{"report_id":"67ba4617-5bac-41cd-96f0-0de556da0cca","version":6,"status":"done","tags":[],"date":"2026-02-21T20:54:50Z","url":{"schema":"https","addr":"wygroupbnk.com/","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":0,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"wygroupbnk.com/","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"title":"WY Group Bank - Home","dom":{"size":109835,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5276)","md5":"1422759ad43015ebb3f9e4f2f7e72b66","sha1":"191aab7c509cb31950b6fb4b0e9d2c3e1fbbb0c3","sha256":"0b50097c8e23dc9a7c8a1ddac87b22f6f6823f379240cd6e9dc707852200323d","sha512":"42490e960bcd60545f61560a9d1f560318dfe6ed2479720ab342c307e378ccc1368b2b7430005baf63e32d655cd3ff4764baf6d0b583a01294d20bd7ef915330","ssdeep":"768:5kRXbGROpoh2BCHedsRVKH2sV4yw4uqEPVZ9eTlSAfAg4eee+eeeieeeyeeeW+PR:/MfAg4eee+eeeieeeyeeeW+PgC","tlshash":"eeb3fa2118f31a734293d5d6e6a26b1b6fd2d207cb674581b3fc03964febc91a91321d","dom_hash":"domhash99cd3d79b160e0615b10b9c9bbe4b5f3","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"wygroupbnk.com/","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":0,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-28T20:54:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"wygroupbnk.com","ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"domain_registered":"2023-09-23","domain_rank":0,"first_seen":"2026-02-21T20:18:44.25941Z","last_seen":"2026-02-21T20:18:44.25941Z","alert_count":52,"request_count":52,"received_data":4259950,"sent_data":61980,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-15T22:14:55.382377Z","alert_count":0,"request_count":5,"received_data":197275,"sent_data":2747,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.gtranslate.net","ip":{"addr":"172.67.68.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-05-26","domain_rank":101861,"first_seen":"2022-11-07T21:49:20Z","last_seen":"2026-02-19T02:04:21.482373Z","alert_count":0,"request_count":2,"received_data":20902,"sent_data":872,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-15T22:17:53.373077Z","alert_count":0,"request_count":1,"received_data":88097,"sent_data":631,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wygroupbnk.com/assets/global/js/jquery.validate.js","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd7d52879bd864e62e9b6a06f88b8086","sha1":"84ce4e5ac168ca6c37e8111f15c05ff700617bee","sha256":"84026e4d1231690805132178d157da4b7bb7906548ca9cfdc7e1176432bc1200","sha512":"d61294cdd6ba70f7d689b0eb6fd252a6ab208ba78ca9b27dd2663bb9e9620bfd73ecbfd563a0e52fb2ce82a473e32943727c4d5c0485b76b899329e4c97c1c2a","ssdeep":"1536:wJRM/JWZPv12/1Kb6K495zMvHjHG+Nn5VX9Y4jcyAtrU7XF8:wzHHDn5U018","tlshash":"76733f4e3a5a10194d3b73feef8b914ef7a6412b410295187cac42902fb5db462e5fec","size":76359,"data":"","first_seen":"2023-04-11T09:53:40Z","last_seen":"2026-06-05T12:12:26.023793Z","times_seen":201,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/global/js/lightcase.js","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"facbbd04684181c17e8bdb674295200b","sha1":"edac11de0011743147b6a302967ce393bc0bd593","sha256":"a864278b1e750825bdf4465c7d5ad98041a4e6976fbbcfbbc6876155273e7e69","sha512":"051bc6bd457bc5f66a449d769f54566d182c251de82f14a2bfc22052b98e9c97a2b783f52e481bd6850ab52cc72a10a089faff75b9076bf1958fde9c55bfeb28","ssdeep":"768:qJscZN6FGUPSAGOEfZb00GpMhrNQqXNTrMkDZ0x44:ctZ4iTZb0uhrNVNTA4ZQ","tlshash":"793343f8730eb19a445b5358e478924be63cc431223e79bab4f1d694f550068cf62fea","size":53983,"data":"","first_seen":"2024-01-08T22:59:47Z","last_seen":"2026-06-02T10:24:03.279722Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"5bc12e7a7bb3b0a86700b8d186a92c47","sha1":"dd32707b707261e7f0dcd66ada8e986b14fd5e25","sha256":"e13d5f7d9d9e79f16896b09e7ea9018bb4a5933d5a39000bae0ef6509d542b52","sha512":"c515df0b7efee1c66f5e4e15aaece609599545960451e69fa604d9b3bf306c59467dcf85543fc7edafa286644a7763c418a3b0a6889e56fac995a879671461c9","ssdeep":"","tlshash":"0be02b1a193a983cf72c038459b73f05087d047216193e35f3ed9d018f82112124708f","size":321,"data":"","first_seen":"2026-02-21T20:18:49.192736Z","last_seen":"2026-02-21T20:54:54.212347Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"bb1824822b394b7518a760518c7c768f","sha1":"6185c39430a1dfd1b3362b8ead587c750027a38d","sha256":"fa551f699dbea25b882b05827dc5b3862887aea00142306b4ca56087a3bf9d93","sha512":"26f96fb0837c2a4f7c8732f6a766948a2ffd8708fe5a3960cbd7d4ef75da40ff51319edd269794e513d4ae8227f31eb2906a752866ffea23a03086d2f9fb781d","ssdeep":"","tlshash":"d5b0120a70970648957324ea5a7ac5062b11111f04c4d805bd4c51410f0103e34335ec","size":126,"data":"","first_seen":"2024-01-08T22:59:47Z","last_seen":"2026-05-30T23:14:51.287553Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"c476793412e89dbf7b9962c149f1a8d4","sha1":"85410585b0464baa9baaa97b15ee4bb7d1684076","sha256":"783444e3425f4972dcc2e75e56e9b3037e2655338d79f0f074e142629a86718a","sha512":"d46d5040eda297bdae783cb3c187339d20dbf3b02ffaa38513616b4b8c2ade4fca7908a3ecc1a9ea79bebfadb7d3201e60206107d7d1ac3d810868c9b05b948c","ssdeep":"","tlshash":"743148068c618822012761bd8e1fe303638352575ded7da1be8d11810f5c51d65f83f8","size":1452,"data":"","first_seen":"2024-08-19T23:10:48.221376Z","last_seen":"2026-04-26T04:51:53.958681Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"0e90176b9f504677629ccefa7f74919f","sha1":"59382df7070297fdeb072ccb6023f3e567558ef7","sha256":"443de286c9af16fb2feb5891f4a9353bc74b83f2567533d7e79f180d07980a9a","sha512":"82ead0caf78b8a124aef005b9fd59a4de354f99a43bf3d9de033063c72cbd39cc0be735438790103407d78c07c1c313054c2e0107294a168051aa23d48ef1209","ssdeep":"","tlshash":"3ee07d05783f100820bb99f7a7f7d9591a45111b0240c5457a7c57607f6903d30e2305","size":397,"data":"","first_seen":"2026-02-21T20:18:49.19709Z","last_seen":"2026-02-21T20:54:54.215169Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/templates/crystal_sky/js/viewport.jquery.js","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b1902de852b0efc3c167004b1b90809","sha1":"dcb00dab6e15ff253e15438be198d94808eac14f","sha256":"b5cc6b1bff62a81d50bc3d757b095272dcbe58314d6cea68cdcf31202f4310b0","sha512":"fe4dda0368d9da604ea7679104609bae22320da47e3a32639de7b5064895b8f035eb7aca38a10c4677b9b71c0bbb35368095221d347543581a8838bfdb676192","ssdeep":"","tlshash":"53419daa3c5010149d33fb7e8b3f9658f6a98627114994513cad83a16f70b249d9cffc","size":1974,"data":"","first_seen":"2023-11-23T20:16:26Z","last_seen":"2026-06-07T20:31:35.180576Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"ec3496a81b769c36ef61ce79092a1af6","sha1":"a4ac05fb4db4b2964cf047a48c4ca90846b689aa","sha256":"95296983142c34ae1ad29a294e58f600f8bdd4535dcc6c22ffe7ed44db20bab6","sha512":"3990308853d1eee8917dea913b7ab72f1a16e2abe9cd2610c48a71ec75f7090606bedd31b76dcdf853e277726820bc86a9876464e0ac96bb7584ddde5d23db1d","ssdeep":"","tlshash":"35f0270d3a2f20a8527b49a7f6e7c94529a5342b0085c449b5bc02b0af7845a2592218","size":559,"data":"","first_seen":"2026-02-21T20:18:49.198814Z","last_seen":"2026-02-21T20:54:54.216969Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/global/js/iziToast.min.js","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a05a127c793145cec6b721f14fced3e5","sha1":"5d753b1c803de12f4d2217ab0d143d4dcf047010","sha256":"ac860be79a4cfe434ea68f002638f79371d9a85a3b045a1aaf10dc98df551497","sha512":"ee5a4c561a267f7a96635cb529a5e670aebe766289fe358e6b394585db4b76d5df215cad4b358a07425deaada36d4f4e42c06c2c44d9c192f03ac1afeb9bdc64","ssdeep":"384:ShKmhCPzlc5gVCPBpcG/0CEvXArKKpQi8VREgO3MrnHzxJBkHI4505P:+K5PzlcN8DXArhpQzRHO3M7TxfGIYUP","tlshash":"6a82c894722032374aa329a960ff534a3772156ca9c641a4243fcdad5b34f8939f77f8","size":18481,"data":"","first_seen":"2023-03-07T01:10:25Z","last_seen":"2026-06-08T10:05:38.200769Z","times_seen":2900,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/templates/crystal_sky/js/main.js","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b49e429d093298aa2916c060352d1c87","sha1":"551ba1979af7944bd28bc56e9098b2b14a7a5b7e","sha256":"f7f9a7bb7c2ad9c6631a8169962d0703e2c46cf96af13c3ed9da2510c1d71f5b","sha512":"82c8cd2b72cf6bd28671b3a44ef6a5e9ad1ddcf24969172c27f054aaaa1520e189d38ac7a50035c080302024d09e88c0b6e0d0e7ed287a644d8021a5e8e6a97b","ssdeep":"48:k3qSyIqxyyMCkiq4ykt9D9WyaH5y5butnCUGeHWEc7ylDJEcYy3VwyWyxVy3Bd82:ixpibtNsyE5gbutP9mBL9YtA","tlshash":"54d1ae99b02121b094bf37709b4b7214f969096b8310ce007c6e55ce2fb97a493e2fde","size":6495,"data":"","first_seen":"2024-05-12T01:27:04Z","last_seen":"2026-06-02T10:24:03.280675Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/global/js/jquery-3.6.0.min.js","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c14a783dfeb3d238ccd3edd840d82ee","sha1":"ad886e472b3557f3dc7dfa2bc43468ab8d1cef5b","sha256":"80f04717f32ea0320c5e8618fbacedd1fee3a8775ad8292140a6113551d4b5b0","sha512":"fa3e021ca60a9adbe570c6565c7370727904c4396c23a4c519daf258d05fae3e17bfb7607a0ab6dfe2b7150a4ec1b6a95e6d49675291be5f6a4e5679ad78d858","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:DIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"6f9309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89500,"data":"","first_seen":"2023-03-07T01:06:20Z","last_seen":"2026-06-08T12:50:48.620839Z","times_seen":19806,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"f559788976e01ae37fcd2f7e73c3c02d","sha1":"94d7f86e30f1c09cb01604025914f67c2020e561","sha256":"e4bceee2c21391ca9e21a0b30d5f0b4e95c44a7391a4e60af04ac286f6546945","sha512":"9429ae759c7425c6b1e2326768ef8bcad664e21451a2a26e97c532c725b45ef8e6b92a13a92b059613c2de97e7f8ffa45fd26e6163229b9b54240b43f9d41906","ssdeep":"","tlshash":"81f0270d393f20a8517f0ae7f6fb8a4929a6352b0485c549b5bc12b1af7845a3891218","size":566,"data":"","first_seen":"2026-02-21T20:18:49.200492Z","last_seen":"2026-02-21T20:54:54.218823Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"e286710d66b1ddc2044ee065e6cb76a6","sha1":"21e86d3cecea1c3bc6bc30c5cc8f31793c93de1c","sha256":"df8fe94873a33b1d759c02da8bace26ad15690afedc98cb49db612192a6db94e","sha512":"decd8b3b145356a4b32dcedede8c0254f05e671fd0c1a1e956a9b286da408764687ad3230e1ae743e928da9afe72857df241caf4d996ff454ae135c0f88b62ef","ssdeep":"","tlshash":"ea01590f29b39480237370fc0bbb5c0b702b541b4648d903becd22a04f1452c39b6789","size":802,"data":"","first_seen":"2026-02-21T20:18:49.202003Z","last_seen":"2026-02-21T20:54:54.220424Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"531a03129466170a6bb7e12712b70052","sha1":"796c9d8a0535571e177416a0ff7e563be351a0dd","sha256":"916f4ca1f13497939c728e9a7f07bbb54c366173a8d2d505e694ba960f7ba79b","sha512":"0a5f0e0698690946659bdc9cfeb91da52834e6ae18cbbcc3315f52b39ee44245c01bbdd50a3ba154d6cd634ad378f840758c6457ff330ad6ff8013d628ea9fb8","ssdeep":"","tlshash":"20f02c0e04e3585c0873709e3c8eb00558372903640eb8227ece26100f890ace3a2bac","size":445,"data":"","first_seen":"2023-08-26T21:29:19Z","last_seen":"2026-06-04T23:43:59.734084Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/popup.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"172.67.68.