Security Scan: WinnerNet welcomes the BIGGEST winners around

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7d6d05c4-3030-4304-976d-c7ca1efe5bb6 Domain and IP registration (RDAP)/api/v1/rdap/7d6d05c4-3030-4304-976d-c7ca1efe5bb6 Certificate Transparency/api/v1/ct/winnernet.net How often this domain was scanned/api/v1/domain/stats/winnernet.net Scan history for this domain/api/v1/domain/history/winnernet.net?limit=15

This website contacted 25 IPs in 3 countries across 24 domains to perform 55 HTTP transactions. The main domain is winnernet.net and was registered 6 years ago.

Submitted URL: https://winnernet.net

Effective URL:

https://www.winnernet.net/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

Compromised aging casino blog now serving ClearFake/EtherHiding malware: 19 CRITICAL IDS EtherHiding exfil alerts, blockchain RPC C2, obfuscated JS, and a fake-CAPTCHA trick pushing PowerShell execution.

Risk Factors (5)

Serves ClearFake/EtherHiding malware via injected blockchain-based exfiltration

ClickFix-style fake CAPTCHA luring users to paste and execute commands in PowerShell

Heavy obfuscation (eval/Function/encoding) on a simple content page

Blockchain RPC connections used as covert C2 channel

Multiple independent threat-intel feeds flag associated malware infrastructure

Domain age information unavailable

Details

Page Title

WinnerNet welcomes the BIGGEST winners around! - Welcome to winner net

Scan Type

public

Favicon Hash

MMH3: 530492348

MD5: dcab89b8e04bf53fcd7f6a44a8cb4fae

Domain Name Analysis

The domain name 'winnernet.net' uses the network infrastructure generic top-level domain (.net) while skipping any subdomain. The core label 'winnernet' covers 9 characters with 3 vowels and six consonants. Tokenizing the label suggests 2 words: winner, net. Median word length comes out to 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.69s

Total Load Time

1.3 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:3,742 chars

Detector Agreement:100%

Website Classification

Primary Category

gambling betting99% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

gambling betting

99%

entertainment media

97%

cryptocurrency blockchain

54%

corporate

35%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	167.99.206.20	Slough, England, United Kingdom	AS14061DigitalOcean, LLC
2	142.251.14.95Google · CDN	United States	AS15169Google LLC
2	104.18.10.59Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	192.178.183.94Google · CDN	United States	AS15169Google LLC
2	15.197.152.159Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	34.111.175.102Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
2	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.67.142.245Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	15.197.198.189Aws · CLOUD	United States	AS16509Amazon.com, Inc.
55	25	-	-