{"report_id":"a02db1f9-5b82-4f0b-b5a7-e8389436a651","version":0,"status":"done","tags":[],"date":"2026-08-07T11:46:15Z","url":{"schema":"https","addr":"win2lo.com/","fqdn":"win2lo.com","domain":"win2lo.com","tld":"com"},"ip":{"addr":"172.67.150.5","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"win2lo.com/","fqdn":"win2lo.com","domain":"win2lo.com","tld":"com"},"title":"Win 2lo","dom":{"size":105534,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7427)","md5":"cf12635f40587440aea3eb8419e94a17","sha1":"2b44e6df403c31e1e4fc32ba66b4dc70055bbe36","sha256":"85c9b70f1694ff68f859d849b06d0bb46bc7e15f42e23f7262b190991437c791","sha512":"9370305b9993b82d2a3c7578c23a9aae58d9dc01169259b49cedeeb4d53245e3153e298cac16420ca4b8fd63d681329918e5665d28523005bb95f1b4c9a69e12","ssdeep":"1536:kd/ghob7O0sN8wd/wPSBLbjkVljR9PRt68XjlwPI6yDyCtbQSGvnliHYk:kBgh59/1Rk7n/dTyCtbtSiHh","tlshash":"b7a32923b290113d70b38196a6a777ad35799003e70689b8b56cb2688fc5ed70777fc8","dom_hash":"domhashc219b86ebd296ffb73bb1c0e404a2a78","first_seen":"2026-08-07T11:46:15.86274Z","last_seen":"2026-08-07T11:46:15.86274Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"win2lo.com/","fqdn":"win2lo.com","domain":"win2lo.com","tld":"com"},"ip":{"addr":"172.67.150.5","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-11T11:46:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"win2lo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"win2lo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"win2lo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"win2lo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"win2lo.com","ip":{"addr":"172.67.150.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-23","domain_rank":0,"first_seen":"2026-08-07T11:40:57.976972Z","last_seen":"2026-08-07T11:40:57.976972Z","alert_count":20,"request_count":5,"received_data":235021,"sent_data":2773,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":[{"level":"log","text":"[Аналитика] Сессия инициализирована: uid=анон | 2026-08-07T11:45:48.120Z","filename":"https://win2lo.com/","line_number":991,"column_number":439},{"level":"log","text":"[Трекинг] Загрузка страницы: / (1853мс)","filename":"https://win2lo.com/","line_number":991,"column_number":558}]},"http":[{"url":{"schema":"https","addr":"win2lo.com/assets/favicon.svg","fqdn":"win2lo.com","domain":"win2lo.com","tld":"com"},"ip":{"addr":"172.67.150.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://win2lo.com/","date":"2026-08-07T11:45:48.365Z","timestamp":1786103148365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"win2lo.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 22:24:25 GMT","end":"Mon, 19 Oct 2026 22:24:24 GMT"},"fingerprint":{"sha1":"6D:5B:B9:65:99:EA:65:EA:58:95:7B:3F:A9:71:48:83:D9:13:AE:73","sha256":"D1:70:BC:4C:C8:6B:13:24:60:B1:8A:52:36:98:82:BF:AD:BA:EE:64:48:FC:56:94:62:B4:C6:A6:2F:DF:E2:FF"}}},"request":{"raw":"GET /assets/favicon.svg HTTP/1.1\r\nHost: win2lo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://win2lo.com/\r\nCookie: _vid=msivp55c1a0c5635594e; _fbc=fb.1.1786103147856.3476669696\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=axA14fAg3xPIgH6Ctz4Ny1oyEL3XmEUgs%2FrRENcGDSWJSEZAcsdt%2BvcVl35rCW7xpJUU8hX0JfwP117wP%2FhRyAl8kepwsYNHJ4OxvvFT1W1GRJGjFDE5BCUBg390\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 11:45:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a276098548eb32fa-OSL\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\naccess-control-allow-origin: *\r\nage: 322\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 07 Aug 2026 11:40:25 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1468,"size_decoded":1480,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"50679c0c5e3ed56d05c1d0ed312419a7","sha1":"f9ea27ac71a78da2d61e14b84ea77ce447920d9d","sha256":"c164e1ea36438d14fea9b88996d154275a4c92fd80bfa082c7e00a343f241147","sha512":"163d4097d60ecdcf58cd01ea828e74491b0e27fcf3d40a2e7c56e6c90042d6d9a9b6cb18825052caf8799836ad35a44c1c88ffd2c35ce5d888d23716c27dd0f4","ssdeep":"","tlshash":"a4312e9e77fea185f448e7f8023999b932d36cd33a04d8282bc00c02e98091e9c9588b","first_seen":"2025-09-26T11:40:39.971586Z","last_seen":"2026-08-07T13:24:55.373402Z","times_seen":22117,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"win2lo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"win2lo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"win2lo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"win2lo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"win2lo.com/","fqdn":"win2lo.com","domain":"win2lo.com","tld":"com"},"ip":{"addr":"172.67.150.