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25a53a5f0b8958bcf0942c535cba547d","sha1":"28656ad320afc16783fb4a48ce915e6eebfa01c2","sha256":"c9e18491ace8de422d23023f38a03ca17ab1657d70a5e1a00d4412abdb032bbd","sha512":"6dd60607ec8c9e8792d0472c7c7b49d8d0b68e34748d006ce617be7d8d738994e958ae0c512976edf0aceb5ab2d9f633f1fbd24d16925736296a37908d28ebac","ssdeep":"384:AzCKMPZATN09o0mtEMDXYddj517IHVxBCZlXbt/dDscc:AVMhAh060sEMDXYbZvdq","tlshash":"5882f95a11b3103e5a171129efff2b0c60ba42978101fc21bf9ddd825fc1a9d96a7bd8","size":18677,"data":"","first_seen":"2024-12-19T06:49:00.441223Z","last_seen":"2026-05-08T05:39:26.295827Z","times_seen":1910,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"bb69aaa55065970ea6b5353d676b02d1","sha1":"af2bad134485cfb35df45df9e59df2a0ef13e0dd","sha256":"d232835ced7df36da7b19be5954c38a0fe6e36d0f8b54268ffd8ba4c9c4879fb","sha512":"376284dd8a6f77a8994ff86a4f5e455f3009b560834c3916ebc2862ac854c093a1f579d697455d0dbf31b941e771a0fb7db46f128ed84408bf3dd696d1cbc983","ssdeep":"","tlshash":"6841e127b4fa503664bb70ff95fb458b736b100b50048f08bd4c5e840fa59aa6dd0ead","size":2070,"data":"","first_seen":"2026-02-21T20:18:49.204445Z","last_seen":"2026-02-21T20:54:54.222258Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/global/js/bootstrap.bundle.min.js","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfd824922bdcd8afddd7a123029bba09","sha1":"093df67442d6d55091d9278701071d241a3d02ad","sha256":"286fc75be1e7b08b6e8f8c70b4b6f69bf77fcd9bec929694d122b44ecbb4858d","sha512":"71ed1ae8aa3845ee9467b730d2affdd05f33e929e210d1f13c13bde9dced6beea3e7dc232cb21efaa50f7be917b7f1e328c78ce06208de5dce0a3308012965ad","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZ7:T36WJr9ixF","tlshash":"5e73c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","size":78080,"data":"","first_seen":"2023-03-07T12:08:04Z","last_seen":"2026-06-08T04:38:05.531535Z","times_seen":2454,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/global/js/slick.min.js","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"481ac3f8935c805172d406c12da68e0a","sha1":"fab75193a5fe33503eb2e62d047a01e238baaa64","sha256":"032699f5abc60e8e1b3c28bfa7a9a046addb1777420acb4c599871b5d64f0888","sha512":"a103f8c26db4c1d5b02c3608da138c7f6298bf6ba20ec77232020effc3a1e4f7d8653311f2498226a6233336e0476bd5504e0fd3829ed02ae823ddd0adefbab9","ssdeep":"768:vkqQW+Z4IRuCJ312FGeQuPKFnLfZ4ZwZD/58c04qeJhII4sRA/rhJhdxHcoZlC7n:6F97uPKFI/rhJ+vQgV","tlshash":"a0338406a210177698eb25e13017c54db3fbe77a9a11c1d4b8d583da20ee8058fdfbe9","size":53179,"data":"","first_seen":"2023-03-07T01:43:45Z","last_seen":"2026-06-07T21:11:23.489376Z","times_seen":2243,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/templates/crystal_sky/js/odometer.min.js","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"137173424eea612b37a46854e4884fc1","sha1":"7e1b08b8104c7a83a1b5a855f1977a6686796609","sha256":"eb94751b98ab535553fa4f0be1ca2a81ddec692bcefd6b9fb289ffc3ebf621dc","sha512":"e755834d5ee1683f4104373c4561f6af94e7b92891c80a849db1b2b8a1d89feaa9602ac2724c457aa96bd48e54a0e50b8a3c8b576be71cef4b4b832b0331f1c1","ssdeep":"192:HABzlvQK8QecCHAOcu2a+OdI5s/GMb8Xuulj:gBhv18QecCxVxz+7dlj","tlshash":"f8228580ba11a725835371e151bf0609b7bb99aea404401df67c9dd9be29c38e12bf74","size":10264,"data":"","first_seen":"2023-03-07T01:20:07Z","last_seen":"2026-06-08T09:15:21.694115Z","times_seen":720,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"036b954672cfa0c36bee9f731cba0f02","sha1":"43dbb7c33c5e4e76821f9370eb44918d92f95b4a","sha256":"a21198a49b70a052c6dc86cf9110ad6278f78368a68b57e384e6960aa0efe739","sha512":"deee630a9c312f9670576b586cd96f1e17819ccf23eb65c19dfa826b6a4e0f49c3e12403520827bc214ff8c90c222705e60229ae69896ba91501c09026f28cfe","ssdeep":"","tlshash":"5751cd4fade6a4635ea370ba8bef5004203754037c46e8087bcf43904f6a529a2b37d8","size":2765,"data":"","first_seen":"2026-02-21T20:54:54.22337Z","last_seen":"2026-02-21T20:54:54.22337Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/global/js/firebase/firebase-8.3.2.js","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c0abe55005e4f7d8c973d66b7e2777f","sha1":"3a7479d6ff0e9bf6bd3b2652c69b562e1f474deb","sha256":"9e793ffdc70064bf5eda7745c4c5320f147046c4ef4e31ad223dbd2853dce865","sha512":"66d1cfbb516714cf252a546205e21850d2595cf4858f9d8339ac07b1d43bbd6f5ca2914129a63a1f5457d9e9edf15da3f58e857d754ddbc8f9f66e021ea988e7","ssdeep":"6144:K8YqbosMLHtk4OLs/8wWaoFwApF+GzJXZaGQqdxQUdcujbva18nsLDMX4teWXs4a:nYqbrKOQ/YRQp18nl4sSG+G","tlshash":"ef05b5ccb692b062439360b5507f410bf33b685da40e40acf669e9d67cb954e923bf78","size":859903,"data":"","first_seen":"2023-05-29T16:44:37Z","last_seen":"2026-06-05T07:20:44.059243Z","times_seen":130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wygroupbnk.com/assets/images/frontend/banner/about13.jpg","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/images/frontend/banner/about13.jpg HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 62233\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":62233,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 632x755, components 3","md5":"4cc546333a1b7c2934506f9917051102","sha1":"41bcf918a3100fa0e880e7657b7b98b19a963c96","sha256":"726690b95c531183f70d5bc7568bcbf6c145604bbad33e36c7bb21780d091962","sha512":"3864052db655cd9adc5a56eafdbea4030aa7a055f35c6417d0257e4bf18512ae19a425f27350e73b0832eb7f497774170ee61e286e63c66353da4945302afa8f","ssdeep":"768:VL7diP/JEOZZkdcI9ANF2SwpMbuJmWcKCJikaQdKkJEHjiX9USJSd9iTPBCDUTzx:VLEHJTQGLnim5J3JEDnMT5CDUnx","tlshash":"0653f111f4729bd4d2c4164c4cfd8486996567e5aef0c018f2edacdcf7e80aba92d24e","first_seen":"2026-02-21T20:18:49.162303Z","last_seen":"2026-02-21T20:54:54.15756Z","times_seen":2,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/templates/crystal_sky/images/shapes/hexagon-shap.png","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/templates/crystal_sky/images/shapes/hexagon-shap.png HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1390\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1390,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 87, 8-bit/color RGBA, non-interlaced","md5":"28f3af634416c98e9918d8ab8b4a3741","sha1":"9efc442e25c069f665c4fb3c71123c85c566a7a4","sha256":"0e4cb5928a40e5fc9ab703d824044b6626851736cd43aef8498cdfb5786d2e95","sha512":"e342de9296e3a5bf231b37236f2ed1c6aae3393046f2eb34ada610732e912b38eb433327d3ea09c3fffe6116f12641e0b3e3266dc61d9ded2a881408a02205e1","ssdeep":"","tlshash":"cc21e9c83bbe831716fb9921f57164e025a7329c14094851347d313693f27c8b2a7720","first_seen":"2024-05-12T01:27:04Z","last_seen":"2026-04-26T04:51:53.917092Z","times_seen":41,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/templates/crystal_sky/images/shapes/polygon.png","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/templates/crystal_sky/images/shapes/polygon.png HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/assets/templates/crystal_sky/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlM3czIxaS9oQjVBZWxUSXR6MW9MaHc9PSIsInZhbHVlIjoiK2Z5WE9TakRSam1uLzRZcEk2Q1VzcFB3L256djVjRC9mWXhoQVJlSHpCNUV2QS94ek1mUjkxa3Y3RFpud21VMjdQeEw3akozQzkxNGxxMDFLUUlKbzVxZlM3NGlwSkNES2d3QkxRYXFEY2JkVUtLTjBCS25JVjRKNEpENkNYRXkiLCJtYWMiOiJjNTQ4ZWFkMWI4NTExMmYyZDU1YjU4YzYzYzc2OWRlMjA2ZTVkNzk0YWRjNGU4MDc1NTVjZjIxODFjZjhjZTdiIiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6ImJmS0M1by9WVVdLdTFoN0dvWndURHc9PSIsInZhbHVlIjoiTWpFVmxrWDJydXpYSTRNeVllY1F1RXBrT0hCT042VkZrZXJrMDhnL0hyR0RVeTJ2TFhmQVdwN241RTd0WVUyWE50b1pXTktSWmZwVWtFYnNQMnM5Q0JMZ1laNTF2VEU2QmFWcGM5K1dvMFc3ZEZJaUQvRVdBVk4vRjhSbURiVXQiLCJtYWMiOiI2ZGY5MWJlZmIwZmVkZmFiYWQ3NGE2NTAwNjk1ZDM1NmI1OTdhOGE2ZWJiNTA2ZTFkNjNmNjU3NTZiNWRlMDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9070\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9070,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 462 x 454, 8-bit/color RGBA, non-interlaced","md5":"8d35dcdb49bb25f8622cbc427d169a10","sha1":"14a677d5b73b78cafbc0e8ed078ad68b27d6cdea","sha256":"d56ac27b714e3a3e66b9a3de2463043e1d75e3cef93266fa7e859533aa69f707","sha512":"1743188f85e3b31394f9b6169d743cd55a8b6da1f8c7e05738f4e9835c906fcc6b8802db403d9cb79b4434b50d52b09d08f42e14e21b0e220215db097712371b","ssdeep":"192:jSaYttOf/50C13I9y4yqmHH0ejFOVnqVBnQsfYpgRwzz0vmwv4CVsSEa:WaYLOz3IHybHUej8nmlCV0fV","tlshash":"d212a0c9218399797cfa1e204527b8be1955463e510b32d1c270d27eabb0050ef59bf9","first_seen":"2024-05-12T01:27:04Z","last_seen":"2026-04-26T04:51:53.868113Z","times_seen":42,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/global/fonts/la-solid-900.woff2","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/global/fonts/la-solid-900.woff2 HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/assets/global/css/line-awesome.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlM3czIxaS9oQjVBZWxUSXR6MW9MaHc9PSIsInZhbHVlIjoiK2Z5WE9TakRSam1uLzRZcEk2Q1VzcFB3L256djVjRC9mWXhoQVJlSHpCNUV2QS94ek1mUjkxa3Y3RFpud21VMjdQeEw3akozQzkxNGxxMDFLUUlKbzVxZlM3NGlwSkNES2d3QkxRYXFEY2JkVUtLTjBCS25JVjRKNEpENkNYRXkiLCJtYWMiOiJjNTQ4ZWFkMWI4NTExMmYyZDU1YjU4YzYzYzc2OWRlMjA2ZTVkNzk0YWRjNGU4MDc1NTVjZjIxODFjZjhjZTdiIiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6ImJmS0M1by9WVVdLdTFoN0dvWndURHc9PSIsInZhbHVlIjoiTWpFVmxrWDJydXpYSTRNeVllY1F1RXBrT0hCT042VkZrZXJrMDhnL0hyR0RVeTJ2TFhmQVdwN241RTd0WVUyWE50b1pXTktSWmZwVWtFYnNQMnM5Q0JMZ1laNTF2VEU2QmFWcGM5K1dvMFc3ZEZJaUQvRVdBVk4vRjhSbURiVXQiLCJtYWMiOiI2ZGY5MWJlZmIwZmVkZmFiYWQ3NGE2NTAwNjk1ZDM1NmI1OTdhOGE2ZWJiNTA2ZTFkNjNmNjU3NTZiNWRlMDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 96752\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":96752,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 96752, version 1.0","md5":"36fc297902c9a2e857858baa6ac25f2c","sha1":"89d9531c0c70a8751dff83c1917baab1f16a2071","sha256":"10a68e01209d939afa9318ee71601b0a6e10f025d4cd6d98a492d340b73941fb","sha512":"c5711d5027762fbc8d352dfdf64094958348b873671c891e8c5cf701a569c3bad672a380db7fad76692bf79dc9235b37f76b6f42f73698c9f85d2c7a23aa62fd","ssdeep":"1536:H8wZeXMjWqtJeAAHBX6ANib7HTYJv+Nr1ScHQjn6t/k5LBNCMAG35y:H8hXMjWeeVHtA7evKr1Xwelk51N4Gw","tlshash":"1f930257f0921be097c688990e189035cd39fd71397fe9f4e603ae4cc361927e52a4b6","first_seen":"2023-04-05T18:32:05Z","last_seen":"2026-06-08T12:44:00.351207Z","times_seen":12545,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/templates/crystal_sky/css/color.php?color=#0C5CA1\u0026secondColor=14233c","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/templates/crystal_sky/css/color.php?color= HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css;charset=UTF-8\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-length: 78\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":145,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"a5bcb6e30f51776d4f353920ffc34eda","sha1":"fb4043b82bcd420bbb6194388db44749dfbfc81e","sha256":"a0ea54743df90042e08a4b660c4ebcad8366d80b741330a8b2975dee71cc80db","sha512":"457a16d87177c1b0a3139f5683b04b287a6af50f72077f62f393a77ca8b6227909df75b81f879c594ddc94b485dd836a9ac7001e18bbecd14194c9c1d1c19f74","ssdeep":"","tlshash":"1cc0016a0524b93a0b249222a2d0076fc13008670b903e8478d0082a8eb86323073800","first_seen":"2024-08-19T14:13:23.678494Z","last_seen":"2026-02-21T20:54:54.163158Z","times_seen":4,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/templates/crystal_sky/images/shapes/line.png","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/templates/crystal_sky/images/shapes/line.png HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 638\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":638,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 137 x 26, 8-bit/color RGBA, non-interlaced","md5":"1b5709ca771de416db069066320677ce","sha1":"89ed462d03a288aaeacf57f9d61c657a2314bfe7","sha256":"a197269d0b8b85d49526dea87b96ee2808b3b35c094e85329ab02dfe6d570615","sha512":"8bf70160d38d8513d1115a9c2341d46abb6a88229273343c58e410af712ff767bb0930d263a51f1585cfea99fb8b3f7678c1b7961c818c1bdc8b52cc876f6ab1","ssdeep":"","tlshash":"bbf068c9dd4845bd28c91540405bea50e53ed75f92620c5de754b0c67027ad85a463c3","first_seen":"2024-05-12T01:27:04Z","last_seen":"2026-04-26T04:51:53.898147Z","times_seen":41,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/global/css/iziToast.min.css","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/global/css/iziToast.min.css HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 9933\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41500,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (41419)","md5":"ca2f839e9a41207ce4d486b75b0dc926","sha1":"398acaa4eca2baa749a90175fe24d3c2a35f19ca","sha256":"20b2776eaee552defc7c9b25bfef14a891f0dd4a12ac7320d689d749e1ca0fa7","sha512":"d9feb978fe3c1c26cbb2efb380a70eeb7501f5631343a998abfc84766f9a6d2f1e521cee40bcff6b381515a7a1d8fb4726af583502ee23549934757766257f5c","ssdeep":"384:pV5zpPVWahj8Ik/4kYip7pHRiJhkgL6LlG1oLzlRCPoA50UhLoMPFPsR4lweGbzi:zPVNhlHgppGf1oWQA1","tlshash":"711345fd15f0124454c6ab4296da6a980e3fcd9770ea1cef32cd344b8b46b9e136532b","first_seen":"2023-04-10T01:39:17Z","last_seen":"2026-06-08T08:29:57.644777Z","times_seen":1981,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wygroupbnk.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Feb 2026 20:53:39 GMT\r\nexpires: Thu, 18 Feb 2027 20:53:39 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 259246\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-08T12:34:26.891385Z","times_seen":181744,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":159,"dns":0,"connect":20,"send":0,"wait":8,"receive":5,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/images/frontend/banner/home-banner3.jpg","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/images/frontend/banner/home-banner3.jpg HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 107185\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":107185,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 495x560, components 3","md5":"bbbb7929dc80650066f2151f3a565bc3","sha1":"ea22a1d9c87edf5ce7e618d6bdf9696c33753b8b","sha256":"1ec5d93ec6d346c5a388501cd1360013f085ab04dee78fd10c6475696f8ad121","sha512":"eda5e895bde838ba3fcfa714aaab2c00949daa2721eefdaf984e945371ec2b2196f923851639953d59f24ded061a7b0c95f6d41d66cf57d585bedc84f91ffbbf","ssdeep":"3072:bSHxQ7IxH+xO3bsRP8HGagPEyw3SoF1lC:axbgP8ma5XDFC","tlshash":"eda312ee35485fd8b59de3dae19432dc20e3161b31caa628771c52d2eef7892c52348d","first_seen":"2026-02-21T20:18:49.146822Z","last_seen":"2026-02-21T20:54:54.166661Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/templates/crystal_sky/css/custom-fonts.css","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/templates/crystal_sky/css/custom-fonts.css HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 443\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1268,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"85f00abe211d9e44e4e6663144066281","sha1":"baa3415a9c9f311f17a15f0369387fca3b9765b9","sha256":"290803224d01fe2a0ef0644c03a0fae7188dda82dc349a195c06bf6730e5e114","sha512":"a9f12e0aa4f94b54688093a02bcc97ee47881715e204fd8482c5fb7e13bbcd4a7a5993ba7d1300a4bba057d1931226382a7229c0abf0563d6ed11ebbbaede9b2","ssdeep":"","tlshash":"1321d0a0e8bc1455a7105cc533573b20bf0e92229c856cceb797285caff771682d635d","first_seen":"2024-08-19T14:13:23.672801Z","last_seen":"2026-06-02T10:24:03.280238Z","times_seen":53,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/templates/crystal_sky/css/main.css","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/templates/crystal_sky/css/main.css HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 16775\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":113443,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d6983cb2349d4a9dd45ecca64c9d22ab","sha1":"605c62129866514db8dfcd8e19518932ba481213","sha256":"a7a509a722fa71fbe92c995e693ece01237d731e7008dd17ffbc2e48d880288d","sha512":"9f30abe34eedb4d8b69e63d79a02fd7173faf407746b10a3588e220ee8e705681f18be149032f79d785fdd98c793ee0f9f540058c3d630bff2dfc37a0ab10390","ssdeep":"3072:3B9ExwYGngrmLRsWFH81VW+O5EN/zMD86NYV:3B9ExwYGngrmLRsWFH81VW+O5EN/zMDI","tlshash":"b5b355a6aef51428251bb41a659f976c732d50819b0ecfb9b6d5216cefc43f00123f8e","first_seen":"2026-02-21T20:18:49.172297Z","last_seen":"2026-02-21T20:54:54.169244Z","times_seen":2,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/global/css/lightcase.css","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/global/css/lightcase.css HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2679\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17009,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (428)","md5":"80b7c66f2e29e454c97163847d7dbf33","sha1":"e6d0e505dcd94d227f5d7e729bf8fa31cc3f4b4a","sha256":"6abe037a0f81d267b7204382b790c50db94d6ea85b6103e20c7e1299b48051bb","sha512":"9e3a8fbfd8ccd6f5af65cb3a9fc1a12e3cd6fd42caff9e137a67c7ee99929b1bb39fda989822259c44329b5c15d93cf3368a9fcbe716f6fd0877550cd39622bf","ssdeep":"384:YnwUwsWGkVK0H420JltKwGK9K6wKVKgDKHKmK4ZKcJK1KDyKV0KhFKogAKoCI3za:fDgME0/qtJHUlNG9vIr8","tlshash":"eb723235ba50038362738107a7f5f91a2714e23be886eda575c9906cafc0bb534937f9","first_seen":"2023-04-11T09:53:40Z","last_seen":"2026-06-05T12:12:26.030231Z","times_seen":174,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/templates/crystal_sky/images/thumbs/service-bg-left.png","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/templates/crystal_sky/images/thumbs/service-bg-left.png HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3383\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3383,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1406 x 734, 2-bit colormap, non-interlaced","md5":"bfa95d192c71e4d594f6e1840c6f0b8e","sha1":"6119024f8daea85f074589da3cebeba127b0cdcc","sha256":"6acf11ee49b480f07e22b25dffa93667c3d2a93857d951db216a22007386fbb9","sha512":"3b4e79c9f9f40b29c000370364c937adecece6e815c3f21e85b40959e0631f6b6550e83928d88d6d900dbbc0beb0a4c73f5904dd18a6a0ccada37eaed28e9fb5","ssdeep":"","tlshash":"a1616eed8744e9b6cabdc564c0c5c53e0d3062b46a0fd8c2a01395dc87e1c48f95c353","first_seen":"2024-08-19T23:10:48.168224Z","last_seen":"2026-04-26T04:51:53.864118Z","times_seen":40,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/global/js/firebase/firebase-8.3.2.js","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/global/js/firebase/firebase-8.3.2.js HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 238471\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":859903,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"9c0abe55005e4f7d8c973d66b7e2777f","sha1":"3a7479d6ff0e9bf6bd3b2652c69b562e1f474deb","sha256":"9e793ffdc70064bf5eda7745c4c5320f147046c4ef4e31ad223dbd2853dce865","sha512":"66d1cfbb516714cf252a546205e21850d2595cf4858f9d8339ac07b1d43bbd6f5ca2914129a63a1f5457d9e9edf15da3f58e857d754ddbc8f9f66e021ea988e7","ssdeep":"6144:K8YqbosMLHtk4OLs/8wWaoFwApF+GzJXZaGQqdxQUdcujbva18nsLDMX4teWXs4a:nYqbrKOQ/YRQp18nl4sSG+G","tlshash":"ef05b5ccb692b062439360b5507f410bf33b685da40e40acf669e9d67cb954e923bf78","first_seen":"2023-05-29T16:44:37Z","last_seen":"2026-06-05T07:20:44.059243Z","times_seen":130,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/templates/crystal_sky/images/thumbs/pricing-bg.png","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:26.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/templates/crystal_sky/images/thumbs/pricing-bg.png HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlM3czIxaS9oQjVBZWxUSXR6MW9MaHc9PSIsInZhbHVlIjoiK2Z5WE9TakRSam1uLzRZcEk2Q1VzcFB3L256djVjRC9mWXhoQVJlSHpCNUV2QS94ek1mUjkxa3Y3RFpud21VMjdQeEw3akozQzkxNGxxMDFLUUlKbzVxZlM3NGlwSkNES2d3QkxRYXFEY2JkVUtLTjBCS25JVjRKNEpENkNYRXkiLCJtYWMiOiJjNTQ4ZWFkMWI4NTExMmYyZDU1YjU4YzYzYzc2OWRlMjA2ZTVkNzk0YWRjNGU4MDc1NTVjZjIxODFjZjhjZTdiIiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6ImJmS0M1by9WVVdLdTFoN0dvWndURHc9PSIsInZhbHVlIjoiTWpFVmxrWDJydXpYSTRNeVllY1F1RXBrT0hCT042VkZrZXJrMDhnL0hyR0RVeTJ2TFhmQVdwN241RTd0WVUyWE50b1pXTktSWmZwVWtFYnNQMnM5Q0JMZ1laNTF2VEU2QmFWcGM5K1dvMFc3ZEZJaUQvRVdBVk4vRjhSbURiVXQiLCJtYWMiOiI2ZGY5MWJlZmIwZmVkZmFiYWQ3NGE2NTAwNjk1ZDM1NmI1OTdhOGE2ZWJiNTA2ZTFkNjNmNjU3NTZiNWRlMDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3675\r\ndate: Sat, 21 Feb 2026 20:54:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3675,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1110, 1-bit colormap, non-interlaced","md5":"c9f9f9dec5a1e8c96efce4fc25f2f1c5","sha1":"b47ad34a606c6b623f5781d64256c08070d3c3ee","sha256":"74741c079bac29e92ad262b7af7dfc44f5084c15430ac740611cd51fec2308cb","sha512":"00e15f64310ad8a7651db22f77bd7bb2c61a1af2ab5b82f78dfcc40b7af44d137b967cd9f341e470e451a2f34f0339e409b801cd1943c38b00a5cd8d1c75b0a0","ssdeep":"","tlshash":"67714b5b5a564c02cf01de729a8750f25ca2a67c088e66fe5865e3ec34f1c4ca21b533","first_seen":"2025-05-15T12:07:02.798613Z","last_seen":"2026-03-31T22:17:40.05056Z","times_seen":10,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/global/css/line-awesome.min.css","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/global/css/line-awesome.min.css HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 15174\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89729,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"73db02545cf13e8c82b51b62782df0d6","sha1":"c1bd14187b6dcb36efad21e51711f8941801de0f","sha256":"ce61a18cf084f15003798340044643f329ac5f90045acb2d9e778368bd799854","sha512":"bde6d4962ab1ad5901cb782e70c842966c903fd3a7fc701641d2835d168095bfc52ae4dbc648cf294caa54ec40706c050e46bbf5e4c5f985f07e47b5877ff07e","ssdeep":"768:1b+0d/C5eXnu2nnY8G3104xUse1LN9abc4VNRvTdgBngf79IcjJv5IopdU6:1b+754u2nOW4xUse1exx7HD9hU6","tlshash":"cd938abbd52d69c4b321c847bf4133b92886f56daaa20d50f28f544cacc269612e4f7d","first_seen":"2023-04-05T07:54:02Z","last_seen":"2026-06-08T09:27:24.618685Z","times_seen":6867,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/images/frontend/banner/64f84e91e82bc1693994641.png","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/images/frontend/banner/64f84e91e82bc1693994641.png HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 17868\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17868,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 