{"report_id":"b5d39827-3e3c-4f14-ae1a-feb27b2ebeab","version":0,"status":"done","tags":[],"date":"2026-07-08T11:53:00Z","url":{"schema":"https","addr":"1wincolombia-co.com","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":0,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"final":{"url":{"schema":"https","addr":"1wincolombia-co.com/","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"title":"1win Colombia 2026 — Liga BetPlay, Aviator y Nequi en Una Plataforma","dom":{"size":39169,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1724)","md5":"a100c64f41da50780b0c5d757e3e2f99","sha1":"e9704b7b256f0b27952b5681eb258fa1173aa7d3","sha256":"d2aec8ca715c98dcaf9b41efbcf6d024af5022cf75a266bd94a3ff84d90cafca","sha512":"08f3e6a1cfdd4c7e40a4b8e7b63b6ebc8b758dc4169ad4d401c656ca76d147a0576e0ca8fb865d60a99685245a1881d32323f83024f62e26470bf77232df04f7","ssdeep":"384:VCgLyeIIDIIyCNbx2Q/msigE+gigUNY17G/dGnxlw9z2voiQo8vF3+l/LSd+W5nx:VCgOeIIDIILy+FldGxczi78d/5jV","tlshash":"b1032b21818d1e3f01b313d6b192af19f0db6d3ddf564b94a3bb438953cae809d72265","dom_hash":"domhash6450aa0c2c396f2938e9f5b8dfe037df","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"1wincolombia-co.com","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":0,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-12T11:53:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"1wincolombia-co.com","ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"domain_registered":"2026-06-28","domain_rank":0,"first_seen":"2026-07-08T11:53:03.726652Z","last_seen":"2026-07-08T11:53:03.726652Z","alert_count":50,"request_count":50,"received_data":15684181,"sent_data":27447,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"1wincolombia-co.com/","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"introduction_type":"scriptElement","is_inline":true,"md5":"44f04135fbb1ed3018bedc2b93afbe61","sha1":"3c91bd67307d03426638d49e91d9f4d0f2f45bee","sha256":"b3d2a2309f62d5e2c4c0c6d4b9c42f187e24838ea3e842ca27578c89ab08c631","sha512":"71a4963fb6662bc0aa7db1a366912a12127514d6885521664654110222cac07f5ae885072068db9aa2112db46be744c838ab9a22b242c1a47e1f53d5c966defc","ssdeep":"","tlshash":"87019cbf71e3b43901ab762b703ba28db13704d27c416105443884867c70a8f4233dcd","size":743,"data":"","first_seen":"2026-07-08T11:53:09.240932Z","last_seen":"2026-07-08T11:53:09.240932Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/themes/js/slider.js","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed39d8967eb0bb2461e0503186f85b27","sha1":"799ad432edb0760cb6e9ac473558de53196e8817","sha256":"5210f748052b3fc0f98f06a33eb9b784bfcaa8a85505a98de85d2a593b4557ff","sha512":"e33325134acb2dedf4595c9484721200e26ad261e0efc511291654dada7f700f72fcdcf33b5b54fae25612f10035a5b50f145ceed592b7aa46d9e8891ecd57c2","ssdeep":"768:Qp1IkKocCzlqFhFNfrye7R9TAcZIaeQ26sZXnZhCv42GQoQ0A1SCzjZ:sIIRJUFNfry4VG626o/qkWVjZ","tlshash":"5303a65573443339c607b137ad8ecc0cb77a69986383d68d4a2cc9986879878d37ede8","size":39448,"data":"","first_seen":"2026-04-26T20:42:51.9096Z","last_seen":"2026-07-08T11:53:09.207134Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/themes/js/script.js","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"introduction_type":"scriptElement","is_inline":false,"md5":"59717f3890f60fb0cbd2c1a8b3d36e00","sha1":"dd99f7847da2b669b25d68aca30a8b017cb3f56d","sha256":"964fdb70a9327bd9e9a24e503580ea26d0819c1f4dab4448574f545367a987f0","sha512":"b7f4868d6bafa291aa41f389f9d02025bd61a9adaa45a313839119e7fd43accb4d13972d1e7bd7c3b523a41be54f0a783ddb35d8ef1aa83102396f7425615b59","ssdeep":"192:xX/3TGgnrJyBN4TauHbfONByvg7rA0HnPEW1hx0uGmSzIAIA7BnvPI5iOTiX:xXPTGKgH42u7fKByvsAQPrP16PHXgiUU","tlshash":"532213616265293602db6aaba2efd7d43b705097f4419850382ccc8f0f69dd251f2beb","size":10594,"data":"","first_seen":"2026-07-08T11:53:09.208315Z","last_seen":"2026-07-08T11:53:09.208315Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Can't find.content-slider__inner","filename":"https://1wincolombia-co.com/wp-content/themes/js/slider.js","line_number":1,"column_number":8424}]},"http":[{"url":{"schema":"https","addr":"1wincolombia-co.com/img/main/mob1.png","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.239Z","timestamp":1783511555239,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /img/main/mob1.png HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 28 Jun 2026 19:05:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a41707c-1367\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4967,"size_decoded":5245,"mime_type":"image/png","magic":"PNG image data, 118 x 44, 8-bit/color RGBA, non-interlaced","md5":"40364e6ea848dba8a5c13cfa7d0395c6","sha1":"7a9fb7902f0828492d735880b50f9c2bdd5f5650","sha256":"1b2d06e96ba06bc649a4a04090265f36c38b07693b70a0774daa43bbca2550d9","sha512":"1513c99b6dc11d962b70a23f8595879a2a16cac395bbee513c23be9cb2f25a61aaa3c5261a1c8aff1f30734580a6169a8486e5c6b4536133acad4e5955cd25a3","ssdeep":"96:NSfdwqbWw0xj0mWg4+hPPbR93TYOAxNjKzOrALWLlLrzX:NSfdwqSXj0mWg4qjR93TYOAxNjZMLWL9","tlshash":"7ca17dab4950d658ce72d8622739fc8854912f702127768eb5991008f43fde9c61a75c","first_seen":"2025-08-04T11:53:38.880271Z","last_seen":"2026-07-08T11:53:09.176714Z","times_seen":4,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":488,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/images/cas5.svg","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.247Z","timestamp":1783511555247,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/images/cas5.svg HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 2412\r\nLast-Modified: Sun, 28 Jun 2026 19:05:32 GMT\r\nConnection: keep-alive\r\nETag: \"6a41707c-96c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2412,"size_decoded":2655,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8a4c88400849b5d5f0f7b8ac4799d9f5","sha1":"a0cb99ebc02d879e63a5d1a0cae7aeee108563a1","sha256":"a4fbf866cf4068f493b211bf7c3aa0264d7114901079b29436ec75e950a6e9ec","sha512":"01d1b9596976319274780108f3f1e6940d4018498344c541a6ae06e3d25c7f7361997247273c1d4e4210a723153fde83d2d1a76dab6e9163aae05b2632a654e9","ssdeep":"","tlshash":"aa4145c120aca180aa488bdf992aa8f4913734f5f15c43c5de41f35b7e5e4ee0d6cac4","first_seen":"2026-06-01T00:25:26.423391Z","last_seen":"2026-07-08T11:53:09.177815Z","times_seen":2,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":176,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/themes/img/poker-bg.png","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.303Z","timestamp":1783511555303,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/themes/img/poker-bg.png HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/wp-content/themes/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 28 Jun 2026 19:05:33 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a41707d-129f9\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76281,"size_decoded":75630,"mime_type":"image/png","magic":"PNG image data, 938 x 308, 8-bit/color RGBA, non-interlaced","md5":"27e4dd1576a4729a75f7e4e0f1e2c36d","sha1":"3d0f1ad9904bec6aa0b0c0e9f0c37a76bdea580d","sha256":"aceda3331b72d4f74f22653b47c096e3281bc761db5852e8cdb6016cc64b9946","sha512":"a0a5739507ecb00781eb3494e4c255062b75c6bbfc88682994612d562126ad108a4ad72d687a16c9c3db8ee8fb95618c83c27a445b76097aa5a04c2787f3dc6d","ssdeep":"1536:K3wt2qnGnNAZbD7BYjcxMv8xIBiS/vRY9CrOizmXtr72cv:qe/GNAZbDVUcGkxIgS/lSgm72cv","tlshash":"f17302bd1b3ccdb2ed7a27b613c685a01b60686b48b0a18c0902367c84556bf67129ff","first_seen":"2026-07-08T11:53:09.17881Z","last_seen":"2026-07-08T11:53:09.17881Z","times_seen":1,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":333,"dns":0,"connect":0,"send":0,"wait":218,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/themes/img/home-footer-2.png","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.305Z","timestamp":1783511555305,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/themes/img/home-footer-2.png HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/wp-content/themes/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 