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-07T11:45:46.286Z","timestamp":1786103146286,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"win2lo.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 22:24:25 GMT","end":"Mon, 19 Oct 2026 22:24:24 GMT"},"fingerprint":{"sha1":"6D:5B:B9:65:99:EA:65:EA:58:95:7B:3F:A9:71:48:83:D9:13:AE:73","sha256":"D1:70:BC:4C:C8:6B:13:24:60:B1:8A:52:36:98:82:BF:AD:BA:EE:64:48:FC:56:94:62:B4:C6:A6:2F:DF:E2:FF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: win2lo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 11:45:47 GMT\r\npriority: u=0,i\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nset-cookie: _vid=msivp55c1a0c5635594e; Path=/; Max-Age=31536000; SameSite=Lax\n_fbc=fb.1.1786103147856.3476669696; Path=/; Max-Age=63072000; SameSite=Lax\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KkL0SM0G%2BBmmUkI0ypnX7n1PV2cM7FrU9qlEXVl9NmO1f0G%2F9zmU9%2FE%2BXuLSqQ69AnDjheCvOhhpZZ4AVUg3hiLz%2BqKnLmtTzlqelSD1BeakLoWRTmkbjRM3MIBN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a27609787e6e32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105355,"size_decoded":31724,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7373)","md5":"2e6466b17f154bf43a5e1931f19cf594","sha1":"57cbeadc0529ec5568080b80f1b2614d0814289e","sha256":"eb99692614f1ec6b5b81e0d2e305bef08a4fce10bc6677c439f0a71511e019d3","sha512":"ef7f226012576579cec095a35bd658f329f3f78d77ff945bc87937f6605ce7bf30e42b6e2e0b80b1dcc472bbdb7cc56b7c0a6bcc032ae6561a84ba52c05be7a4","ssdeep":"1536:Bd/ghobuO0sN8wl/wPSBIbjkVljR9PRt68XjlwPI6yDyCtbQSGvnliHYy:BBghOF/18k7n/dTyCtbtSiH/","tlshash":"dda32923b250113d70b38196a6a777ad35b99003e70689b4b56cb2688fc5ed70777fc8","first_seen":"2026-08-07T11:46:15.864717Z","last_seen":"2026-08-07T11:46:15.864717Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1585,"timings":{"blocked":-1,"dns":10,"connect":18,"send":0,"wait":1553,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"win2lo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"win2lo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"win2lo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"win2lo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"win2lo.com/assets/InterVariable-subset.woff2","fqdn":"win2lo.com","domain":"win2lo.com","tld":"com"},"ip":{"addr":"172.67.150.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://win2lo.com/","date":"2026-08-07T11:45:48.096Z","timestamp":1786103148096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"win2lo.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 22:24:25 GMT","end":"Mon, 19 Oct 2026 22:24:24 GMT"},"fingerprint":{"sha1":"6D:5B:B9:65:99:EA:65:EA:58:95:7B:3F:A9:71:48:83:D9:13:AE:73","sha256":"D1:70:BC:4C:C8:6B:13:24:60:B1:8A:52:36:98:82:BF:AD:BA:EE:64:48:FC:56:94:62:B4:C6:A6:2F:DF:E2:FF"}}},"request":{"raw":"GET /assets/InterVariable-subset.woff2 HTTP/1.1\r\nHost: win2lo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://win2lo.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _vid=msivp55c1a0c5635594e; _fbc=fb.1.1786103147856.3476669696\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 11:45:48 GMT\r\ncontent-type: font/woff2\r\npriority: u=2,i=?0\r\ncf-ray: a276098398b132fa-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 322\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 07 Aug 2026 11:40:26 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OPRhaAAwfFjKNXrkegIWRg7cz21jD9ivg9Dd95bVI3lFkyT9kG3hM2WmY6J8JfsIOC0pV5w6rP7mfRryLR%2FggIW9A36RyySHGtwdDiLnuRHl0lSoX3PANiCj56m%2B\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 99732\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99732,"size_decoded":100453,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 99732, version 4.66","md5":"004dd38d15eda8a9214c41994beb8e97","sha1":"e40dfc111f30fc2a8f6160136625f020aecd5ca1","sha256":"6729dfb89cf8331936bba17c452d74207b5850c96d550e5ad8351db4aa97b287","sha512":"0b0d6d623ade27c159bcfb4882d523b403111171580f36f13cfec7fc0f4399818238305e9f116422e269bdff936deb20cc8a10ef6d45a25ed891ec5a4cff38f3","ssdeep":"3072:RPONyuVp0bPAs2JMNVxLSgISn4xiQoIaD:RkmAs2C31SgfyiQolD","tlshash":"92a312931c3ec6b06a61222580d8fffb858598aeb355f395c54c52e14baa394b423f73","first_seen":"2025-11-17T13:12:04.960091Z","last_seen":"2026-08-07T12:00:50.269614Z","times_seen":30,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"win2lo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"win2lo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"win2lo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"win2lo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"win2lo.com/assets/rock_back_compressedn43.webp","fqdn":"win2lo.com","domain":"win2lo.com","tld":"com"},"ip":{"addr":"172.67.150.