105 x 65, 8-bit/color RGBA, non-interlaced","md5":"62620c661cc2ac463f0a292e4a5a7875","sha1":"ec61248af50b33097f5d2925ac07f1a8ca056daa","sha256":"14f9367d92511f1b197f4ac28ba69cdb020ae297541142ac5e99339fbb53c1c8","sha512":"8f25a95667447f0fbc2e13d5b07f9d0b310662573929dc13f744c53f4cf8c50abc482e144391c2e06986ae3f2438d6769c01c44fe1d373fabae5a2d631dca50c","ssdeep":"384:sqeaRrrizFC82+8z1ydbzYS9svlJWFqoTNbehGQ1ZKXDEoYwn:sqSzh8z1ctSvXWUkbUW33","tlshash":"2382cf0f0eb44b524c91efb29472c18a54c9d912a90edd3e3b87276bd56809fe4c3293","first_seen":"2025-05-10T17:11:05.223962Z","last_seen":"2026-04-26T04:51:53.925287Z","times_seen":32,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/global/js/iziToast.min.js","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/global/js/iziToast.min.js HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4784\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18481,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18398)","md5":"a05a127c793145cec6b721f14fced3e5","sha1":"5d753b1c803de12f4d2217ab0d143d4dcf047010","sha256":"ac860be79a4cfe434ea68f002638f79371d9a85a3b045a1aaf10dc98df551497","sha512":"ee5a4c561a267f7a96635cb529a5e670aebe766289fe358e6b394585db4b76d5df215cad4b358a07425deaada36d4f4e42c06c2c44d9c192f03ac1afeb9bdc64","ssdeep":"384:ShKmhCPzlc5gVCPBpcG/0CEvXArKKpQi8VREgO3MrnHzxJBkHI4505P:+K5PzlcN8DXArhpQzRHO3M7TxfGIYUP","tlshash":"6a82c894722032374aa329a960ff534a3772156ca9c641a4243fcdad5b34f8939f77f8","first_seen":"2023-03-07T01:10:25Z","last_seen":"2026-06-08T10:05:38.200769Z","times_seen":2900,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/templates/crystal_sky/custom-fonts/icomoon.ttf?mp1g6g","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/templates/crystal_sky/custom-fonts/icomoon.ttf?mp1g6g HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/assets/templates/crystal_sky/css/custom-fonts.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlM3czIxaS9oQjVBZWxUSXR6MW9MaHc9PSIsInZhbHVlIjoiK2Z5WE9TakRSam1uLzRZcEk2Q1VzcFB3L256djVjRC9mWXhoQVJlSHpCNUV2QS94ek1mUjkxa3Y3RFpud21VMjdQeEw3akozQzkxNGxxMDFLUUlKbzVxZlM3NGlwSkNES2d3QkxRYXFEY2JkVUtLTjBCS25JVjRKNEpENkNYRXkiLCJtYWMiOiJjNTQ4ZWFkMWI4NTExMmYyZDU1YjU4YzYzYzc2OWRlMjA2ZTVkNzk0YWRjNGU4MDc1NTVjZjIxODFjZjhjZTdiIiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6ImJmS0M1by9WVVdLdTFoN0dvWndURHc9PSIsInZhbHVlIjoiTWpFVmxrWDJydXpYSTRNeVllY1F1RXBrT0hCT042VkZrZXJrMDhnL0hyR0RVeTJ2TFhmQVdwN241RTd0WVUyWE50b1pXTktSWmZwVWtFYnNQMnM5Q0JMZ1laNTF2VEU2QmFWcGM5K1dvMFc3ZEZJaUQvRVdBVk4vRjhSbURiVXQiLCJtYWMiOiI2ZGY5MWJlZmIwZmVkZmFiYWQ3NGE2NTAwNjk1ZDM1NmI1OTdhOGE2ZWJiNTA2ZTFkNjNmNjU3NTZiNWRlMDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2560\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3844,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"ee1ec599848d1ffc77cbcbab106b8458","sha1":"e9236cc150af9fcbd918287a5d85b7729eb9f33f","sha256":"5c9f30e51f65996bf937e6a2aa90b85a405f8fdf1403c3a71d02b2a4dc68ca1a","sha512":"dacc9c3e95950a8781f4f7716f7217b7d2521b4ece1f2a49b4cf79d49bd3db4f52ea4d4e75a20a327d785173de46b82c0138117f305a01644ace0784761ff626","ssdeep":"","tlshash":"1e81c727d778df8ec8a363b94c60e7078fe2f201d7aed39a144068405519ad6cd9833b","first_seen":"2024-05-12T01:27:05Z","last_seen":"2026-06-02T10:23:18.542468Z","times_seen":46,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/global/css/all.min.css","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/global/css/all.min.css HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 12370\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59305,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59119)","md5":"ecd507b3125edc4d2a03aa6ae5d07da9","sha1":"a57ee68d11601b0fd8e5037fc241ff65a754473c","sha256":"99464ceb71bc9bbdcc72275faefe44f98eb5cbb6b5d8ee665b87b35376f1a96e","sha512":"d72727e8871a410e34fcc2815b65b84618acfc36c82d4ef80b5bd2acb2710aae7ba3de35626d354b036c38caaf10116572051aeb12e23d8fcd4b947e13aced25","ssdeep":"768:PEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSzl:PE0PxXE4YXJgndFTfy9lQB","tlshash":"8c43fbb8e54c01cab731c44bef81b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-03-13T09:02:16Z","last_seen":"2026-06-08T12:56:05.154315Z","times_seen":42179,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/global/js/jquery-3.6.0.min.js","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/global/js/jquery-3.6.0.min.js HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 30266\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89500,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"7c14a783dfeb3d238ccd3edd840d82ee","sha1":"ad886e472b3557f3dc7dfa2bc43468ab8d1cef5b","sha256":"80f04717f32ea0320c5e8618fbacedd1fee3a8775ad8292140a6113551d4b5b0","sha512":"fa3e021ca60a9adbe570c6565c7370727904c4396c23a4c519daf258d05fae3e17bfb7607a0ab6dfe2b7150a4ec1b6a95e6d49675291be5f6a4e5679ad78d858","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:DIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"6f9309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:06:20Z","last_seen":"2026-06-08T12:50:48.620839Z","times_seen":19806,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/global/js/jquery.validate.js","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/global/js/jquery.validate.js HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 14212\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":76360,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (491), with CRLF line terminators","md5":"dd7d52879bd864e62e9b6a06f88b8086","sha1":"84ce4e5ac168ca6c37e8111f15c05ff700617bee","sha256":"84026e4d1231690805132178d157da4b7bb7906548ca9cfdc7e1176432bc1200","sha512":"d61294cdd6ba70f7d689b0eb6fd252a6ab208ba78ca9b27dd2663bb9e9620bfd73ecbfd563a0e52fb2ce82a473e32943727c4d5c0485b76b899329e4c97c1c2a","ssdeep":"1536:wJRM/JWZPv12/1Kb6K495zMvHjHG+Nn5VX9Y4jcyAtrU7XF8:wzHHDn5U018","tlshash":"76733f4e3a5a10194d3b73feef8b914ef7a6412b410295187cac42902fb5db462e5fec","first_seen":"2023-04-11T09:53:40Z","last_seen":"2026-06-05T12:12:26.023793Z","times_seen":201,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/popup.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"172.67.68.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 01:26:30 GMT","end":"Mon, 30 Mar 2026 02:26:25 GMT"},"fingerprint":{"sha1":"37:EE:38:DC:51:7B:DE:E1:29:DC:0E:AE:B0:B2:59:EF:EC:86:33:E6","sha256":"7B:44:5B:17:5D:54:17:1B:E4:42:87:BE:40:D0:27:47:DC:68:F8:47:86:3B:0C:BC:1F:8F:38:85:9F:99:A8:6A"}}},"request":{"raw":"GET /widgets/latest/popup.js HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Dec 2024 23:02:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 18 Feb 2027 06:00:25 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MA7sQCOP3J%2FAyZTDc1pUvkx06du5CWlReQVLNXZ2kExkQa3QpJwrdluFU%2FoeZl3ZrPK2IejuGxj9tznxcGZEMxfppNcqvDCGT0JBC1D4dw%3D%3D\"}]}\r\nage: 312839\r\ncf-cache-status: HIT\r\netag: W/\"6763547c-48f5\"\r\ncontent-encoding: br\r\ncf-ray: 9d192387694a4453-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18677,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3129)","md5":"25a53a5f0b8958bcf0942c535cba547d","sha1":"28656ad320afc16783fb4a48ce915e6eebfa01c2","sha256":"c9e18491ace8de422d23023f38a03ca17ab1657d70a5e1a00d4412abdb032bbd","sha512":"6dd60607ec8c9e8792d0472c7c7b49d8d0b68e34748d006ce617be7d8d738994e958ae0c512976edf0aceb5ab2d9f633f1fbd24d16925736296a37908d28ebac","ssdeep":"384:AzCKMPZATN09o0mtEMDXYddj517IHVxBCZlXbt/dDscc:AVMhAh060sEMDXYbZvdq","tlshash":"5882f95a11b3103e5a171129efff2b0c60ba42978101fc21bf9ddd825fc1a9d96a7bd8","first_seen":"2024-12-19T06:49:00.441223Z","last_seen":"2026-05-08T05:39:26.295827Z","times_seen":1910,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":8,"connect":8,"send":0,"wait":15,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/global/webfonts/fa-solid-900.woff2","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/global/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/assets/global/css/all.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlM3czIxaS9oQjVBZWxUSXR6MW9MaHc9PSIsInZhbHVlIjoiK2Z5WE9TakRSam1uLzRZcEk2Q1VzcFB3L256djVjRC9mWXhoQVJlSHpCNUV2QS94ek1mUjkxa3Y3RFpud21VMjdQeEw3akozQzkxNGxxMDFLUUlKbzVxZlM3NGlwSkNES2d3QkxRYXFEY2JkVUtLTjBCS25JVjRKNEpENkNYRXkiLCJtYWMiOiJjNTQ4ZWFkMWI4NTExMmYyZDU1YjU4YzYzYzc2OWRlMjA2ZTVkNzk0YWRjNGU4MDc1NTVjZjIxODFjZjhjZTdiIiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6ImJmS0M1by9WVVdLdTFoN0dvWndURHc9PSIsInZhbHVlIjoiTWpFVmxrWDJydXpYSTRNeVllY1F1RXBrT0hCT042VkZrZXJrMDhnL0hyR0RVeTJ2TFhmQVdwN241RTd0WVUyWE50b1pXTktSWmZwVWtFYnNQMnM5Q0JMZ1laNTF2VEU2QmFWcGM5K1dvMFc3ZEZJaUQvRVdBVk4vRjhSbURiVXQiLCJtYWMiOiI2ZGY5MWJlZmIwZmVkZmFiYWQ3NGE2NTAwNjk1ZDM1NmI1OTdhOGE2ZWJiNTA2ZTFkNjNmNjU3NTZiNWRlMDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 78268\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78268,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78268, version 331.-31196","md5":"d824df7eb2e268626a2dd9a6a741ac4e","sha1":"0ccb2c814a7e4ca12c4778821633809cb0361eaa","sha256":"9834b82ad26e2a37583d22676a12dd2eb0fe7c80356a2114d0db1aa8b3899537","sha512":"a84e13f216ea95146af285af98aef0b464cd962440e161a1c602ca2178a179e04ae4ed2a2f98d5b2eb165480ec6920e0e88de77d5f1eb7f11ed772b092daf865","ssdeep":"1536:AOhrLFyv3lzKb1hkG8l0o4HXWj2uwgcdSJSls7ZahNpUFl8a/KdDe8Y7fN5O:AOhfMv3ILc0Dm3wA4LpKKdO7a","tlshash":"c97312aba6cd77ac88dd14565f0043533afdfb35ab27864349eca2e01a300677b5712b","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-06-08T12:42:35.768175Z","times_seen":50651,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/global/fonts/la-regular-400.woff2","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/global/fonts/la-regular-400.woff2 HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/assets/global/css/line-awesome.