28 Jun 2026 19:05:33 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a41707d-1efb13\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2030355,"size_decoded":2030997,"mime_type":"image/png","magic":"PNG image data, 2000 x 900, 8-bit/color RGBA, non-interlaced","md5":"551de77e0781129934848b5ad55d2ab5","sha1":"233b376a69ba260b88b07a71d4113504902ec6bf","sha256":"a38ccd0f5cbe7808cb296652f4d42970d324a6b369a9756cc8514227b1ac3849","sha512":"9d684b0542d60e31721913a6b036b3afd045c0d0ade63df315f267ef16295785eeafebc9c3738222445ebc6ebd6cbfb11b5d9cd28b7186e7b989eda05affa9ba","ssdeep":"12288:ZnbC3LDGNho2Z7k/SPkRYMLcZI2HNU2VT0K3xfmP13nI/tIvIsg2i56FnY5CQWYa:ZbCykMcLQNUowkVm939yT5QnYQXMk2JY","tlshash":"b925330181ebca07eb7e1f7428d05ae9e204c08d35043253b5db7a6deb914619deebe7","first_seen":"2025-11-23T21:43:04.165285Z","last_seen":"2026-07-08T11:53:09.179919Z","times_seen":2,"resource_available":false,"data":null}},"time_used":637,"timings":{"blocked":406,"dns":0,"connect":0,"send":0,"wait":145,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/images/juegos/mines_hu_31d4397d2da14057.webp","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.376Z","timestamp":1783511555376,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/images/juegos/mines_hu_31d4397d2da14057.webp HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 28048\r\nLast-Modified: Sun, 28 Jun 2026 19:05:33 GMT\r\nConnection: keep-alive\r\nETag: \"6a41707d-6d90\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28048,"size_decoded":28290,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x767, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9dad7c02e5c33b15e700689d206383ca","sha1":"0df20f05c9889a102cb3a953baf9918e4fefa626","sha256":"9193f834ad6ae8d7d8e34baae4aa8c43a39bb73878bf4f8d282812ec371760fd","sha512":"a8d306e1f04de78b10719b59c4d89fcdd590a899af0e01850bbf475b84c9b1d7e74bf855d2bd25c07f9de039c7d5e502faa50ad9823bf59d90947276c0bb529d","ssdeep":"768:I9UmN3H9yrDoiHacMf90/vHJm2iN+IciQk48Gfru:6N3ioiZm9ypmfcq4rru","tlshash":"8bc2d172b297bf1b9a4ed57dc77150f199dca220c00ca350e414f379059c0abf6a6bad","first_seen":"2026-07-08T11:53:09.181061Z","last_seen":"2026-07-08T11:53:09.181061Z","times_seen":1,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":171,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/images/juegos/anubis-plinko_hu_64160c3125966d25.webp","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.379Z","timestamp":1783511555379,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/images/juegos/anubis-plinko_hu_64160c3125966d25.webp HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 117516\r\nLast-Modified: Sun, 28 Jun 2026 19:05:33 GMT\r\nConnection: keep-alive\r\nETag: \"6a41707d-1cb0c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":117516,"size_decoded":117760,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2047x1534, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6aeff06efee53535b6fee59afe6128cf","sha1":"ad1a8572f2c170fb81fde5c56348e944e6243518","sha256":"b8fe93a0fd116d361eb38df3077bfeea3a7ccf782a5151c3e8af408cfe5a19a7","sha512":"fc18738fb690e6e0085ae06e50bf52c2507372bfa7b80c97d67df055d6fbc9605d866cb85a597e1c70e5a5de1b574c2192a597ac29963712deef1d4cf398f0f0","ssdeep":"3072:u38znw6Bzi7lx1qaefo6TJo0wHbfDmtIyjMW7:i8zwA2HnmJo0/t9jT","tlshash":"5eb312870b6d7099faa820ba28020b397f53083c49f1a467f7de73d64e76d424379968","first_seen":"2026-07-08T11:53:09.182372Z","last_seen":"2026-07-08T11:53:09.182372Z","times_seen":1,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":183,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/images/juegos/bombucks_hu_9ee9948b54a72708.webp","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.383Z","timestamp":1783511555383,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/images/juegos/bombucks_hu_9ee9948b54a72708.webp HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 25424\r\nLast-Modified: Sun, 28 Jun 2026 19:05:33 GMT\r\nConnection: keep-alive\r\nETag: \"6a41707d-6350\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25424,"size_decoded":25666,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x761, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4b3c19fb7692eb378b05c6a40c8b1e88","sha1":"e7635d1b64b1e352e872ecd4c7736d1526789cc0","sha256":"6e4151665420ed73d26f68e9b07cbb3d7af0ba9e116c92c8cc2f22551f8f8a89","sha512":"19bf79b7db22868cb4d22772c0bc9ebff46b138b8568ae7ffa61f72d6cd7ea71dab992d1957d01c48d6564573649b1d3beb94f8944dc4aefccf4f567b7fe3244","ssdeep":"768:30YRYJzArx/C/pTxWqDgky3y3yfqEdJ1caS68ju:3zm9C4xgk3yfzRHSru","tlshash":"fdb2e0ec1240b623cbc9ddd89cc77ccad640921bac18639dc0642bdf2569c7b846a57e","first_seen":"2026-07-08T11:53:09.183555Z","last_seen":"2026-07-08T11:53:09.183555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":221,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/images/cas7.svg","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.249Z","timestamp":1783511555249,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/images/cas7.svg HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 2040\r\nLast-Modified: Sun, 28 Jun 2026 19:05:32 GMT\r\nConnection: keep-alive\r\nETag: \"6a41707c-7f8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2040,"size_decoded":2283,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4764c39c4fbb90a975e33733e807360d","sha1":"3d973129fe44d687ee7b80e45f360eb9c9a26074","sha256":"63a22ddcfe649bb4170e0cf10702c1ce318fe72ac38f497186631a976214f711","sha512":"4bb394035d0d58eaea58233fcd7f7f967dda1e323a1449ad472a43be44b76bb087277a9eb17330a8decde439a510bb7443f713c6be428253168c8650391c2164","ssdeep":"","tlshash":"b04167d1c38c92c0aa0e9fa4fe36683e777764f7ba65c9d984953c95f9410dc608cc81","first_seen":"2026-06-01T00:25:26.319265Z","last_seen":"2026-07-08T11:53:09.184567Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/images/juegos/lucky-jet_hu_10c6910111c9c94d.webp","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.369Z","timestamp":1783511555369,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/images/juegos/lucky-jet_hu_10c6910111c9c94d.webp HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 31496\r\nLast-Modified: Sun, 28 Jun 2026 19:05:33 GMT\r\nConnection: keep-alive\r\nETag: \"6a41707d-7b08\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31496,"size_decoded":31738,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 700x520, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bc7883da8e350a700ae3663cccf1e87c","sha1":"f3001a800d53ff9f0ab4c244cf0bba98a712477e","sha256":"2988de90fcb15d09e1c08173eeef440cf61286c109ae9bc98d8e7ab5e958b36e","sha512":"e5fefd281bf582952365e4772fd72fc8d1290731573c714cfc3df21c5245437cb097f33837998550dfe37b548569e07d0bd3bd5b8831dcc1ea698c5bf91f8fbf","ssdeep":"768:CHs0grsbyreLEs0+mzgi8LL2lsyNmRuGFaKg2d9To:Qs0gIbyreL9bmzgCOyNmV/goG","tlshash":"54e2f2fbbace23b4179c033e14a955d77ac80cf841b94c4d86d68e2b642ca4e4d795bc","first_seen":"2026-07-08T11:53:09.185604Z","last_seen":"2026-07-08T11:53:09.185604Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":129,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/favicon-16x16.png","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.975Z","timestamp":1783511555975,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/png\r\nContent-Length: 949\r\nLast-Modified: Sun, 28 Jun 2026 19:05:33 GMT\r\nConnection: keep-alive\r\nETag: \"6a41707d-3b5\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":949,"size_decoded":1187,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"4177cfc080b54ce2aae4edd9c791b227","sha1":"a8d3dc1172e131772d99e3f49673327f0bb66990","sha256":"8393e9a8bd8a34a37437c8fa0a88ee15618e223fdb7d128c5eac3b74233d734c","sha512":"201cb28d6e3b18590ebe3d4eeb225a26e10d02aa054267deacba21e12ffa4d8d4f2f4e75b414f1bab49e7b5e7761f26775b6c5efaca12fbd1dd7eb757953b39c","ssdeep":"","tlshash":"7811fdc4bf3391b8b32d201236d437888a68fe1120c2a712212bf867543368dd3e4982","first_seen":"2024-11-08T10:00:35.075253Z","last_seen":"2026-07-08T11:53:09.186724Z","times_seen":9,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/img/main/drive2.png","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.225Z","timestamp":1783511555225,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /img/main/drive2.png HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 28 Jun 2026 19:05:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a41707c-25ea\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9706,"size_decoded":9984,"mime_type":"image/png","magic":"PNG image data, 130 x 49, 8-bit/color RGBA, non-interlaced","md5":"db34f8c94654b481057605294ac1e8e3","sha1":"e1a22c1b65cbba149f19b3c51fa5f3a4394d5541","sha256":"603cb59af456b8cf7c8ca60322a5adc557a12bb908088ca699cb370636c6cac5","sha512":"d87940bcd4f2b3ec527b5f59f6d78fd40055221620049f0516fe3c36d2ed193437569e06bfacefcc39f75dc35cfae0b000349af812c0a1be880bbd9e1aa14a05","ssdeep":"192:SSYp1vpXVc4BRgufQPPw4Jbl8OQ6zJW2W/uYyOzfesprEtS9DR4+2yzZVwG:tYp1xXDfQPIYh8H6c2yu0esprH9DR4+P","tlshash":"5612c08a1f6dbb494f60120915bf2bcad11d605d4bd588f27eec87e2f813725835c63a","first_seen":"2025-08-04T11:53:38.889576Z","last_seen":"2026-07-08T11:53:09.187807Z","times_seen":4,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/images/banners/reembolso-semanal-de-hasta-el-30-en-juegos-de-casino-post-standard-scale-0_50x.png","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.228Z","timestamp":1783511555228,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/images/banners/reembolso-semanal-de-hasta-el-30-en-juegos-de-casino-post-standard-scale-0_50x.png HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 28 Jun 2026 19:05:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a41707c-1899f0\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1612272,"size_decoded":1559487,"mime_type":"image/png","magic":"PNG image data, 1820 x 728, 8-bit/color RGB, non-interlaced","md5":"ee74fc28846c3d7ee25a0ac6edd0a2e9","sha1":"add57528ba4169d5708ae4e4546e8598dbc0a57a","sha256":"659567599cbd9f3ce294242df640a75a72b45f3cf7eba2b472c357ddd51c78e4","sha512":"12f18e9cc96a2a60ef45d6021036eda761bc1c607303c0fc1cb2b6d2075ae3431af2f448ce28991cd6f1a2838cc4697e24c06f6d5aca035d71f110a2ba850808","ssdeep":"24576:RRknPzRI9z0YVEsGB1MI2C1I6J5Ly65+nIk83H:czOwYVEUFC1I677zk83H","tlshash":"c72523b3d8c868e3c4d93f3c81867771718a64bf46351096337ac1a8956f6b32d1ab72","first_seen":"2026-04-26T20:42:51.898614Z","last_seen":"2026-07-08T11:53:09.188729Z","times_seen":2,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":364,"dns":0,"connect":0,"send":0,"wait":21,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/images/banners/serie-de-70-fs-para-todos-los-nuevos-usuarios-post-standard-scale-0_50x.png","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.229Z","timestamp":1783511555229,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/images/banners/serie-de-70-fs-para-todos-los-nuevos-usuarios-post-standard-scale-0_50x.png HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 28 Jun 2026 19:05:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a41707c-1e3f03\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1982211,"size_decoded":1957197,"mime_type":"image/png","magic":"PNG image data, 1820 x 728, 8-bit/color RGB, non-interlaced","md5":"9ff0de866261b7a207002774cc279dfe","sha1":"0322318200c91c6a7ca462801c568d4ac16907d8","sha256":"c7dac32c090dd104f1e93b94ecbe0c5f3bfaa06a4592d4e79da50bf97607a4ab","sha512":"f59e68d67632cf0029a4b5b5c09d5eb883112517e7586774947044c24efb02254d2b593f0fa8e755fee7db13caa1a477f3a66d7023d986adb46f88ee6e0bd83b","ssdeep":"24576:uIkZrNJdlALX1ophJ1nRNTujtpGWBvBlS+A3VDWwL:bkldlApovJ9RNTujeWMJlDhL","tlshash":"3e2523b2e094a8e5d2cf0232b0c64de4af78919deb25173676d803fea44ce44457f75a","first_seen":"2026-04-26T20:42:51.935603Z","last_seen":"2026-07-08T11:53:09.189847Z","times_seen":2,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":40,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/images/banners/apuestas-combinadas-mas-eventos-mejor-cuota-post-standard-scale-0_50x.png","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.231Z","timestamp":1783511555231,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/images/banners/apuestas-combinadas-mas-eventos-mejor-cuota-post-standard-scale-0_50x.png HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 28 Jun 2026 19:05:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a41707c-175066\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1527910,"size_decoded":1497082,"mime_type":"image/png","magic":"PNG image data, 1820 x 720, 8-bit/color RGB, non-interlaced","md5":"226e06b5d33340c8b19a5ec462d90460","sha1":"52d92656c840f96603cf30d87bf3550a8a63968b","sha256":"42232eb99a07c419e7e9a0b31f347db62ca8cce9b81b9564175b06cc465ba9eb","sha512":"b1e58c5dc4e98940f9d89e02dcfad40d617ccdc5a890b3ecf530aca38fc2300a3804d83568bf349f9c163256d77092cb7fe2bccb8c017d42abbff8e05879a700","ssdeep":"24576:8WmMTlvHQq6gxsWZj/B5/JWYCkTjEMw2QI:8AwQj/BdkYD7w2QI","tlshash":"1c252393c3596693924b7a358d9527ad39c9b4fd223342c209eac2f750ef361dd12bc2","first_seen":"2026-04-26T20:42:51.940217Z","last_seen":"2026-07-08T11:53:09.190909Z","times_seen":2,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":363,"dns":0,"connect":0,"send":0,"wait":18,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/images/banners/ventajoso-juego-con-1win-coins-cambia-bonos-por-dinero-post-standard-scale-0_50x.png","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.236Z","timestamp":1783511555236,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/images/banners/ventajoso-juego-con-1win-coins-cambia-bonos-por-dinero-post-standard-scale-0_50x.png HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 28 Jun 2026 19:05:33 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a41707d-1443f6\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1328118,"size_decoded":1328317,"mime_type":"image/png","magic":"PNG image data, 1820 x 728, 8-bit/color RGB, non-interlaced","md5":"21cf5c99a82281f86f8999632b9ec07b","sha1":"ee1864a005e829493db35ae0ee98cba9bbc11e63","sha256":"1f52fcfe9127865b2ccd6d491d295bc9ad4029b2dfcdecd7c14090d26f84a45e","sha512":"94f310123f93be2cdb3a7f21d4a8ee6b289f32928e18abc13a21a1a2a34f88f19a6ddbfaeee2eed1bc768d5668984a879e5eba52d7f7de0c99089c67c9b646a7","ssdeep":"24576:TnvY/O0w2QHd6PEjYcbJ9VMvPlbrLMOIv0J5kb9qMdq:D2Va6PE5bJ9y9fL/Iv0zkbc","tlshash":"ec2523b11776647828c4e053d33d0b1ae2ee352bd6186dfe1f37782e3bb68809566742","first_seen":"2026-04-26T20:42:52.04751Z","last_seen":"2026-07-08T11:53:09.191865Z","times_seen":2,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":366,"dns":0,"connect":0,"send":0,"wait":92,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/images/cas3.svg","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.244Z","timestamp":1783511555244,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/images/cas3.svg HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1359\r\nLast-Modified: Sun, 28 Jun 2026 19:05:32 GMT\r\nConnection: keep-alive\r\nETag: \"6a41707c-54f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1359,"size_decoded":1602,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4dd2853956bae8e6b515f24a3f5edf76","sha1":"d7e3231058de223a476fa6b48ab9e3a54a9d778e","sha256":"08b9f73998f800032c9cc4991382f4373ba9fc08212bf39f83216324ac05abf0","sha512":"df925b8c9bbb0ba2ab6e521713355298a1536a1276df18b44e8cd3860a3da5916b87fc1200bb0e666c05f3664d3ae15f722dc520889feaf8f4a10db15d30a6e6","ssdeep":"","tlshash":"1321d37f62fe7494e44cd7d86919d470391122767ebcc69040d1df76d0041ad6c4f4d5","first_seen":"2026-06-01T00:25:26.312287Z","last_seen":"2026-07-08T11:53:09.193122Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/images/cas6.svg","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.248Z","timestamp":1783511555248,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/images/cas6.svg HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1871\r\nLast-Modified: Sun, 28 Jun 2026 19:05:32 GMT\r\nConnection: keep-alive\r\nETag: \"6a41707c-74f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1871,"size_decoded":2114,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8e9ef75855789484c8caa0fe62d15f20","sha1":"18fc086a1e09cbd46e76620ae538f7699e96f284","sha256":"3b46077109abe7cff393f3d7a91dd4d29a763f634109968acb0575d3fb5b700b","sha512":"c403f417974ebdfc17844aebca3736233aff051d8ac416cf9d1248cb47e643a223d77e6222a6705836c751b98d841ad2acac9005470cc8cfde0a874562e79500","ssdeep":"","tlshash":"493153d5539ea6f7d248d3909566883839ea7cf9bb2d4be842d836dbe43409148888c5","first_seen":"2026-06-01T00:25:26.347237Z","last_seen":"2026-07-08T11:53:09.194268Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/images/1win-games.svg","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.250Z","timestamp":1783511555250,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/images/1win-games.svg HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1761\r\nLast-Modified: Sun, 28 Jun 2026 19:05:32 GMT\r\nConnection: keep-alive\r\nETag: \"6a41707c-6e1\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1761,"size_decoded":2004,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4eb5e95ef79aceefedb22ee86ad9b5d4","sha1":"a9ec83d93f0e5193967e32394e3ed416ec77976e","sha256":"acdc45cda7ed7d587b4bfb6f39420758c9e56136aa1e814f363c68a23694e832","sha512":"208422dfe42a9035a52e13f8efa93b35bb7e9e4f2f76bee4d67bd6c894dd4a1d095e1ae0d70790c8c9d9ef6aae38e72eedc67a0dbbe7c7e527646ddf5dcf7bc9","ssdeep":"","tlshash":"0a3145fbe31ce9e4e109d3b0a831547520731dfa7c96d1a046c5fdc1da091dd4c4c540","first_seen":"2026-06-01T00:25:26.404413Z","last_seen":"2026-07-08T11:53:09.195224Z","times_seen":2,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":177,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/img/main/money.png","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.216Z","timestamp":1783511555216,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /img/main/money.png HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 28 Jun 2026 19:05:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a41707c-10ef\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4335,"size_decoded":4613,"mime_type":"image/png","magic":"PNG image data, 60 x 33, 8-bit/color RGBA, non-interlaced","md5":"af7d44eb0da89935476bab94754d5b7d","sha1":"13a722771a242aaff16f88be7fcaf590dc104be2","sha256":"1373ebf7fd01e93e6fe6b5b0b9ba59c20c06635d5e378f0445287d7d390d142e","sha512":"d248683d0dd494d0ce95fd2a173ebb986b8babba8ee78539a03ff3d1557d8386626c3a08d3bacaee9698fce996b48391c2f42c4bfa968d5872b77758e3d64deb","ssdeep":"96:Jo5SxLN/FuDnSHq17viW0Lp4TD4RFJV3e4oekz5xsHorNpm68pSev3Q5Emk:JgSL/FubSc7qW0Lp4AF/3dVkz2orNpFs","tlshash":"01917cc108fd64fbcf98c3b4efa8851a657b185504a4c52c7caad8adcbe18c1264bce1","first_seen":"2026-04-26T20:42:51.860619Z","last_seen":"2026-07-08T11:53:09.196303Z","times_seen":3,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/images/banners/poker-1win-te-aguarda-unete-y-experimenta-grandes-ganancias-y-emociones-intensas-post-standard-scale-0_50x.png","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.235Z","timestamp":1783511555235,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/images/banners/poker-1win-te-aguarda-unete-y-experimenta-grandes-ganancias-y-emociones-intensas-post-standard-scale-0_50x.png HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 28 Jun 2026 19:05:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a41707c-193be3\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1653731,"size_decoded":1584211,"mime_type":"image/png","magic":"PNG image data, 1820 x 728, 8-bit/color RGB, non-interlaced","md5":"45055eaff0f69ae4034b3ada2c054a26","sha1":"1ae3d7f695ca35bbaa3430e90108e6211a0a77e1","sha256":"46d263463fe1d7e293b2f259070e107be517dbb66545b6fe2a68521314bbb1f7","sha512":"86b3ba99c27c770a78d01fd82ff89713ec27e8b3329a1ef59fbaa14aa26625e6ee948a49be72126c70a8d9a0ff73f1f1aa41fb6d54fe710d0343cff2dd7a26a4","ssdeep":"24576:H2cKFuKrvJPn0zjzFDgbwtQZyT2NYIJJ5NPG+fBJ8E9NBPAXl:H2coVVPnGjRgbwtjTEZzRfH86PIXl","tlshash":"02251333e391b6d3c7ea6b3a23438f6cb21194f5126192b98b26196677df2443d39f01","first_seen":"2026-04-26T20:42:51.864077Z","last_seen":"2026-07-08T11:53:09.197179Z","times_seen":2,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":29,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/images/juegos/brawl-pirates_hu_18bb9579264b2c0d.webp","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.381Z","timestamp":1783511555381,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/images/juegos/brawl-pirates_hu_18bb9579264b2c0d.webp HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 33056\r\nLast-Modified: Sun, 28 Jun 2026 19:05:33 GMT\r\nConnection: keep-alive\r\nETag: \"6a41707d-8120\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33056,"size_decoded":33298,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 700x520, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e8988760249cb285619ff11820ac19dc","sha1":"a0e176ce6b2e53717f483d2a3753022ecc166c9f","sha256":"e73894132a8d1245418a8ec5e50580fcfc3688ba4d98a88a2f233abd95741244","sha512":"77cb52258a8dfaaa9bbf2e814a42747d0f4717c1bc23e46874b4a2130ff30953abbf3d582dd2f6020af4d2fce012bb02722c2ed16fbf3a48ae2f9661eb5296ff","ssdeep":"768:BiAuz8CEkFNgWgYImL7Qa2MpivcVERetYKGG:juIhkwBYZgTMXVEsGG","tlshash":"1ce2f1e546d2054dcd5fb99644942d336cc955e3ff883029b3a0d338acba0d57ba670a","first_seen":"2026-07-08T11:53:09.198153Z","last_seen":"2026-07-08T11:53:09.198153Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":202,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/apple-touch-icon.png","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.973Z","timestamp":1783511555973,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 28 Jun 2026 19:05:33 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a41707d-1477\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5239,"size_decoded":5366,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"75f8213b6c78a05c9167332d02198042","sha1":"45dfd41e9fdcc05ebe36aa85349a720f2715b52e","sha256":"f7a7896801013588a4fd00807967a1a56dbd0f83b614a689ff4da4cc4107b2f1","sha512":"fafabdc609722fd375833c55050066ec0db5aae07b70aac2501a3c22adf935f0f8ca1d6d2af1914d52a9a42041a723e2ccc61c45d0fbe91eb53aa4eb91ee1214","ssdeep":"96:vmNzigXIdPzmmumldWlIrF0o/HtT3Bck8qG1951yttc:EziuIdPSmDdWRWHtTRckS1T/","tlshash":"dbb17ccb7d3491547ebfc879cc816fe86c9984306fc92a7b6271f8eb28017747181696","first_seen":"2024-11-08T10:00:35.077461Z","last_seen":"2026-07-08T11:53:09.199234Z","times_seen":9,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-08T11:52:34.613Z","timestamp":1783511554613,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:34 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 9145\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":35452,"size_decoded":9356,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (955)","md5":"47405b3b6c109be4ac84cccd0afed2ce","sha1":"c2a39eab009a28e6af471aef038b7b39ec1c4d23","sha256":"54ebad207409757f768aa3484f1ba1252518d64a9812cb99aca3d830a6019004","sha512":"e3a87a7820a6737b75e49c9711549a5d08cb0cf8f536581589b6d1ade910b063c1bb1b8236e545670c1dfe323b00601f12bf40a62e71a4225098825400627ea3","ssdeep":"384:dOlLyeIIDIIyCNbx2J/mGigS+FNY17G/dGnxlP91RvCiQo8vF3+l/LSd+W5n5dw:dOlOeIIDIIL/+FldGx/1t78d/5jw","tlshash":"d9f23b2281ce1e7f01b313d6a1926f19f0e76d3adf168b84e3bf424953c9e819d72265","first_seen":"2026-07-08T11:53:09.200268Z","last_seen":"2026-07-08T11:53:09.200268Z","times_seen":1,"resource_available":true,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":240,"connect":16,"send":0,"wait":28,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/img/main/mob12.png","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.237Z","timestamp":1783511555237,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /img/main/mob12.png HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 28 Jun 2026 19:05:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a41707c-56e\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1390,"size_decoded":1667,"mime_type":"image/png","magic":"PNG image data, 27 x 30, 8-bit/color RGBA, non-interlaced","md5":"d0ccadccc3f9170a6786eefc4b2b9b49","sha1":"6bba3c18a5ac754d6ef937d24aded6060ab31e67","sha256":"e33461e3fb9a631422d4df736dcadd78599dfafaa4bd3f6c4cef6564aa406f39","sha512":"2418c2b666b136236774e8a378703554de707943085f2ffd8d6946798c3b387dece579b64abda264ec66d7f0121e4562a58ba80356af6149163392a6f6f2abbe","ssdeep":"","tlshash":"b521e9d0bab08a35f254ec78623ac17126ca8c283123f4896530191cb46a5cc1d0dec0","first_seen":"2025-08-04T11:53:38.878116Z","last_seen":"2026-07-08T11:53:09.201219Z","times_seen":4,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":469,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/img/main/banner2.png","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.301Z","timestamp":1783511555301,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /img/main/banner2.png HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 28 Jun 2026 19:05:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a41707c-2451a\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":148762,"size_decoded":149081,"mime_type":"image/png","magic":"PNG image data, 368 x 429, 8-bit/color RGBA, non-interlaced","md5":"237a72c8c8a806cb2f041689867f036c","sha1":"20df92aba05267d79216cea128bad0fe1ebea3b6","sha256":"3cb787bda7ab26179d921611110ec0d7aff3f069a032eb0df40020ece4bc20c1","sha512":"66bbaddc073d9e593030eaef70cba3c5cf59692314c75cd4ccd54b56ac4de617b6ffba9fe9e38e1f24045b4cfd4d7d533eb2abe7cd450529370202b842fb8eaa","ssdeep":"3072:a64tZCYnsDwwLTQY61654em7HyOtPIytFAJqHztx8yA7vP:h4tg6sU5654ZSOFICOJqTtx8p","tlshash":"b4e312ff63f3b9012644b2c584b9785232ba0cfa432e63dbd2518f9193112e736de946","first_seen":"2026-04-26T20:42:51.876936Z","last_seen":"2026-07-08T11:53:09.202089Z","times_seen":2,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":39,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/uploads/2021/03/sprite-roulette-frame@2.2947c20b-256.png_hu_aab14020229eed77.webp","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.365Z","timestamp":1783511555365,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/uploads/2021/03/sprite-roulette-frame@2.2947c20b-256.png_hu_aab14020229eed77.webp HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1274\r\nLast-Modified: Sun, 28 Jun 2026 19:05:33 GMT\r\nConnection: keep-alive\r\nETag: \"6a41707d-4fa\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1274,"size_decoded":1514,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e1c0349f79b58e0d83e9c42136acb114","sha1":"51925c6f73ebbf99420732e8288a3260d24041f9","sha256":"b78fdc8b47f19e841c7f6e13303acaf1438872d4abcf5bae1491f0a278ca7455","sha512":"27b91f032a3707b306e6a954cdd899be08d3e6df9648baa15587144c7d1c3bf4f862f122220b914df3c466a5a6dc384dff39ef240c0b1830274d24368ecfdad7","ssdeep":"","tlshash":"4f21c54826a1dfd7947218782587f89429ab0802c5e280ff69997315627a8a03392ebe","first_seen":"2026-07-08T11:53:09.202993Z","last_seen":"2026-07-08T11:53:09.202993Z","times_seen":1,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":100,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/uploads/2021/03/sprite-poker-frame@2.a408d026-256.png_hu_6af198d75e088428.webp","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.368Z","timestamp":1783511555368,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/uploads/2021/03/sprite-poker-frame@2.a408d026-256.png_hu_6af198d75e088428.webp HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 988\r\nLast-Modified: Sun, 28 Jun 2026 19:05:33 GMT\r\nConnection: keep-alive\r\nETag: \"6a41707d-3dc\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":988,"size_decoded":1227,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1fa3236a594d57e49b9935a6a0be11f1","sha1":"ca01064a612f5b484128006da0efb753a930946d","sha256":"9c340d25a1d606faa355e55cf426e6eede8c2aa2ba31286f69184edf2bc172d0","sha512":"58fc4425acf854af41dfc543c2cb8e689ac85f15874c15137895ce2d244dba24f620344205ce732ae1dfbca968954cf255a97dc64a4b584dfad906ca2e158767","ssdeep":"","tlshash":"3411650585bb1a3a5862c228a98fab5595eb234e8b59464a1d1c46414c3ad5f3418cdd","first_seen":"2026-07-08T11:53:09.204139Z","last_seen":"2026-07-08T11:53:09.204139Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":132,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/images/banners/consigue-500-en-tu-primer-deposito-apurate-post-standard-scale-0_50x.png","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.226Z","timestamp":1783511555226,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/images/banners/consigue-500-en-tu-primer-deposito-apurate-post-standard-scale-0_50x.png HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 28 Jun 2026 19:05:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a41707c-15851b\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1410331,"size_decoded":1354036,"mime_type":"image/png","magic":"PNG image data, 1820 x 728, 8-bit/color RGB, non-interlaced","md5":"3c283d349f8a5d43599067a0b659571d","sha1":"01329b07d1988fa4bd5332677bdf59cd8afd97d1","sha256":"0b6ac83850a8ea2c84d7318b2b5ab60071459f8ec8664b3e8dc9a29356aaf488","sha512":"86e96ed49d9fac751acb699c2383ebe33886aef5998fafdcea99e6ded88e1008128036d1bc7ec9f80515ae8b45a32557f1ba49378a71f25919900236e6979375","ssdeep":"24576:O2h2KO5s7jT/97KNVQvvMV99IZ0K+7TF9c2OAIqpv4qCJ:LcKOs7jbJyVQ3M/ObqU2j4qCJ","tlshash":"34252363ef8194c6d18e63377a190f32b66b2cb19372c44583b18be4925e7906e7bf44","first_seen":"2026-04-26T20:42:52.017999Z","last_seen":"2026-07-08T11:53:09.205231Z","times_seen":2,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":89,"dns":0,"connect":0,"send":0,"wait":26,"receive":250,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/custom.css","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.194Z","timestamp":1783511555194,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /custom.css HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: text/css\r\nContent-Length: 822\r\nLast-Modified: Sun, 28 Jun 2026 19:05:33 GMT\r\nConnection: keep-alive\r\nETag: \"6a41707d-336\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":822,"size_decoded":1059,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"5aeb6d17b9a182510ff618055f0279b7","sha1":"2033aecca01896ba3d0d8c0dcdd9679a8ddfb6d1","sha256":"bf802a87c7639972af1ca5c426a47fb012b2bb1ff308dc6c9eae43cdcf238d8c","sha512":"f619668daf208deca4c8b7760cca4f8772941e6b4f1998d958a9c83ad5817f9cea4fc872cea92bbf06d780b664ffa3beec826cbfaf96e1e3057b52fc0067b9d8","ssdeep":"","tlshash":"80014803e3ead6b82526625853dba73c7fbcb34889121f7c1afc71788694be54006e14","first_seen":"2026-07-08T11:53:09.206173Z","last_seen":"2026-07-08T11:53:09.206173Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":23,"send":0,"wait":19,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/themes/js/slider.js","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.205Z","timestamp":1783511555205,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/themes/js/slider.js HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Sun, 28 Jun 2026 19:05:33 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a41707d-9a18\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39448,"size_decoded":15897,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (39448), with no line terminators","md5":"ed39d8967eb0bb2461e0503186f85b27","sha1":"799ad432edb0760cb6e9ac473558de53196e8817","sha256":"5210f748052b3fc0f98f06a33eb9b784bfcaa8a85505a98de85d2a593b4557ff","sha512":"e33325134acb2dedf4595c9484721200e26ad261e0efc511291654dada7f700f72fcdcf33b5b54fae25612f10035a5b50f145ceed592b7aa46d9e8891ecd57c2","ssdeep":"768:Qp1IkKocCzlqFhFNfrye7R9TAcZIaeQ26sZXnZhCv42GQoQ0A1SCzjZ:sIIRJUFNfry4VG626o/qkWVjZ","tlshash":"5303a65573443339c607b137ad8ecc0cb77a69986383d68d4a2cc9986879878d37ede8","first_seen":"2026-04-26T20:42:51.9096Z","last_seen":"2026-07-08T11:53:09.207134Z","times_seen":2,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":22,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/themes/js/script.js","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.207Z","timestamp":1783511555207,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/themes/js/script.js HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Sun, 28 Jun 2026 19:05:33 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a41707d-2962\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10594,"size_decoded":3631,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (7110)","md5":"59717f3890f60fb0cbd2c1a8b3d36e00","sha1":"dd99f7847da2b669b25d68aca30a8b017cb3f56d","sha256":"964fdb70a9327bd9e9a24e503580ea26d0819c1f4dab4448574f545367a987f0","sha512":"b7f4868d6bafa291aa41f389f9d02025bd61a9adaa45a313839119e7fd43accb4d13972d1e7bd7c3b523a41be54f0a783ddb35d8ef1aa83102396f7425615b59","ssdeep":"192:xX/3TGgnrJyBN4TauHbfONByvg7rA0HnPEW1hx0uGmSzIAIA7BnvPI5iOTiX:xXPTGKgH42u7fKByvsAQPrP16PHXgiUU","tlshash":"532213616265293602db6aaba2efd7d43b705097f4419850382ccc8f0f69dd251f2beb","first_seen":"2026-07-08T11:53:09.208315Z","last_seen":"2026-07-08T11:53:09.208315Z","times_seen":1,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":20,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/img/main/drive1.svg","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.223Z","timestamp":1783511555223,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /img/main/drive1.svg HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1410\r\nLast-Modified: Sun, 28 Jun 2026 19:05:32 GMT\r\nConnection: keep-alive\r\nETag: \"6a41707c-582\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1410,"size_decoded":1653,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1089d5c90d037787317b4cb6b936244f","sha1":"fb9425b4d90efebc632a66d74f287c4bd2d6be82","sha256":"34f6b1745b289105c33cadafea6e572474d0ecd3151ee19a27f501a6d920ccd9","sha512":"064dd772ce62448c2ae4edfb9911dc045dab8110c2e64720e8a2202bca8cb1f7b365da01ea3b03d05a28e1587ece54842820428b592aa7b9d4014f152922cd2b","ssdeep":"","tlshash":"e02163f177bcf20555062fa98b112de0926fb5f5ebed4202b20065197c5d8c3cfb0954","first_seen":"2026-04-26T20:42:51.884706Z","last_seen":"2026-07-08T11:53:09.209289Z","times_seen":3,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/img/main/radio.svg","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.240Z","timestamp":1783511555240,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /img/main/radio.svg HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 381\r\nLast-Modified: Sun, 28 Jun 2026 19:05:32 GMT\r\nConnection: keep-alive\r\nETag: \"6a41707c-17d\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":381,"size_decoded":623,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"79d97a2e0d3251758559ad81055d4ca4","sha1":"6b7c888b9a32392518549d46ff4b60f53c40ae6f","sha256":"7550827bc2aee6f1618bbc9ef87f32da94105e2225c3e23f7392938a7fb52523","sha512":"2c164a262787df3b559e4ff2c2b5a8f4903b4ec786542c5b633175ac0fb8a3e05ca9e8e4c0b5da6e5863417fed63186d9975fc8342eb15cb809f78dc7eb217ca","ssdeep":"","tlshash":"ade09238535c5c2c761aca0483277671536e21bab7095239dd7d2a31e243e4af83b9bc","first_seen":"2026-04-26T20:42:51.868831Z","last_seen":"2026-07-08T11:53:09.210172Z","times_seen":3,"resource_available":false,"data":null}},"time_used":688,"timings":{"blocked":509,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/img/flags/co.svg","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.359Z","timestamp":1783511555359,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /img/flags/co.svg HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 236\r\nLast-Modified: Sun, 28 Jun 2026 19:05:33 GMT\r\nConnection: keep-alive\r\nETag: \"6a41707d-ec\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":236,"size_decoded":477,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"46d9e2bf5a00835997db0d712e17c145","sha1":"39b3cb285108f1a7cfa53580b55160064ca4697e","sha256":"eb2bf06cf6be3563479291cecf37cb79d558af0a026ad7a61ed7cec0fdf04dbe","sha512":"d676077dfc24ad942d9d0b1533e76f6a40b2d11c211bf05354ab166959fed16d054042e7c9ebed8b365d74e59861f1e6e67b2ed18ce283302ed03bed185ed9b2","ssdeep":"","tlshash":"77d0a964f2a86608c7888b5e031879962347e0dc87450284ed8c398a204cadbec72afd","first_seen":"2026-07-08T11:53:09.223074Z","last_seen":"2026-07-08T11:53:09.223074Z","times_seen":1,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/uploads/2021/03/sprite-tvbet-frame@2.9cb2a1f6-256.png_hu_20644c9dfb507c4e.webp","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.364Z","timestamp":1783511555364,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/uploads/2021/03/sprite-tvbet-frame@2.9cb2a1f6-256.png_hu_20644c9dfb507c4e.webp HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1136\r\nLast-Modified: Sun, 28 Jun 2026 19:05:33 GMT\r\nConnection: keep-alive\r\nETag: \"6a41707d-470\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1136,"size_decoded":1376,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8423dad0e0de6735c7b4b5a19f1b7766","sha1":"178796e9ef08c1be990c7f5ed528b1df5e024fce","sha256":"f9a8af537a93cd70d0114a74c6b28f2156146ec3494e182c626d496e3642ec1a","sha512":"fdde2e1e7c50bfc183b49b43e96cd4381fac8c34cc427b2cb866e3ec9418332ae3f65fea87859332006b34d67f3be48747c943782b0a2ac43529ab0df500389a","ssdeep":"","tlshash":"4821a3f01b018b43dd5f280e533a1d2baf684e418a63da0997cc5c853109d126222aec","first_seen":"2026-07-08T11:53:09.224453Z","last_seen":"2026-07-08T11:53:09.224453Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/images/cas4.svg","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.245Z","timestamp":1783511555245,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/images/cas4.svg HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 4078\r\nLast-Modified: Sun, 28 Jun 2026 19:05:32 GMT\r\nConnection: keep-alive\r\nETag: \"6a41707c-fee\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4078,"size_decoded":4321,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"991f8869b6e56462ab025e8b0e5422c9","sha1":"3f6a18023863ba144441c69cf5f9309868c92c7f","sha256":"a279bf1081ff1db0582f959f88f78475da8dbb77c2b54071e7be9b92d2d81276","sha512":"e757cb0782d2cb8a0b7d4934e28deff95b4002d42200b63db38b879a260fa72e2e934006def3bb46caf22dcb729e565ee6b1cc19c81c6e196eb2231a84ef4cf0","ssdeep":"","tlshash":"a9813fdba7c832d0f10be7e4ed2a58b1652a60fe3fb6df610184ef69650405dc98cc25","first_seen":"2026-06-01T00:25:26.378106Z","last_seen":"2026-07-08T11:53:09.225298Z","times_seen":2,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":95,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/img/logo.svg","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.215Z","timestamp":1783511555215,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /img/logo.svg HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 2464\r\nLast-Modified: Sun, 28 Jun 2026 19:05:32 GMT\r\nConnection: keep-alive\r\nETag: \"6a41707c-9a0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2464,"size_decoded":2707,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f615c8250132a7a611ba664ce632852b","sha1":"47b75f2b0a6da35cd1084487dd7b842c410d86f6","sha256":"440b4a24857e4a58d9aa4b1ee32031c90f56bfdcd0086267794349c52ba1fccd","sha512":"e8d03791831c7792ba626746e4530610bd372f7949221abf398347582c1578c0905e695afae3a3fc2502dc554161e07b4cf5f2e9947412a955ba5329556e4d74","ssdeep":"","tlshash":"2e513fed27b768c8089cc6cffe4081726e5b90fe8e98c4d8c14847b960adc6d9d05dc9","first_seen":"2026-04-26T20:42:51.881495Z","last_seen":"2026-07-08T11:53:09.226207Z","times_seen":3,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/img/main/bonus-gif1.svg","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.219Z","timestamp":1783511555219,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /img/main/bonus-gif1.svg HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 2588\r\nLast-Modified: Sun, 28 Jun 2026 19:05:32 GMT\r\nConnection: keep-alive\r\nETag: \"6a41707c-a1c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2588,"size_decoded":2831,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e0ba0f3f0d4c50c4f054ee6d19466d14","sha1":"87e89a2f405f8ecc52e82e25b2dbc0aa2e7a6521","sha256":"9e57d7c6438d365e454efebd43b3d8356e8dc63fa413f2bfd9cd1127256a3971","sha512":"39a429f3a5ce503d5df1f61480fdca04d9cece5f1dbe6fd2e51c2faf6c07c00bdd7cc252d5c86335dad166c2f1760980ad159866f632c85743d731526d4f9029","ssdeep":"","tlshash":"695145f9561456d5cd478fe8d7177cf9b96678ffaf9a82c840a05425b7001e7c800ae4","first_seen":"2026-04-26T20:42:52.036926Z","last_seen":"2026-07-08T11:53:09.227044Z","times_seen":3,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/images/banners/forma-el-equipo-de-tus-suenos-con-el-nuevo-fantasy-sport-post-standard-scale-0_50x.png","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.232Z","timestamp":1783511555232,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/images/banners/forma-el-equipo-de-tus-suenos-con-el-nuevo-fantasy-sport-post-standard-scale-0_50x.png HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 28 Jun 2026 19:05:33 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a41707d-1d5b75\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1923957,"size_decoded":1882398,"mime_type":"image/png","magic":"PNG image data, 1820 x 719, 8-bit/color RGB, non-interlaced","md5":"cf757d2ef6be4a9bf932681b40c3ecfa","sha1":"0e99f30c97eca9f0304f3f9b2e3150e40d277c24","sha256":"6bcab4acd1749de0d0aa87b14563ad85826d37ece0c36e40c5e87188ff8e702f","sha512":"6abbf0ba6b2a74c9b48524c7ee44fb25a4712e117d1f551d46e58dc8c55a71bb8f0ccd487ac68290e501d74e7e352369efeed4a81627899c1e07ae006e9f68dd","ssdeep":"24576:lj6ndYIJFjqK4Jq8oB7DnkBOg+dRSxqeR5lq:UX6JTe76M3Sx5lq","tlshash":"c6252363f942b093c41c1ab695a34e295aa34dbb73720e38971565f0f8beac04f15fe4","first_seen":"2026-04-26T20:42:52.076816Z","last_seen":"2026-07-08T11:53:09.228155Z","times_seen":2,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":363,"dns":0,"connect":0,"send":0,"wait":143,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/images/cas1.svg","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.241Z","timestamp":1783511555241,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/images/cas1.svg HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 4076\r\nLast-Modified: Sun, 28 Jun 2026 19:05:32 GMT\r\nConnection: keep-alive\r\nETag: \"6a41707c-fec\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4076,"size_decoded":4319,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a7961847dc27d06dbb7c00025d5c82f3","sha1":"a98917ca3dfbf6af91ffdc7898fd78bfea5102fd","sha256":"338cd6f41d41fe4b399c9cb3d3d96db9660aea06ddbcb09e8e73cfeab87b54c5","sha512":"6550a9db4606109a1c6a3ddb6d79161cd1659a03476bba9202bb6da42e63c569f5efc45ceba4937c16608484455bf658a7bcaceb8f1de46bb2087f4e391619a6","ssdeep":"","tlshash":"6d8141e7478e72d0f61bebd8ed2a88b1325a24fa3ba1df810294eb25351809d8d4cc50","first_seen":"2026-06-01T00:25:26.408794Z","last_seen":"2026-07-08T11:53:09.229176Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":4,"dns":0,"connect":19,"send":0,"wait":19,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/images/cas2.svg","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.243Z","timestamp":1783511555243,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/images/cas2.svg HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 7770\r\nLast-Modified: Sun, 28 Jun 2026 19:05:32 GMT\r\nConnection: keep-alive\r\nETag: \"6a41707c-1e5a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7770,"size_decoded":8014,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"828f0716987fcbd2768b0271350e7e3b","sha1":"314719be38d78412f99c817b484aeddee263df6d","sha256":"ef76f739c18b1babed0800228467065c7868ed85a5f6d726257e1b38c77c9867","sha512":"2f2038323331699fa3f8a3c5479657543e0c1b6c9f6b09d1022ebc21ddafb998240f13d006971ee528bb25470083e836bd825922310f1fa4994c41a2f0a72fc9","ssdeep":"192:LosN8ERDABQF9CXJGA9c8VY8kEG+DfCxvlCbi4b/:Lok8E6B1XJGAmB8pGeCsi2/","tlshash":"57f162e297d9a2e0d407b7d0ec0689b0785f34fbbf66dbd68255ad90ab101dd898cc90","first_seen":"2026-06-01T00:25:26.345656Z","last_seen":"2026-07-08T11:53:09.230049Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/images/aviator.svg","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.251Z","timestamp":1783511555251,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/images/aviator.svg HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 4793\r\nLast-Modified: Sun, 28 Jun 2026 19:05:32 GMT\r\nConnection: keep-alive\r\nETag: \"6a41707c-12b9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4793,"size_decoded":5037,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2745e88dac736b8bfd2f38c543f63d8b","sha1":"de76182ec1915ada998550b5a5e2e703a23a4c0a","sha256":"5d2ba623c2c1e7066e6d8ac902fef3000c92ae768df6e2f32c3a168467471a7b","sha512":"e343240b2b0274c47e6d0cb5fe88104f61e9461ebc2dbb7014e49129e12d57c537dae420dcaaef9886bd2242325aa81d10b54621d4bbc593e42c93c0895bcc95","ssdeep":"96:JfL9yThlLj9GWETc4vSiYK0nv/5ANzyOJe4iDiMPTzDT:JDITnf9yvSiQONzPItnrT","tlshash":"52a1a8df069817f5f48ba3a8ce17c4d5522bacb13f739209d9a40a4dfbab89c441e584","first_seen":"2026-04-26T20:42:52.009719Z","last_seen":"2026-07-08T11:53:09.231498Z","times_seen":2,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":362,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/uploads/2021/03/sprite-dice-frame@2.f058dbc1-256.png_hu_9d30607bd16b9cb2.webp","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.367Z","timestamp":1783511555367,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/uploads/2021/03/sprite-dice-frame@2.f058dbc1-256.png_hu_9d30607bd16b9cb2.webp HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1126\r\nLast-Modified: Sun, 28 Jun 2026 19:05:33 GMT\r\nConnection: keep-alive\r\nETag: \"6a41707d-466\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1126,"size_decoded":1366,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0be03a11e16b4fe02ee00edce2cd22f3","sha1":"688988c35f7de05f15ce0a2315e782f931d2ace4","sha256":"bb4149b647cfdee42a8fed8682dce6463d948d1744b8ce0af9ad8cda9b87a195","sha512":"540e5f96c727e1a4f6ae01cab1ed2e06024faf64290fe1925eaafc34b3fcfde8945177f384f474f135317cc2e0978310d126718ac6d07d1ad9d66d1019d3e4bc","ssdeep":"","tlshash":"84210a1ed10575de97c0e3b88343232a1bc41613a2818e46526ef30b38ccae6d804685","first_seen":"2026-07-08T11:53:09.232506Z","last_seen":"2026-07-08T11:53:09.232506Z","times_seen":1,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":113,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/themes/css/main.css","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.192Z","timestamp":1783511555192,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/themes/css/main.css HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sun, 28 Jun 2026 19:05:33 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a41707d-1cd3f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":118079,"size_decoded":25278,"mime_type":"text/css","magic":"ASCII text","md5":"dae04a7a8fee1601a40e4fa2ed2f082d","sha1":"5bede59b4899335ed54d46760ac46a68afbdfc06","sha256":"a2a24145d50f827d56385811978359354811e7e88c0edc701ad978d523d975af","sha512":"a0546f79a357947f279dd4758eb69af341dc5c6f13d097552f32e524823433f19203824aa1c9afd6c8718e6780bf4b39b85a1886556f7d19884081c871ca643f","ssdeep":"3072:AU6HEbuD73vmav6sVLj9yS9sK2cjKlJ2Inu1LlgZMin5GFIEodbjYB6ymLCj:AUYEbuD73vmavBj9yesZVlJ2Inu1KZMr","tlshash":"3ab367375b10654ca11bd8585f681b658a3a8467af0f4eef98923d6cc3ce68405f3ece","first_seen":"2026-07-08T11:53:09.233452Z","last_seen":"2026-07-08T11:53:09.233452Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/img/main/arrow.svg","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.218Z","timestamp":1783511555218,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /img/main/arrow.svg HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 614\r\nLast-Modified: Sun, 28 Jun 2026 19:05:32 GMT\r\nConnection: keep-alive\r\nETag: \"6a41707c-266\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":614,"size_decoded":856,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5c31b3232fb4bcf52f6853453c26999f","sha1":"865dafcaebed0ba737f39e6a2ed0fc6475876b2d","sha256":"600b58e215a79ec652ef6ecc2e1e6a0507a1430501b657e22b1a05a3f8d14b91","sha512":"793d78f5f2bf201af6ffab4adc7a1c82a44956ac7303e2cbc3a82caaced2af076c0c9e15a21ac9b037953fab45387d5f1bd33bf06c7c106dabd76a5f423cf9f7","ssdeep":"","tlshash":"61f07df1415c99848947dfa059f93c23e59990f1cac093e0c555fa6d5d555c39f02c70","first_seen":"2026-04-26T20:42:51.96828Z","last_seen":"2026-07-08T11:53:09.23471Z","times_seen":3,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/img/main/bonus-gif2.png","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.221Z","timestamp":1783511555221,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /img/main/bonus-gif2.png HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 28 Jun 2026 19:05:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a41707c-5c9\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1481,"size_decoded":1758,"mime_type":"image/png","magic":"PNG image data, 33 x 36, 8-bit/color RGBA, non-interlaced","md5":"30dd092ff713cce1711dd1774e91d198","sha1":"5c7fb12cd3626808bd71f9a66bfee1072ca14186","sha256":"c9cbd03645ffdd3801a0df5c744ad859515a81df932e910b41eab0dca623451c","sha512":"c43f9d181d5961375ac61603ff36608d0e60a616ae08f9d71de2c669a9aa7796c98355c81f59ef0d7183868fded75864c22874de1d3339741efc07f7c958712a","ssdeep":"","tlshash":"aa31c9d37d021d188e5822c89017bcf0e35d95692c93f3b6ba636bbb452f03cc627191","first_seen":"2026-04-26T20:42:51.845009Z","last_seen":"2026-07-08T11:53:09.235977Z","times_seen":3,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/images/juegos/coinflip_hu_20975fada91a7e56.webp","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.371Z","timestamp":1783511555371,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/images/juegos/coinflip_hu_20975fada91a7e56.webp HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 21906\r\nLast-Modified: Sun, 28 Jun 2026 19:05:33 GMT\r\nConnection: keep-alive\r\nETag: \"6a41707d-5592\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21906,"size_decoded":22148,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 900x669, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6fb7b0b023a1b9087e79908caac7ae37","sha1":"8dd0fa4652f51967f7a4ba3820af69903de7034e","sha256":"0fa2d82aa3ce0954b9c96487f80b57cc713e50a42232a94debdded282d454251","sha512":"8f2dca7f43aa39810162d78e15ec35b638b41ae771b33036eaa61bac894c17c030419bb40b48b37c54e0ce14bf475f9d8b6cce45dfbe0633520322efdfe06e0a","ssdeep":"384:Q5Rcn7T0M/ENzBSGTDmJ5vbsGlsVh8Yl4ym6vUz//EG4PmqQcZO0:QYvKHnDSSs48YlM6ct4uqi0","tlshash":"bda2d16fe90ccdcc65b55d9dbb1bad110d8c87e071b47266a98c04d448a6cbf08ede8e","first_seen":"2026-07-08T11:53:09.236903Z","last_seen":"2026-07-08T11:53:09.236903Z","times_seen":1,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":149,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/images/juegos/crash_hu_22e39e2aee94bc90.webp","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.372Z","timestamp":1783511555372,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/images/juegos/crash_hu_22e39e2aee94bc90.webp HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2856\r\nLast-Modified: Sun, 28 Jun 2026 19:05:33 GMT\r\nConnection: keep-alive\r\nETag: \"6a41707d-b28\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2856,"size_decoded":3096,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x229, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5b01d43bc7985c19ef6bc4e6956fba82","sha1":"cdb94413a95a1bee7633b5ee35b4329e8186f125","sha256":"45aac584e57e0ca41c428626c719e2f5d6e5931d2924c88b49bca344ac4c79bc","sha512":"4829ca71fc40b35088ffee4c43af18aad753a51c3b703482aa749af59fce4496a7a1780ffc523d6347c02852a6e7f8d3eb3fbdbdefe05e08aad4b3e1a512c40e","ssdeep":"","tlshash":"48514dd2a141b520f60790607afd82153028d5f7bca8452eca5205dacde578cd3758e0","first_seen":"2026-07-08T11:53:09.238165Z","last_seen":"2026-07-08T11:53:09.238165Z","times_seen":1,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":169,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/images/juegos/rocket-queen_hu_190d8ed00f747a2a.webp","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.378Z","timestamp":1783511555378,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/images/juegos/rocket-queen_hu_190d8ed00f747a2a.webp HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 13710\r\nLast-Modified: Sun, 28 Jun 2026 19:05:33 GMT\r\nConnection: keep-alive\r\nETag: \"6a41707d-358e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13710,"size_decoded":13952,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 419x314, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"308d553813620c86f96453236ad3aa86","sha1":"b4b9b425129cd28b29b1f4382cf72c551e8fd91d","sha256":"bda63b177638e0ed1153baff1e876e68fdf830783a44879f1979a5736a232dff","sha512":"295fbe0803d6d946383836df68accd96c608af2c8aa3f7242defac5649cfbb474e2ddfb4ceafb6f19eb785b67f01e050ef8d68b224724ec761990daf5774f1b2","ssdeep":"384:h5sf8IbiaU/C+/sBlQILYNQEiw4tH9E6RjR9CHoB2EFUrLfe/E1:hoQxvsBzYN0H9lRPK3vrLG/2","tlshash":"1a52c0e620ab08ff034d26988abf5f0b81c483dd2ee9235727e115c5835994965b67ca","first_seen":"2026-07-08T11:53:09.238985Z","last_seen":"2026-07-08T11:53:09.238985Z","times_seen":1,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":176,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wincolombia-co.com/wp-content/images/banners/lucky-drive-1win-sorteamos-2-convertibles-y-premios-de-apple-post-standard-scale-0_50x.png","fqdn":"1wincolombia-co.com","domain":"1wincolombia-co.com","tld":"com"},"ip":{"addr":"188.137.250.207","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1wincolombia-co.com/","date":"2026-07-08T11:52:35.234Z","timestamp":1783511555234,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wincolombia-co.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 11:50:03 GMT","end":"Sat, 26 Sep 2026 11:50:02 GMT"},"fingerprint":{"sha1":"00:82:87:7E:DA:15:33:B6:03:3D:B1:6A:27:5A:AF:0C:A9:A0:A6:D7","sha256":"3B:C7:AF:9B:9F:37:19:ED:12:34:FE:0D:D9:8B:2A:30:E8:8B:0A:4C:C8:5D:A8:0C:F1:C5:60:BF:55:99:7F:91"}}},"request":{"raw":"GET /wp-content/images/banners/lucky-drive-1win-sorteamos-2-convertibles-y-premios-de-apple-post-standard-scale-0_50x.png HTTP/1.1\r\nHost: 1wincolombia-co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wincolombia-co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Jul 2026 11:52:35 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 28 Jun 2026 19:05:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a41707c-15ce70\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1429104,"size_decoded":1349204,"mime_type":"image/png","magic":"PNG image data, 1820 x 728, 8-bit/color RGB, non-interlaced","md5":"8f1a259d5d9d48df8731566917a8d201","sha1":"3d89e0f9b2fa323f7686f31e60b940dd83757724","sha256":"c2a1af28d9eed65d60101cf524ac9d51bed1a59507a0774b52b2eb35a1ff03d1","sha512":"4cd6c547e767a5a02aa040bafc97180262f101c29430fba55413120c332f9e0b5f9c81855027233f0e7017b1098ad2202b6b21e9d815ce0edc51dbe9c4f55455","ssdeep":"24576:redEEbDlbAZNZPneCkrdhQW7lkCnHQRzGTSmlU4oserNjkfpRd:lEbDlbAZNZfeCkhpGnz4SmVt2NjCv","tlshash":"852533f3fe8e4e14d1da363bc46f8f4432518a699e7a0320519929f291eeb047dede50","first_seen":"2026-04-26T20:42:51.985657Z","last_seen":"2026-07-08T11:53:09.240002Z","times_seen":2,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":5,"dns":0,"connect":20,"send":0,"wait":44,"receive":259,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"1wincolombia-co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}