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://win2lo.com/","date":"2026-08-07T11:45:48.339Z","timestamp":1786103148339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"win2lo.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 22:24:25 GMT","end":"Mon, 19 Oct 2026 22:24:24 GMT"},"fingerprint":{"sha1":"6D:5B:B9:65:99:EA:65:EA:58:95:7B:3F:A9:71:48:83:D9:13:AE:73","sha256":"D1:70:BC:4C:C8:6B:13:24:60:B1:8A:52:36:98:82:BF:AD:BA:EE:64:48:FC:56:94:62:B4:C6:A6:2F:DF:E2:FF"}}},"request":{"raw":"GET /assets/rock_back_compressedn43.webp HTTP/1.1\r\nHost: win2lo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://win2lo.com/\r\nCookie: _vid=msivp55c1a0c5635594e; _fbc=fb.1.1786103147856.3476669696\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 11:45:48 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i\r\ncf-ray: a276098518e632fa-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 322\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 07 Aug 2026 11:40:25 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SBxFj46KNj9MJJbnCvEGSYKIdwU%2FoHGChjdiB7S1yCG9zaVBDgXSPTkFYH%2Ft5UaMArYBIvq4iIIey073uPtLlD99Ul7V8aZM9bLrYwJC2Sinv%2F1X9c1MPLJQcGCr\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25064\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25064,"size_decoded":25784,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 950x475, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"13612f18018e0295c79d2642d620b6a3","sha1":"78dc58296f91cc57d5cf670703333f5b9b58b378","sha256":"e300c4cacd1c4da9a04c51ed2dc3526f226492b1b21848ebad66274b3568c0b7","sha512":"4b8e3da31ec759d21770b8707b817e1c23cf8a051cce42fb92354c7451c12a9b7056e948d077e2771c41d231739e34f9a02a632793bc3e3194fb2eac0b4b976c","ssdeep":"768:LuX+oqS6Y9z9oVb5QhG9a8Amw7IbEWA+jN0euS/4:SNqUz9thWAmSIo5+R0euS/4","tlshash":"8eb2e03252b94210fc933b68dd0a1d90d91fe813496b332f8f911d36999b9af541bcbb","first_seen":"2026-08-07T11:37:25.26655Z","last_seen":"2026-08-07T12:00:50.268945Z","times_seen":24,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"win2lo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"win2lo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"win2lo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"win2lo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"win2lo.com/api/analytics/event","fqdn":"win2lo.com","domain":"win2lo.com","tld":"com"},"ip":{"addr":"172.67.150.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://win2lo.com/","date":"2026-08-07T11:45:48.358Z","timestamp":1786103148358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"win2lo.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 22:24:25 GMT","end":"Mon, 19 Oct 2026 22:24:24 GMT"},"fingerprint":{"sha1":"6D:5B:B9:65:99:EA:65:EA:58:95:7B:3F:A9:71:48:83:D9:13:AE:73","sha256":"D1:70:BC:4C:C8:6B:13:24:60:B1:8A:52:36:98:82:BF:AD:BA:EE:64:48:FC:56:94:62:B4:C6:A6:2F:DF:E2:FF"}}},"request":{"raw":"POST /api/analytics/event HTTP/1.1\r\nHost: win2lo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 91\r\nOrigin: https://win2lo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://win2lo.com/\r\nCookie: _vid=msivp55c1a0c5635594e; _fbc=fb.1.1786103147856.3476669696\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":91,"data":"{\"event\":\"page_view\",\"userId\":\"\",\"properties\":{\"page\":\"/\",\"referrer\":\"\",\"title\":\"Win 2lo\"}}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 11:45:48 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: application/json\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8xZnFDX0ds8y2GK2HHSTq3iI88rQ4HfYz0A29z4vM9XyXQpZ6hdWop0kEmQE8oI3H6n378swEU712OXXy2oa6IxzKUalWZQwGRKk13UF4NPiZh7JHKX9yhp8fsJa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a276098538e932fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11,"size_decoded":547,"mime_type":"application/json","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-08-07T14:55:56.84587Z","times_seen":17777,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"win2lo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"win2lo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"win2lo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"win2lo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}