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlM3czIxaS9oQjVBZWxUSXR6MW9MaHc9PSIsInZhbHVlIjoiK2Z5WE9TakRSam1uLzRZcEk2Q1VzcFB3L256djVjRC9mWXhoQVJlSHpCNUV2QS94ek1mUjkxa3Y3RFpud21VMjdQeEw3akozQzkxNGxxMDFLUUlKbzVxZlM3NGlwSkNES2d3QkxRYXFEY2JkVUtLTjBCS25JVjRKNEpENkNYRXkiLCJtYWMiOiJjNTQ4ZWFkMWI4NTExMmYyZDU1YjU4YzYzYzc2OWRlMjA2ZTVkNzk0YWRjNGU4MDc1NTVjZjIxODFjZjhjZTdiIiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6ImJmS0M1by9WVVdLdTFoN0dvWndURHc9PSIsInZhbHVlIjoiTWpFVmxrWDJydXpYSTRNeVllY1F1RXBrT0hCT042VkZrZXJrMDhnL0hyR0RVeTJ2TFhmQVdwN241RTd0WVUyWE50b1pXTktSWmZwVWtFYnNQMnM5Q0JMZ1laNTF2VEU2QmFWcGM5K1dvMFc3ZEZJaUQvRVdBVk4vRjhSbURiVXQiLCJtYWMiOiI2ZGY5MWJlZmIwZmVkZmFiYWQ3NGE2NTAwNjk1ZDM1NmI1OTdhOGE2ZWJiNTA2ZTFkNjNmNjU3NTZiNWRlMDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12900\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12900,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12900, version 1.0","md5":"88d9d9416c58bde56378dc4439e3a144","sha1":"bebed8d7033a4df35bebba69f1fc261a78a4ee22","sha256":"51ca2c00a3e30945e52227147fed9e296dde03af3c4d7589e8e95ca5740037db","sha512":"906884d6b687dd0b583872578a107fc7264e4198b3218545c01dd2185a397015b7226e0c96ae3dea6294abf7599052d3d271b6bb8461e972c5e49149f28b95f6","ssdeep":"384:cQ/ZCDaw2Q49jW8QIkW5SepdRZS3KUWSQoppk6CMRYtPP:l/BwzojW8lB5SenCKUtDC3tPP","tlshash":"fe42e1629963cb089c9d5b38b0ee5d401792703dfd9d5bec022bfe52cd4e09e4b1a076","first_seen":"2023-04-05T18:32:05Z","last_seen":"2026-06-08T13:21:01.680123Z","times_seen":4857,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/templates/crystal_sky/css/custom.css","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/templates/crystal_sky/css/custom.css HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1243\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4509,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ac794b1541f90ad9147fa2db218924c3","sha1":"dd8910ea66739fec813db5c62c13aea288f767c8","sha256":"770a06d5f04c2f2cd28f2be38f5f3a6bade4f96ff7b747bba7f5901ad3cb6859","sha512":"9a6f0494139be5e4bb51607f2594cb47628f46e56e39a94ab0ef2dd486e207477cdc1156ddb812d4d289390dce6bb0c142c98916c6f9df18e8502b6c20102f1f","ssdeep":"96:qvAZscx27M+yjYi0a3VXterU6GTBnmg5ayAPzQ0g6:RZslA+6WuJtjmgsxD","tlshash":"70913269da4661012637db78ebd28ba97f380022ef130b7dbbc12099478859c8775fdd","first_seen":"2026-02-21T20:18:49.178134Z","last_seen":"2026-02-21T20:54:54.182663Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:26.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wygroupbnk.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20556\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Feb 2026 22:25:16 GMT\r\nexpires: Thu, 18 Feb 2027 22:25:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nage: 253750\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20556,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20556, version 1.0","md5":"8feefe1e602c4b14ff414a77c3af2c2c","sha1":"e57daae78e76c8944e97edecfa656f8608e09db5","sha256":"2addf2d86d7a5778653b36d551e97a39da52855f82fac7461cfc1bd86d460aed","sha512":"893f9695ee887eed00246f24d4ec3e17ed64e2af4fab055f951795f50d34f3685aafcfbda943060a132c42169d2ef5c99d3db4fb901d57a09e712b4ff02afd92","ssdeep":"384:tpv6fcCujSd2+uNZ0omwRnNPqfWvx/CldKV8D2w9lQXL79Ci5q8S/USM2BHRpWp6:fxC0So4wRhx90K6ywQLIWS8S5By5AR","tlshash":"8792e056b288746a77e4e3ecc859ae6c65ed9b0f0c1b15b909322122f196c4734930f9","first_seen":"2026-02-19T22:35:21.90447Z","last_seen":"2026-06-08T12:54:38.473083Z","times_seen":18464,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/templates/crystal_sky/images/shapes/right-angel.png","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/templates/crystal_sky/images/shapes/right-angel.png HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/assets/templates/crystal_sky/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlM3czIxaS9oQjVBZWxUSXR6MW9MaHc9PSIsInZhbHVlIjoiK2Z5WE9TakRSam1uLzRZcEk2Q1VzcFB3L256djVjRC9mWXhoQVJlSHpCNUV2QS94ek1mUjkxa3Y3RFpud21VMjdQeEw3akozQzkxNGxxMDFLUUlKbzVxZlM3NGlwSkNES2d3QkxRYXFEY2JkVUtLTjBCS25JVjRKNEpENkNYRXkiLCJtYWMiOiJjNTQ4ZWFkMWI4NTExMmYyZDU1YjU4YzYzYzc2OWRlMjA2ZTVkNzk0YWRjNGU4MDc1NTVjZjIxODFjZjhjZTdiIiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6ImJmS0M1by9WVVdLdTFoN0dvWndURHc9PSIsInZhbHVlIjoiTWpFVmxrWDJydXpYSTRNeVllY1F1RXBrT0hCT042VkZrZXJrMDhnL0hyR0RVeTJ2TFhmQVdwN241RTd0WVUyWE50b1pXTktSWmZwVWtFYnNQMnM5Q0JMZ1laNTF2VEU2QmFWcGM5K1dvMFc3ZEZJaUQvRVdBVk4vRjhSbURiVXQiLCJtYWMiOiI2ZGY5MWJlZmIwZmVkZmFiYWQ3NGE2NTAwNjk1ZDM1NmI1OTdhOGE2ZWJiNTA2ZTFkNjNmNjU3NTZiNWRlMDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8668\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8668,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 471 x 912, 8-bit/color RGBA, non-interlaced","md5":"b0f7d584203ccdc0cc4dc303bff1f0b0","sha1":"0a502b32cd7379899ff7320cb5d775fae8750328","sha256":"e03133dd59612fdd1a720b913fc3ba943c3855e3fe4e16be5fff2c3c70fd1e5e","sha512":"4e3eaedf1721a4aad205dd047d4ecb8694dbeb0769f4fcc3f0a1c9fc883b9b1da711650c98417f82758d833a15979b2d196c758bed33f0e9d833d07ffc6cd2e4","ssdeep":"192:sS6VkThyew4J2e3Ue7KlJzb0FyoLp+LqGkoS3BqKfIrrwe91p5:rJThyexJh3nOzYLp+Lq7N34prrwe91p5","tlshash":"78028e8f747a3abbf5eb7932e6d6913d40ac241d7018f5002e9e2ce4454d28618b6dd8","first_seen":"2024-05-12T01:27:05Z","last_seen":"2026-04-26T04:51:53.901879Z","times_seen":41,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wygroupbnk.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Feb 2026 20:53:39 GMT\r\nexpires: Thu, 18 Feb 2027 20:53:39 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 259246\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-08T12:34:26.891385Z","times_seen":181744,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/flags/svg/en.svg","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"172.67.68.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:26.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 01:26:30 GMT","end":"Mon, 30 Mar 2026 02:26:25 GMT"},"fingerprint":{"sha1":"37:EE:38:DC:51:7B:DE:E1:29:DC:0E:AE:B0:B2:59:EF:EC:86:33:E6","sha256":"7B:44:5B:17:5D:54:17:1B:E4:42:87:BE:40:D0:27:47:DC:68:F8:47:86:3B:0C:BC:1F:8F:38:85:9F:99:A8:6A"}}},"request":{"raw":"GET /flags/svg/en.svg HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Feb 2026 20:54:26 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Dec 2022 23:34:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 21 Jan 2027 01:57:04 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yKL6sxEUi6hArP4snTx384VkWlkiek%2B%2BwsDPG%2BIJq3jqSiAM7JBy185PY3grJdvBayNrtD9TZTOr03DTHRcdt1hiCilI1drNLZpudBZu4Q%3D%3D\"}]}\r\nage: 2746642\r\ncf-cache-status: HIT\r\netag: W/\"639d0089-35e\"\r\ncontent-encoding: br\r\ncf-ray: 9d19238d9dae4453-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":862,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f9bbc4885a348eff84e4ef4155121fae","sha1":"afaa1646576b96aa105a66c3273f13f0cb30e0c3","sha256":"de46013c87c1d6b0e4804a6bd8be50f2c5f961c5adbc42ba40b8913af33afe75","sha512":"b0e944509060a802c1b2d4c014070e41bd9b8af4d1969670094cecdff21b537b14a2d64e3368881f49694bd9582f10ee58674b90e0e7acf36e70d51c0b08b664","ssdeep":"","tlshash":"5211a384996a505c2c86c6cbfed46e8443ff72cef6650984644d229c7149d9f47c4b1d","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-06-08T12:47:01.838593Z","times_seen":12008,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/global/css/bootstrap.min.css","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/global/css/bootstrap.min.css HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 21169\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":163826,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65307)","md5":"1477c4cbb0fe5d43e157c84981325db3","sha1":"595aebfa80b5afe20746a0f0af37c3dc3f9b502c","sha256":"8e23c3b3f22abb77e233c65f438c4190a773637c591d1fe15587bfddc6f81e6f","sha512":"bed809b5b97ed858b6a09f474ec37a06768981ebf311fba3b234a1828fe3c56cc2f78c23e326b0f288b17789a6b7f9e232b2474b8a5abc28de49c21e4ed48a50","ssdeep":"1536:At04T8if0W8DsEBpy0cuJBf2rIWE5e0VUpz600I4fT:At04/0VUpz600I4fT","tlshash":"a2f3b4d7f581341dd4a7c259a4d1bffd052f4586e3025aabb0277bb88b892c70963e4c","first_seen":"2023-04-09T08:56:00Z","last_seen":"2026-06-06T20:48:59.654636Z","times_seen":378,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/images/frontend/banner/64ef2e42075911693396546.png","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/images/frontend/banner/64ef2e42075911693396546.png HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 174519\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":174519,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 470 x 425, 8-bit/color RGBA, non-interlaced","md5":"0b0cc819c521aa8a8ffc6551fd78d9c5","sha1":"b499b4fa000439e7d52046f35beaa0b6b1b32f88","sha256":"a5394f6013bee439703aa645d6c06854ff2fed3e4e099fc141e1d65526630343","sha512":"32986583b5f3a0d464ec48b6f36b8408d8c816e45d651658ed64a77b547c6fc2aace72ebeb61bc948459c3b1edb3a5059dfdab13bab5d680b7835a600654b694","ssdeep":"3072:BrAVSja/0C1Qyf+T45J4AJIuDkFR1IBIZe6LmOTEt1Wokrt5x3Aq:B5g1Q/MHJIu+UBcLmOTkgLT3Aq","tlshash":"e10423887bc0a0ecd3c9f742160d8d2985f637a5cf5275d98a72db48ba3467c4b4a3c6","first_seen":"2025-05-10T17:11:05.211215Z","last_seen":"2026-04-26T04:51:53.935023Z","times_seen":37,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/placeholder-image/75x75","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /placeholder-image/75x75 HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IlM3czIxaS9oQjVBZWxUSXR6MW9MaHc9PSIsInZhbHVlIjoiK2Z5WE9TakRSam1uLzRZcEk2Q1VzcFB3L256djVjRC9mWXhoQVJlSHpCNUV2QS94ek1mUjkxa3Y3RFpud21VMjdQeEw3akozQzkxNGxxMDFLUUlKbzVxZlM3NGlwSkNES2d3QkxRYXFEY2JkVUtLTjBCS25JVjRKNEpENkNYRXkiLCJtYWMiOiJjNTQ4ZWFkMWI4NTExMmYyZDU1YjU4YzYzYzc2OWRlMjA2ZTVkNzk0YWRjNGU4MDc1NTVjZjIxODFjZjhjZTdiIiwidGFnIjoiIn0%3D; expires=Sat, 21 Feb 2026 22:54:25 GMT; Max-Age=7200; path=/; samesite=lax; secure\nwygroupbank_session=eyJpdiI6ImJmS0M1by9WVVdLdTFoN0dvWndURHc9PSIsInZhbHVlIjoiTWpFVmxrWDJydXpYSTRNeVllY1F1RXBrT0hCT042VkZrZXJrMDhnL0hyR0RVeTJ2TFhmQVdwN241RTd0WVUyWE50b1pXTktSWmZwVWtFYnNQMnM5Q0JMZ1laNTF2VEU2QmFWcGM5K1dvMFc3ZEZJaUQvRVdBVk4vRjhSbURiVXQiLCJtYWMiOiI2ZGY5MWJlZmIwZmVkZmFiYWQ3NGE2NTAwNjk1ZDM1NmI1OTdhOGE2ZWJiNTA2ZTFkNjNmNjU3NTZiNWRlMDhkIiwidGFnIjoiIn0%3D; expires=Sat, 21 Feb 2026 22:54:25 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-length: 691\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":935,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"data","md5":"847809923b804d33062c80c172e45dfc","sha1":"30ce96f63de1e05be917dd067d545c33e147e6c8","sha256":"1654fdf86c7ac96e421881b61524fdb686cbe03e3950a1b8a00d0ae8154a7b9b","sha512":"b27ddd79dbec8abb3ab88921348554366dad7e92559ab16c5ba099ea96043606f93b59c30b031796efcb22e4dcc9c1680a5a8d590a51f1ee5b41ccd64850dee3","ssdeep":"","tlshash":"58212141f89085b59bce1724361260bbe3ca695c74d59b3ccbe9c2ab8915eb4280c208","first_seen":"2025-10-03T06:12:33.094874Z","last_seen":"2026-02-21T20:54:54.188654Z","times_seen":3,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/global/js/slick.min.js","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/global/js/slick.min.js HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 10928\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53179,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (53179), with no line terminators","md5":"481ac3f8935c805172d406c12da68e0a","sha1":"fab75193a5fe33503eb2e62d047a01e238baaa64","sha256":"032699f5abc60e8e1b3c28bfa7a9a046addb1777420acb4c599871b5d64f0888","sha512":"a103f8c26db4c1d5b02c3608da138c7f6298bf6ba20ec77232020effc3a1e4f7d8653311f2498226a6233336e0476bd5504e0fd3829ed02ae823ddd0adefbab9","ssdeep":"768:vkqQW+Z4IRuCJ312FGeQuPKFnLfZ4ZwZD/58c04qeJhII4sRA/rhJhdxHcoZlC7n:6F97uPKFI/rhJ+vQgV","tlshash":"a0338406a210177698eb25e13017c54db3fbe77a9a11c1d4b8d583da20ee8058fdfbe9","first_seen":"2023-03-07T01:43:45Z","last_seen":"2026-06-07T21:11:23.489376Z","times_seen":2243,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/templates/crystal_sky/js/odometer.min.js","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/templates/crystal_sky/js/odometer.min.js HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3458\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10264,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10241)","md5":"137173424eea612b37a46854e4884fc1","sha1":"7e1b08b8104c7a83a1b5a855f1977a6686796609","sha256":"eb94751b98ab535553fa4f0be1ca2a81ddec692bcefd6b9fb289ffc3ebf621dc","sha512":"e755834d5ee1683f4104373c4561f6af94e7b92891c80a849db1b2b8a1d89feaa9602ac2724c457aa96bd48e54a0e50b8a3c8b576be71cef4b4b832b0331f1c1","ssdeep":"192:HABzlvQK8QecCHAOcu2a+OdI5s/GMb8Xuulj:gBhv18QecCxVxz+7dlj","tlshash":"f8228580ba11a725835371e151bf0609b7bb99aea404401df67c9dd9be29c38e12bf74","first_seen":"2023-03-07T01:20:07Z","last_seen":"2026-06-08T09:15:21.694115Z","times_seen":720,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/templates/crystal_sky/fonts/custom/MADE-Tommy-Soft_ExtraBold.otf","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/templates/crystal_sky/fonts/custom/MADE-Tommy-Soft_ExtraBold.otf HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/assets/templates/crystal_sky/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlM3czIxaS9oQjVBZWxUSXR6MW9MaHc9PSIsInZhbHVlIjoiK2Z5WE9TakRSam1uLzRZcEk2Q1VzcFB3L256djVjRC9mWXhoQVJlSHpCNUV2QS94ek1mUjkxa3Y3RFpud21VMjdQeEw3akozQzkxNGxxMDFLUUlKbzVxZlM3NGlwSkNES2d3QkxRYXFEY2JkVUtLTjBCS25JVjRKNEpENkNYRXkiLCJtYWMiOiJjNTQ4ZWFkMWI4NTExMmYyZDU1YjU4YzYzYzc2OWRlMjA2ZTVkNzk0YWRjNGU4MDc1NTVjZjIxODFjZjhjZTdiIiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6ImJmS0M1by9WVVdLdTFoN0dvWndURHc9PSIsInZhbHVlIjoiTWpFVmxrWDJydXpYSTRNeVllY1F1RXBrT0hCT042VkZrZXJrMDhnL0hyR0RVeTJ2TFhmQVdwN241RTd0WVUyWE50b1pXTktSWmZwVWtFYnNQMnM5Q0JMZ1laNTF2VEU2QmFWcGM5K1dvMFc3ZEZJaUQvRVdBVk4vRjhSbURiVXQiLCJtYWMiOiI2ZGY5MWJlZmIwZmVkZmFiYWQ3NGE2NTAwNjk1ZDM1NmI1OTdhOGE2ZWJiNTA2ZTFkNjNmNjU3NTZiNWRlMDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: font/otf\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 36964\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":104772,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"ca23721ad3c224613015ed89913e1484","sha1":"f4deade6aa17a9b77ffeecc4a21e6fa45aad8d6b","sha256":"ceb187aad727d073783aab510c864e66149b24d7cd4b1fb1366ffef15b63a2a0","sha512":"bb99cf69d712ac9671916ea4ad5184080c011e634df474ccf2f40b8b039f91930e4be8f27a35ee171ee51bd84747a0494824219e2462f9c5b0634dcdbc71467a","ssdeep":"3072:uh+kkTuX4jedPwm2LfRQ51sG07yMsji+x105Uf9QX:XbjNm2LK51sEIOfy","tlshash":"53a31697324bb38ae322663d066481189f65bec6daf9166646e34dfe32df1434ce3701","first_seen":"2023-05-23T13:21:02Z","last_seen":"2026-04-26T04:51:53.930562Z","times_seen":69,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/images/logoIcon/favicon.png","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:26.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/images/logoIcon/favicon.png HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlM3czIxaS9oQjVBZWxUSXR6MW9MaHc9PSIsInZhbHVlIjoiK2Z5WE9TakRSam1uLzRZcEk2Q1VzcFB3L256djVjRC9mWXhoQVJlSHpCNUV2QS94ek1mUjkxa3Y3RFpud21VMjdQeEw3akozQzkxNGxxMDFLUUlKbzVxZlM3NGlwSkNES2d3QkxRYXFEY2JkVUtLTjBCS25JVjRKNEpENkNYRXkiLCJtYWMiOiJjNTQ4ZWFkMWI4NTExMmYyZDU1YjU4YzYzYzc2OWRlMjA2ZTVkNzk0YWRjNGU4MDc1NTVjZjIxODFjZjhjZTdiIiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6ImJmS0M1by9WVVdLdTFoN0dvWndURHc9PSIsInZhbHVlIjoiTWpFVmxrWDJydXpYSTRNeVllY1F1RXBrT0hCT042VkZrZXJrMDhnL0hyR0RVeTJ2TFhmQVdwN241RTd0WVUyWE50b1pXTktSWmZwVWtFYnNQMnM5Q0JMZ1laNTF2VEU2QmFWcGM5K1dvMFc3ZEZJaUQvRVdBVk4vRjhSbURiVXQiLCJtYWMiOiI2ZGY5MWJlZmIwZmVkZmFiYWQ3NGE2NTAwNjk1ZDM1NmI1OTdhOGE2ZWJiNTA2ZTFkNjNmNjU3NTZiNWRlMDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1849\r\ndate: Sat, 21 Feb 2026 20:54:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1849,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 167 x 167, 8-bit/color RGBA, non-interlaced","md5":"f9dd002df7890bf8301608a00ce03845","sha1":"0073ded31831c855219fb28a1fd2772fcca89ca0","sha256":"9d6f259a63585cdf6b6db632bb1eac603fa3ab6f98a0b003750a43cd201fad0f","sha512":"8ce368c47e801472ede46eeaed19f88124d8080e3e23c1dec9263be47db7ef7ae1f928b33d579ba4a193e12c08b6b8a22da5a08d6ffcf555844cc5b35c3aae6b","ssdeep":"","tlshash":"0031d7d3167e20d7a839023ea79904a3ffb49fdd4a1ab31c1a15993eb2840c9307077d","first_seen":"2026-02-21T20:18:49.126437Z","last_seen":"2026-02-21T20:54:54.192119Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":26,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/images/frontend/banner/64ef4031c96091693401137.png","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:26.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/images/frontend/banner/64ef4031c96091693401137.png HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlM3czIxaS9oQjVBZWxUSXR6MW9MaHc9PSIsInZhbHVlIjoiK2Z5WE9TakRSam1uLzRZcEk2Q1VzcFB3L256djVjRC9mWXhoQVJlSHpCNUV2QS94ek1mUjkxa3Y3RFpud21VMjdQeEw3akozQzkxNGxxMDFLUUlKbzVxZlM3NGlwSkNES2d3QkxRYXFEY2JkVUtLTjBCS25JVjRKNEpENkNYRXkiLCJtYWMiOiJjNTQ4ZWFkMWI4NTExMmYyZDU1YjU4YzYzYzc2OWRlMjA2ZTVkNzk0YWRjNGU4MDc1NTVjZjIxODFjZjhjZTdiIiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6ImJmS0M1by9WVVdLdTFoN0dvWndURHc9PSIsInZhbHVlIjoiTWpFVmxrWDJydXpYSTRNeVllY1F1RXBrT0hCT042VkZrZXJrMDhnL0hyR0RVeTJ2TFhmQVdwN241RTd0WVUyWE50b1pXTktSWmZwVWtFYnNQMnM5Q0JMZ1laNTF2VEU2QmFWcGM5K1dvMFc3ZEZJaUQvRVdBVk4vRjhSbURiVXQiLCJtYWMiOiI2ZGY5MWJlZmIwZmVkZmFiYWQ3NGE2NTAwNjk1ZDM1NmI1OTdhOGE2ZWJiNTA2ZTFkNjNmNjU3NTZiNWRlMDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1068471\r\ndate: Sat, 21 Feb 2026 20:54:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1068471,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 400, 8-bit/color RGBA, non-interlaced","md5":"be9c63171860767a2aefb0f22798dc7d","sha1":"8833dc068164a410f5feaafe9068f86c3465d5e4","sha256":"cc5fbca3ea0ac3918ba3a932344ba1fd6e8fa665e386444058017f11ac45dc43","sha512":"6511265c2142397917a71cba85105c3bcaa81c4ae326977d794828044bc83c71679851a73a7547a7a0e2ba3a69eb4bbb450dd60c59fbf73fcf85fe15d59d62de","ssdeep":"24576:0kKbErW55KxEXOjNEHJafo0siZyCI1ogumFZKmL1nUmPAeEej:HAEqzK6e5EHJQ58CI1ogxV1nUmEej","tlshash":"fc2533caa7de01119019804f7184519f876d363317bc296afad48fba1ec8f9ad170e7b","first_seen":"2025-08-07T20:44:21.3718Z","last_seen":"2026-04-26T04:51:53.870098Z","times_seen":28,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/images/frontend/banner/64ef2e421fff61693396546.png","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/images/frontend/banner/64ef2e421fff61693396546.png HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 135870\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":135870,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 330 x 330, 8-bit/color RGBA, non-interlaced","md5":"e3d34fe86fa1cf9ad329bc35481f740c","sha1":"d4323e8feef6264ed80f6ab71befc75bdbf3ff6f","sha256":"19132d7e71375dde1fe9d3008e11097287a59afb8e2325d8dc6ef44b5cab0b88","sha512":"9124ff15aecfb6ce254d27c6834da795ca67d69fee25b607a03a89272843ba0f623295217ea554dbc834a83824a683e00fce6ba4220d3c9e88f00fcaeff9790e","ssdeep":"3072:JGuCPMjbFVt4iJ90PaB7KAJJCilAxj6eQ0qH/GuZwMGY:JzjbF/WaBZP3wFnqfGuEY","tlshash":"d1d3125bc6b8a9d2578806593330077047b628c9647e4ca942a4dcae6fedfbcdc1f4e4","first_seen":"2025-05-10T17:11:05.24226Z","last_seen":"2026-04-26T04:51:53.945203Z","times_seen":37,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/images/logoIcon/logo.png","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/images/logoIcon/logo.png HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15828\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15828,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 669 x 99, 8-bit/color RGBA, non-interlaced","md5":"d71c54d0000456df7543c0167156fbe9","sha1":"7ded6c59400eea5af81c362b59ff1f513ed2a7d8","sha256":"eb40337706500e5b477abecb271e4a1fc7222ede043cafdaeb0a0bd823b0f4be","sha512":"c04909080e5de840c175fa1c0d02b5e5a7fbb15bb7cba90dff01fb1b0aee7af3189f91c6a7c8b06dfd2dd261e8f1eca6a54ba5eee66500fb0f6d74993514acf6","ssdeep":"384:clHKavlv5PfMEeNbQWiwZE7PMAMGW9LVf1t4gM4mqm:QHlv5cEeNbQW1ZEjTy9LxM2m","tlshash":"9762c09cd0d25d1583f9b7c36351d939522a446ff4c90c1706f08ca6a8ddbaa2de4de8","first_seen":"2026-02-21T20:18:49.149737Z","last_seen":"2026-02-21T20:54:54.195532Z","times_seen":2,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/global/js/bootstrap.bundle.min.js","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/global/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 22158\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78080,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"dfd824922bdcd8afddd7a123029bba09","sha1":"093df67442d6d55091d9278701071d241a3d02ad","sha256":"286fc75be1e7b08b6e8f8c70b4b6f69bf77fcd9bec929694d122b44ecbb4858d","sha512":"71ed1ae8aa3845ee9467b730d2affdd05f33e929e210d1f13c13bde9dced6beea3e7dc232cb21efaa50f7be917b7f1e328c78ce06208de5dce0a3308012965ad","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZ7:T36WJr9ixF","tlshash":"5e73c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","first_seen":"2023-03-07T12:08:04Z","last_seen":"2026-06-08T04:38:05.531535Z","times_seen":2454,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Cormorant+Garamond:ital,wght@0,300;0,400;0,500;0,600;0,700;1,300;1,400;1,500;1,600;1,700\u0026family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Cormorant+Garamond:ital,wght@0,300;0,400;0,500;0,600;0,700;1,300;1,400;1,500;1,600;1,700\u0026family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 21 Feb 2026 20:54:25 GMT\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87411,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"e4f1ea964c7aa6813627e0686aad6f18","sha1":"c60715f161f08acdb84d5c2adec4c9e03db7428b","sha256":"e08936117e8f9b4d5d1ad42614fa286f5308b6878e14032b169bff9221326226","sha512":"07302e68a582419411d3c4979adc8e7e3376face7832f470caccb9c5dfd5b70be1c3081e919e93b9dec0a9be07815b816c9776476395e907ff837b978181be29","ssdeep":"768:BDdD9DADNDgBDUKD7DnDWHncXgLUahdPuOJ+gaULUIIV1ClghUULPy7bYLgXU+l5:JyDSegtxyllff","tlshash":"50831c91041b94409b834ce233ce7e35fe4e92553141c0b9abfd5b9bedead62136876c","first_seen":"2026-02-21T04:53:34.807623Z","last_seen":"2026-06-02T10:24:03.278523Z","times_seen":17,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":120,"dns":1,"connect":20,"send":0,"wait":37,"receive":0,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/templates/crystal_sky/js/viewport.jquery.js","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/templates/crystal_sky/js/viewport.jquery.js HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 666\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1974,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"0b1902de852b0efc3c167004b1b90809","sha1":"dcb00dab6e15ff253e15438be198d94808eac14f","sha256":"b5cc6b1bff62a81d50bc3d757b095272dcbe58314d6cea68cdcf31202f4310b0","sha512":"fe4dda0368d9da604ea7679104609bae22320da47e3a32639de7b5064895b8f035eb7aca38a10c4677b9b71c0bbb35368095221d347543581a8838bfdb676192","ssdeep":"","tlshash":"53419daa3c5010149d33fb7e8b3f9658f6a98627114994513cad83a16f70b249d9cffc","first_seen":"2023-11-23T20:16:26Z","last_seen":"2026-06-07T20:31:35.180576Z","times_seen":127,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/templates/crystal_sky/js/main.js","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/templates/crystal_sky/js/main.js HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1481\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6495,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b49e429d093298aa2916c060352d1c87","sha1":"551ba1979af7944bd28bc56e9098b2b14a7a5b7e","sha256":"f7f9a7bb7c2ad9c6631a8169962d0703e2c46cf96af13c3ed9da2510c1d71f5b","sha512":"82c8cd2b72cf6bd28671b3a44ef6a5e9ad1ddcf24969172c27f054aaaa1520e189d38ac7a50035c080302024d09e88c0b6e0d0e7ed287a644d8021a5e8e6a97b","ssdeep":"48:k3qSyIqxyyMCkiq4ykt9D9WyaH5y5butnCUGeHWEc7ylDJEcYy3VwyWyxVy3Bd82:ixpibtNsyE5gbutP9mBL9YtA","tlshash":"54d1ae99b02121b094bf37709b4b7214f969096b8310ce007c6e55ce2fb97a493e2fde","first_seen":"2024-05-12T01:27:04Z","last_seen":"2026-06-02T10:24:03.280675Z","times_seen":62,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wygroupbnk.