt","md5":"50d47766e092609fcc400fdb9cc45fa9","sha1":"1e60f332ae5720ce29d32abb0e0b35dd482b4dba","sha256":"b147ee3cb497ffee1b0680a44197d4fa46cbac627f5ecc4eb4e983a747d3cf92","sha512":"50d1f9af65bf5162ec3753454b5ac7b6935b3d6e2209494aef645a66fa86d04140646b902171505fe6b7bbeb43ca0c8bf474485237d77eb4a3ecf0603f7d0712","ssdeep":"768:mhF04ADpSxVF7MKF+6KPB23w9B3renNR3D2K0UK0lNYHRHpF8JL6gw6gXFQd3ORW:KA2Z+6KxFrenNR3qK0UK06HP8JnW9SVT","tlshash":"6c635a6df3ab4da6d32376ff8c5440224ae2b605228338d7ba5c352d59139d46ff062e","first_seen":"2023-05-12T13:19:57Z","last_seen":"2026-08-30T02:39:00.551941Z","times_seen":143,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winnersbank.online/images/clients/logo1.jpg","fqdn":"winnersbank.online","domain":"winnersbank.online","tld":"online"},"ip":{"addr":"192.18.158.191","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winnersbank.online/","date":"2026-08-30T02:38:20.052Z","timestamp":1788057500052,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winnersbank.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 15:04:49 GMT","end":"Sat, 07 Nov 2026 15:04:48 GMT"},"fingerprint":{"sha1":"02:3A:BC:37:AE:43:E9:EF:FE:E9:E0:B8:5E:B4:C2:69:E5:54:BC:AD","sha256":"3A:42:30:35:63:48:0F:90:C8:F7:23:17:7B:1B:73:90:B2:A3:55:B9:3A:C1:D9:BC:99:B0:A9:EE:1F:9F:5E:B8"}}},"request":{"raw":"GET /images/clients/logo1.jpg HTTP/1.1\r\nHost: winnersbank.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winnersbank.online/\r\nCookie: PHPSESSID=9dj4rhgu56g2m6q0mrcs41jluk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 06 Sep 2026 02:38:20 GMT\r\netag: \"ddc-6a8f0590-28583c;;;\"\r\nlast-modified: Wed, 26 Aug 2026 15:26:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3548\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 02:38:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3548,"size_decoded":3924,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 250x100, components 3","md5":"94c024eb12b604bc0a99524f36a96252","sha1":"aec4b1123dfc727afb2ecf1094056ce1d35fd472","sha256":"23dbb5d1ddf82fb79355fd3ae22b2391fcf7c8107814598a1af60e28dcd52f66","sha512":"44f27d017efd28cd0e7bce5c668655b4a084f053802a9468707c21f3d94779a253afb3f513318d61e1d270ffea60a55386a189a2401960abde94ba5aaa9e05dd","ssdeep":"","tlshash":"a3711a81f250a4e0ef765fb9082b3112c81a9cb4de92fa21090675d073f2f1dcec6728","first_seen":"2023-05-12T13:19:57Z","last_seen":"2026-08-30T02:39:00.552943Z","times_seen":139,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":496,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"winnersbank.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}