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Feb 2026 20:53:39 GMT\r\nexpires: Thu, 18 Feb 2027 20:53:39 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 259246\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-08T12:34:26.891385Z","times_seen":181744,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":83,"dns":0,"connect":8,"send":0,"wait":8,"receive":11,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/templates/crystal_sky/images/shapes/half-circle.png","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/templates/crystal_sky/images/shapes/half-circle.png HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/assets/templates/crystal_sky/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlM3czIxaS9oQjVBZWxUSXR6MW9MaHc9PSIsInZhbHVlIjoiK2Z5WE9TakRSam1uLzRZcEk2Q1VzcFB3L256djVjRC9mWXhoQVJlSHpCNUV2QS94ek1mUjkxa3Y3RFpud21VMjdQeEw3akozQzkxNGxxMDFLUUlKbzVxZlM3NGlwSkNES2d3QkxRYXFEY2JkVUtLTjBCS25JVjRKNEpENkNYRXkiLCJtYWMiOiJjNTQ4ZWFkMWI4NTExMmYyZDU1YjU4YzYzYzc2OWRlMjA2ZTVkNzk0YWRjNGU4MDc1NTVjZjIxODFjZjhjZTdiIiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6ImJmS0M1by9WVVdLdTFoN0dvWndURHc9PSIsInZhbHVlIjoiTWpFVmxrWDJydXpYSTRNeVllY1F1RXBrT0hCT042VkZrZXJrMDhnL0hyR0RVeTJ2TFhmQVdwN241RTd0WVUyWE50b1pXTktSWmZwVWtFYnNQMnM5Q0JMZ1laNTF2VEU2QmFWcGM5K1dvMFc3ZEZJaUQvRVdBVk4vRjhSbURiVXQiLCJtYWMiOiI2ZGY5MWJlZmIwZmVkZmFiYWQ3NGE2NTAwNjk1ZDM1NmI1OTdhOGE2ZWJiNTA2ZTFkNjNmNjU3NTZiNWRlMDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4266\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4266,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 443, 8-bit/color RGBA, non-interlaced","md5":"3244ec6f74016e3e6abe8a16d16cc008","sha1":"0633c87892c13de39bf1414fc3a35a8e96a06b70","sha256":"1caee0d16ed7ee3f0d81accdbb4957f24ff10d9b612361d450f57e5814dfd946","sha512":"a2803cca8219a79f06377b1bd6e7ce7b949b8ebc9d6fe432a8a079dfa364145029c1b26a3cf2e684bc55323059a9b762d1d3a30f3516ae62ce4acfe22574e295","ssdeep":"96:7SSUvJklcxv23LizR5L9Km51jWDADAiggpDR4wq+ZQ:7SSUBk2dzRt9Ko1jWDAMiPR4/AQ","tlshash":"6f917cdbeba49792e7ce0ac2821f40d090440aac971d73e17839de2990361e8d0cb363","first_seen":"2024-05-12T01:27:04Z","last_seen":"2026-04-26T04:51:53.900443Z","times_seen":43,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/images/logoIcon/logo.png","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:26.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/images/logoIcon/logo.png HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlM3czIxaS9oQjVBZWxUSXR6MW9MaHc9PSIsInZhbHVlIjoiK2Z5WE9TakRSam1uLzRZcEk2Q1VzcFB3L256djVjRC9mWXhoQVJlSHpCNUV2QS94ek1mUjkxa3Y3RFpud21VMjdQeEw3akozQzkxNGxxMDFLUUlKbzVxZlM3NGlwSkNES2d3QkxRYXFEY2JkVUtLTjBCS25JVjRKNEpENkNYRXkiLCJtYWMiOiJjNTQ4ZWFkMWI4NTExMmYyZDU1YjU4YzYzYzc2OWRlMjA2ZTVkNzk0YWRjNGU4MDc1NTVjZjIxODFjZjhjZTdiIiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6ImJmS0M1by9WVVdLdTFoN0dvWndURHc9PSIsInZhbHVlIjoiTWpFVmxrWDJydXpYSTRNeVllY1F1RXBrT0hCT042VkZrZXJrMDhnL0hyR0RVeTJ2TFhmQVdwN241RTd0WVUyWE50b1pXTktSWmZwVWtFYnNQMnM5Q0JMZ1laNTF2VEU2QmFWcGM5K1dvMFc3ZEZJaUQvRVdBVk4vRjhSbURiVXQiLCJtYWMiOiI2ZGY5MWJlZmIwZmVkZmFiYWQ3NGE2NTAwNjk1ZDM1NmI1OTdhOGE2ZWJiNTA2ZTFkNjNmNjU3NTZiNWRlMDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15828\r\ndate: Sat, 21 Feb 2026 20:54:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15828,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 669 x 99, 8-bit/color RGBA, non-interlaced","md5":"d71c54d0000456df7543c0167156fbe9","sha1":"7ded6c59400eea5af81c362b59ff1f513ed2a7d8","sha256":"eb40337706500e5b477abecb271e4a1fc7222ede043cafdaeb0a0bd823b0f4be","sha512":"c04909080e5de840c175fa1c0d02b5e5a7fbb15bb7cba90dff01fb1b0aee7af3189f91c6a7c8b06dfd2dd261e8f1eca6a54ba5eee66500fb0f6d74993514acf6","ssdeep":"384:clHKavlv5PfMEeNbQWiwZE7PMAMGW9LVf1t4gM4mqm:QHlv5cEeNbQW1ZEjTy9LxM2m","tlshash":"9762c09cd0d25d1583f9b7c36351d939522a446ff4c90c1706f08ca6a8ddbaa2de4de8","first_seen":"2026-02-21T20:18:49.149737Z","last_seen":"2026-02-21T20:54:54.195532Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/global/css/slick.css","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/global/css/slick.css HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 493\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1893,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"7dd6efe7556ca666dca0126387feed72","sha1":"8bbd779ec8580ec0f0b8233eaafdb1bb5090671b","sha256":"2ea14b8011f2330241a3f98a5b444db57214f133728ca671c86fa0d160ec5324","sha512":"a8d94b842400f96aa98f2d739f435b9f386f45693f50e2ed23ae380e9eb5426ac6b82e85879ae00d31969d144557d01d50e0b800955bd48db6aaa0811958bad6","ssdeep":"","tlshash":"ad41fadc0652c5d68733c4444fd38649eeefa0930c251698ba8d47098fbfae8a9c5e77","first_seen":"2023-04-08T04:13:47Z","last_seen":"2026-06-08T09:11:25.286818Z","times_seen":2281,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/templates/crystal_sky/css/odometer.css","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/templates/crystal_sky/css/odometer.css HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 441\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3399,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"da3eea25555c30bad94aff41135d6b55","sha1":"96340f0e7c5656f57512d45f7732184b97737798","sha256":"178f66466e6cc39c2c87f701999d8a72d14e29b0492037acae1e67b43b24fb7c","sha512":"e94412dfe3a7039f21e15ffa50e5a1bf0b5ed8915f4dd04f3c725799c75c402e306737916b50db4d2348e19d594ca1198c3c73615b56f9d31e4101f336de1a71","ssdeep":"","tlshash":"0e61e6281fa11724633a300ab6c92764fffcb8525223e49db349a44bce53d79c289b57","first_seen":"2023-05-06T12:20:40Z","last_seen":"2026-06-04T07:33:21.378279Z","times_seen":268,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/global/js/lightcase.js","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/global/js/lightcase.js HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 10389\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53983,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"facbbd04684181c17e8bdb674295200b","sha1":"edac11de0011743147b6a302967ce393bc0bd593","sha256":"a864278b1e750825bdf4465c7d5ad98041a4e6976fbbcfbbc6876155273e7e69","sha512":"051bc6bd457bc5f66a449d769f54566d182c251de82f14a2bfc22052b98e9c97a2b783f52e481bd6850ab52cc72a10a089faff75b9076bf1958fde9c55bfeb28","ssdeep":"768:qJscZN6FGUPSAGOEfZb00GpMhrNQqXNTrMkDZ0x44:ctZ4iTZb0uhrNVNTA4ZQ","tlshash":"793343f8730eb19a445b5358e478924be63cc431223e79bab4f1d694f550068cf62fea","first_seen":"2024-01-08T22:59:47Z","last_seen":"2026-06-02T10:24:03.279722Z","times_seen":119,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/templates/crystal_sky/fonts/custom/MADE-Tommy-Soft-Medium.otf","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/templates/crystal_sky/fonts/custom/MADE-Tommy-Soft-Medium.otf HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/assets/templates/crystal_sky/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlM3czIxaS9oQjVBZWxUSXR6MW9MaHc9PSIsInZhbHVlIjoiK2Z5WE9TakRSam1uLzRZcEk2Q1VzcFB3L256djVjRC9mWXhoQVJlSHpCNUV2QS94ek1mUjkxa3Y3RFpud21VMjdQeEw3akozQzkxNGxxMDFLUUlKbzVxZlM3NGlwSkNES2d3QkxRYXFEY2JkVUtLTjBCS25JVjRKNEpENkNYRXkiLCJtYWMiOiJjNTQ4ZWFkMWI4NTExMmYyZDU1YjU4YzYzYzc2OWRlMjA2ZTVkNzk0YWRjNGU4MDc1NTVjZjIxODFjZjhjZTdiIiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6ImJmS0M1by9WVVdLdTFoN0dvWndURHc9PSIsInZhbHVlIjoiTWpFVmxrWDJydXpYSTRNeVllY1F1RXBrT0hCT042VkZrZXJrMDhnL0hyR0RVeTJ2TFhmQVdwN241RTd0WVUyWE50b1pXTktSWmZwVWtFYnNQMnM5Q0JMZ1laNTF2VEU2QmFWcGM5K1dvMFc3ZEZJaUQvRVdBVk4vRjhSbURiVXQiLCJtYWMiOiI2ZGY5MWJlZmIwZmVkZmFiYWQ3NGE2NTAwNjk1ZDM1NmI1OTdhOGE2ZWJiNTA2ZTFkNjNmNjU3NTZiNWRlMDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: font/otf\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 36585\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":107108,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"455964a98c5e953a409410cf2547812a","sha1":"90bce931f5647037e05b7b827d8d0ab59b5e6564","sha256":"c1237b5eb72ba68788e85c27ce89682be4c564d184c73aef6afb853173da629b","sha512":"ae258806f464c38df8cf05379dc5529b6c9d1f3f653d74ffe84c01605d969cf0c8c173b4a87fb4481a5b9d8f40b20b4e53136675ba02c455d8047891c2c81da4","ssdeep":"3072:kOxTj3mUhSao/4W+GGw7eE51VLsjUv1hsDPH:NtjRJWo0eE9VfCPH","tlshash":"52a32987b28bb38ae766b57d069440185fa1be96daf1099646e38efe34df0430dd3305","first_seen":"2023-12-30T13:21:45Z","last_seen":"2026-05-29T02:42:46.111482Z","times_seen":68,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:26.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wygroupbnk.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Feb 2026 20:53:39 GMT\r\nexpires: Thu, 18 Feb 2027 20:53:39 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 259247\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-08T12:34:26.891385Z","times_seen":181744,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-21T20:54:24.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; expires=Sat, 21 Feb 2026 22:54:24 GMT; Max-Age=7200; path=/; samesite=lax; secure\nwygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D; expires=Sat, 21 Feb 2026 22:54:24 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-length: 11029\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ndate: Sat, 21 Feb 2026 20:54:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]}],"data":{"size":89114,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (508), with CRLF, LF line terminators","md5":"8f057e87462a086ba1aaab914add613b","sha1":"f053c9dd1fa750faeecbf6cd1dc355e461f1dcb8","sha256":"86d4ff528c6910c4ce000dc7e65d02e5853a7e9b7d82a11480ad1fb83ba2b3fd","sha512":"a54569bf022918c58c1227048a9cb9024a68a84d141aedb08d3ca2a598f1df0a5fa72f80a68c1dbf0b86855f7d0c0785196a0f703f83cef18a2023fc57f3b3b9","ssdeep":"384:MKTPF8NF9eTSSsYF0Swj40fhCx25HGYo+cGjmpDD0kLamj3iGKFg7Tiuu:MKTP+T9eTqSwvAag7TI","tlshash":"6f93c92128f31a730293d1d7aaa26b1f6fe1d607cb67418172fc07964febc82995315d","first_seen":"2026-02-21T20:54:54.203968Z","last_seen":"2026-02-21T20:54:54.203968Z","times_seen":1,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":41,"dns":1,"connect":19,"send":0,"wait":347,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/templates/crystal_sky/images/icons/quote-icon.png","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/templates/crystal_sky/images/icons/quote-icon.png HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1843\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1843,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 53 x 59, 8-bit/color RGBA, non-interlaced","md5":"1da194708699aecfcec929683b58b0ed","sha1":"55d9728616aebc23da3a329398ee5124f3f77337","sha256":"5097ff21be7d1e6250314294f46352f10e969e560b6be4ce1c94901e61a88076","sha512":"4a6e098706dda248756862972351180f6111c0188a530bd5f05d065b20263be1e4645293aa03522d380a4133862bd9fde30b4abfae5ffa08308661bd1e1a1f34","ssdeep":"","tlshash":"f2312bedc0019ddf8c08544227767a8856595c31231b200ecfde3c7b94b5f1c42d675d","first_seen":"2024-08-19T23:10:48.172648Z","last_seen":"2026-04-26T04:51:53.86612Z","times_seen":32,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/images/frontend/banner/service_bg.jpg","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/images/frontend/banner/service_bg.jpg HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 44874\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44874,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 665x760, components 3","md5":"ba93392333196bf573967391ba3820b6","sha1":"e6392a0351b5be9830779c3329264af768c62cae","sha256":"5b3dce6f8302c171d6ecca1a816848856e60bedf65ac634103b74344f3b9e237","sha512":"a124bd1357b826d7ebd0906ba1aaf6ffc002ddc56ca074919f8815ae7adc99d35740cb6858a381ba6059275ffcc38dd0710ffddb63c1452a1065849ba9a2a447","ssdeep":"768:ravsbl7ku1735uknLM6zUDb7vOgONRL4yYc8cjUPzDWmh8d5iC4dBC8heB9PCoQl:OkZ7L74Z6U7vON4byUPzDWmh8TibdbhL","tlshash":"7313f128a41b0496f8094e35754a4ea62af3fe80706c7db1fbfa15de1a021405fb7d6b","first_seen":"2026-02-21T20:18:49.154905Z","last_seen":"2026-02-21T20:54:54.206715Z","times_seen":2,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/templates/crystal_sky/fonts/custom/MADE-Tommy-Soft-Bold.otf","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/templates/crystal_sky/fonts/custom/MADE-Tommy-Soft-Bold.otf HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/assets/templates/crystal_sky/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlM3czIxaS9oQjVBZWxUSXR6MW9MaHc9PSIsInZhbHVlIjoiK2Z5WE9TakRSam1uLzRZcEk2Q1VzcFB3L256djVjRC9mWXhoQVJlSHpCNUV2QS94ek1mUjkxa3Y3RFpud21VMjdQeEw3akozQzkxNGxxMDFLUUlKbzVxZlM3NGlwSkNES2d3QkxRYXFEY2JkVUtLTjBCS25JVjRKNEpENkNYRXkiLCJtYWMiOiJjNTQ4ZWFkMWI4NTExMmYyZDU1YjU4YzYzYzc2OWRlMjA2ZTVkNzk0YWRjNGU4MDc1NTVjZjIxODFjZjhjZTdiIiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6ImJmS0M1by9WVVdLdTFoN0dvWndURHc9PSIsInZhbHVlIjoiTWpFVmxrWDJydXpYSTRNeVllY1F1RXBrT0hCT042VkZrZXJrMDhnL0hyR0RVeTJ2TFhmQVdwN241RTd0WVUyWE50b1pXTktSWmZwVWtFYnNQMnM5Q0JMZ1laNTF2VEU2QmFWcGM5K1dvMFc3ZEZJaUQvRVdBVk4vRjhSbURiVXQiLCJtYWMiOiI2ZGY5MWJlZmIwZmVkZmFiYWQ3NGE2NTAwNjk1ZDM1NmI1OTdhOGE2ZWJiNTA2ZTFkNjNmNjU3NTZiNWRlMDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: font/otf\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 36552\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":106096,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"e267b772a8722eed23fa436f7cd09576","sha1":"f755e2583540f74dc81dc9f375b96490491464a1","sha256":"466e858cbaf13ff6cc980e5327ae66d43ecef8f26d258519480b9d8af32c96ad","sha512":"d31b2589077843823ef8b5819026f1bb20cd83586434fc2cb3d005759b5bb28ac08a92e3cb7b91320e49ed26a20711f80d16507a44879995ff377b5e394b5b55","ssdeep":"3072:7QczdRbFXF6+ecbfTwVhfhDWio+LyrxsyTRhyo5Ed1AWZ:08RnlPwVhdWiOl5wyWZ","tlshash":"77a3284b724bb38ae321b93e065481189f51bd89caf509964ab789fe34ef1235ce7740","first_seen":"2024-08-19T23:10:48.218462Z","last_seen":"2026-06-02T10:23:18.522777Z","times_seen":64,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/images/logoIcon/logo_dark.png","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/images/logoIcon/logo_dark.png HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18277\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18277,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 439 x 65, 8-bit/color RGBA, non-interlaced","md5":"f8186fcd8de028a7be46cc382a2da174","sha1":"ccf29d3a2e91e16097681d9995a7519c65117b3a","sha256":"93a2d65eddf551f75f4688404c61e48e1b87f04575ec4bbf56a71d39cfa50de4","sha512":"f2da18671ff2d281f96d67aa2859b547c2b149084f7ba3e6c2e736088db18247415776f542b408ce302a51aa2a1efd8c81d8d76a984c6578776d14ee44232118","ssdeep":"384:W4y6x9U2vFaYbFdwDUNm26q+NyH4wqwpBUY1onIwx8UCyEGyNCs5W:RdW0yDl22PwqwpBvuI8OX/NCsA","tlshash":"ad82d0a3dce0ad01f10f980ea397c8b863bb892a5f5231e87e16f8114ad7716c4d2343","first_seen":"2026-02-21T20:18:49.144612Z","last_seen":"2026-02-21T20:54:54.208832Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/images/frontend/banner/64ef16f53b4581693390581.png","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/images/frontend/banner/64ef16f53b4581693390581.png HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhVbU1Ua2lVY2Y1bGpvMTdqVUZXb3c9PSIsInZhbHVlIjoib2VMVnYzcENxSW02bXZkeVhBYmo3M2diQnQyekFqZmkyZDFLUkhVYnd3N0lhZzYyTXduNjRqRkZBM1h5Tm1wRmRMK0VLWFI0bjRyalBhZ1htYXdtbFdmcmlXUklDblBNWG9PQUo3KzRQTmZMTDFiVnBXL09Ld1c2YkZkZk0wUlUiLCJtYWMiOiI4YTEwZTYxMmI1NmU3NDljZTczMjczZWRlYjgyZmNiMzQwMGVhODFjZmJkMWFmMzY4NDA1MDM5ZmRiMzc3ZDQ1IiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6IjJVaWxqRXp5L2JVcFdZUFNwYTVhUGc9PSIsInZhbHVlIjoiVC9ET1plUVRMWVR5V25ud213VytmdWxiNHFRZ2RsSDMxYm5tTVhLZW5kZllVVkNrNGFJY3NDM0pXVFh2N0Z5VWpadHBVNlRNTERIQTVFRUM4MGdMUDE0NmZ5Tk1maHFMVU5tVHo2ZUhiWkg5ZXlldFpCNUcrUUdCZCtyay9mSE0iLCJtYWMiOiJiMzU5YTIyY2Q2N2NkNmRiM2ViYTEyODVhODQwZWUwYTlkZDhkMDc5YzA0MGUwMWRiNzQ3YmNmYzkzMWRmNDFiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18490\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18490,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 210 x 70, 8-bit/color RGBA, non-interlaced","md5":"3ba532f333d7fa247cbd4c514e592b58","sha1":"64019e6e49f33b8234cd31780f545850ed9efec6","sha256":"83c5592a98b656ad22ca969cc2646e6950739911a32e7dac9c4d22fca967a9eb","sha512":"17d8dc1f5b0370bd987ad15bea80c66a278f08ca4388958189ca68f346fe8447c90c79d38259ceb883a2d08c4096af6702d85dc8b74ed0c965ac06c321d58be9","ssdeep":"384:xq6xP6qfk+w2G7J5g7hKdGCw5JjRRjjawgH5X5J2QMv2:LxySkzn7J5jdGNRpjaw4158v2","tlshash":"4b82d0c674b7f0173da905b2aedc4a48828b7c42f97815ff8a1442e41e6cd41609b61e","first_seen":"2024-08-19T23:10:48.178351Z","last_seen":"2026-04-26T04:51:53.881565Z","times_seen":40,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/templates/crystal_sky/fonts/custom/MADE-Tommy-Soft-Regular.otf","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/templates/crystal_sky/fonts/custom/MADE-Tommy-Soft-Regular.otf HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/assets/templates/crystal_sky/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlM3czIxaS9oQjVBZWxUSXR6MW9MaHc9PSIsInZhbHVlIjoiK2Z5WE9TakRSam1uLzRZcEk2Q1VzcFB3L256djVjRC9mWXhoQVJlSHpCNUV2QS94ek1mUjkxa3Y3RFpud21VMjdQeEw3akozQzkxNGxxMDFLUUlKbzVxZlM3NGlwSkNES2d3QkxRYXFEY2JkVUtLTjBCS25JVjRKNEpENkNYRXkiLCJtYWMiOiJjNTQ4ZWFkMWI4NTExMmYyZDU1YjU4YzYzYzc2OWRlMjA2ZTVkNzk0YWRjNGU4MDc1NTVjZjIxODFjZjhjZTdiIiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6ImJmS0M1by9WVVdLdTFoN0dvWndURHc9PSIsInZhbHVlIjoiTWpFVmxrWDJydXpYSTRNeVllY1F1RXBrT0hCT042VkZrZXJrMDhnL0hyR0RVeTJ2TFhmQVdwN241RTd0WVUyWE50b1pXTktSWmZwVWtFYnNQMnM5Q0JMZ1laNTF2VEU2QmFWcGM5K1dvMFc3ZEZJaUQvRVdBVk4vRjhSbURiVXQiLCJtYWMiOiI2ZGY5MWJlZmIwZmVkZmFiYWQ3NGE2NTAwNjk1ZDM1NmI1OTdhOGE2ZWJiNTA2ZTFkNjNmNjU3NTZiNWRlMDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: font/otf\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 36797\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":107300,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"8f7acd078b2ba775933de1fed4ffed8b","sha1":"0af0656522831c6a697894a6e802730c927af942","sha256":"cfe416e2397540aa9862277938c28e3d9920958b51c1a81dcb4b5a5ae40bef56","sha512":"1cc0bb955cb668b8336f7731dd9dfd7b7672e593bf50de6d8ceb79a4561f9202c5988dfaeb160b8287bd05849231aa87a0d28b7c8735db97e945297099e1589b","ssdeep":"3072:OkSlZbTunbrxvsmAgfopKjBOwNGs78Mpe+ni73uJmS:KlRTuSmA4QZarNmS","tlshash":"e3a3e69b328bb28be325b03d06a440189f64bd66d9f5095656e38efe35ef1130ceb744","first_seen":"2023-05-21T16:14:09Z","last_seen":"2026-05-29T02:42:46.12778Z","times_seen":77,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wygroupbnk.com/assets/global/webfonts/fa-brands-400.woff2","fqdn":"wygroupbnk.com","domain":"wygroupbnk.com","tld":"com"},"ip":{"addr":"192.250.229.89","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wygroupbnk.com/","date":"2026-02-21T20:54:25.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wygroupbnk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 20:06:24 GMT","end":"Fri, 03 Apr 2026 20:06:23 GMT"},"fingerprint":{"sha1":"EB:A3:36:D7:35:26:45:8A:A4:CA:22:07:CC:58:D2:A5:55:5F:1F:AE","sha256":"E7:E3:F7:FA:2D:60:20:09:4A:CA:9E:96:78:FA:59:44:92:6A:E0:F3:14:FF:97:CF:24:A1:85:72:42:14:38:AE"}}},"request":{"raw":"GET /assets/global/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: wygroupbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wygroupbnk.com/assets/global/css/all.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlM3czIxaS9oQjVBZWxUSXR6MW9MaHc9PSIsInZhbHVlIjoiK2Z5WE9TakRSam1uLzRZcEk2Q1VzcFB3L256djVjRC9mWXhoQVJlSHpCNUV2QS94ek1mUjkxa3Y3RFpud21VMjdQeEw3akozQzkxNGxxMDFLUUlKbzVxZlM3NGlwSkNES2d3QkxRYXFEY2JkVUtLTjBCS25JVjRKNEpENkNYRXkiLCJtYWMiOiJjNTQ4ZWFkMWI4NTExMmYyZDU1YjU4YzYzYzc2OWRlMjA2ZTVkNzk0YWRjNGU4MDc1NTVjZjIxODFjZjhjZTdiIiwidGFnIjoiIn0%3D; wygroupbank_session=eyJpdiI6ImJmS0M1by9WVVdLdTFoN0dvWndURHc9PSIsInZhbHVlIjoiTWpFVmxrWDJydXpYSTRNeVllY1F1RXBrT0hCT042VkZrZXJrMDhnL0hyR0RVeTJ2TFhmQVdwN241RTd0WVUyWE50b1pXTktSWmZwVWtFYnNQMnM5Q0JMZ1laNTF2VEU2QmFWcGM5K1dvMFc3ZEZJaUQvRVdBVk4vRjhSbURiVXQiLCJtYWMiOiI2ZGY5MWJlZmIwZmVkZmFiYWQ3NGE2NTAwNjk1ZDM1NmI1OTdhOGE2ZWJiNTA2ZTFkNjNmNjU3NTZiNWRlMDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:25 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sat, 03 Jan 2026 19:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 76736\r\ndate: Sat, 21 Feb 2026 20:54:25 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":76736,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 76736, version 331.-31196","md5":"ed311c7a0ade9a75bb3ebf5a7670f31d","sha1":"0613c7ebba55ee47ef302c0f7766324692f899a7","sha256":"8ea8791754915a898a3100e63e32978a6d1763be6df8e73a39d3a90d691cdeef","sha512":"6048e7ab94134b7200f0d5ed7fb8d577298d4831a2b3a4e0e5baa5c67468f77d4409314d63d34436ba6ba038c86faf87e46dacf98d311a74291b976fa39a9674","ssdeep":"1536:yVIKSdIKO0RtQIJwjZKd4jkC8Voun7L5XpeVQ+OEmdEu:SItm0RtQpAdofaluV99u","tlshash":"4d730196c3ca08de6994937ce960efdd1b0d4dc7aa72c7525e63c9a451c8ec83834b78","first_seen":"2023-04-05T17:41:32Z","last_seen":"2026-06-08T12:11:47.248307Z","times_seen":24752,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wygroupbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}