Report - 1wfwna.life/v3/fortune-tiger

Report Overview

Submitted URL
1wfwna.life/v3/fortune-tiger
IP
190.115.24.78
ASN
#59692 IQWeb FZ-LLC
Submitted
2024-04-28 14:31:16
Access
public
Website Title
1win
Final URL
1wfwna.life/v3/fortune-tiger
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
34

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.googletagmanager.com	75	2011-11-11	2013-05-22	2024-04-28	1.8 kB	526 kB	142.250.74.168
1wfwna.life	unknown	unknown	No data	No data	9.6 kB	938 kB	190.115.24.78
1win.direct	unknown	2022-08-16	2022-08-16	2024-04-10	1.2 kB	468 B	134.122.54.186
www.google.no	25607	2001-02-26	2016-04-05	2024-04-28	586 B	578 B	142.250.74.163
region1.analytics.google.com	unknown	1997-09-15	2022-03-17	2024-04-28	814 B	442 B	216.239.34.36

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-28	medium	1wfwna.life	Sinkholed
2024-04-28	medium	1wfwna.life	Sinkholed
2024-04-28	medium	1wfwna.life	Sinkholed
2024-04-28	medium	1wfwna.life	Sinkholed
2024-04-28	medium	1wfwna.life	Sinkholed
2024-04-28	medium	1wfwna.life	Sinkholed
2024-04-28	medium	1wfwna.life	Sinkholed
2024-04-28	medium	1wfwna.life	Sinkholed
2024-04-28	medium	1wfwna.life	Sinkholed
2024-04-28	medium	1wfwna.life	Sinkholed
2024-04-28	medium	1wfwna.life	Sinkholed
2024-04-28	medium	1wfwna.life	Sinkholed
2024-04-28	medium	1wfwna.life	Sinkholed
2024-04-28	medium	1wfwna.life	Sinkholed
2024-04-28	medium	1wfwna.life	Sinkholed
2024-04-28	medium	1wfwna.life	Sinkholed
2024-04-28	medium	1wfwna.life	Sinkholed

ThreatFox

No alerts detected

JavaScript (19)

	URL	Size	First Seen	Last Seen
	unknown	409 B	2023-03-10	2024-05-12
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 00:21:10 Last Seen2024-05-12 12:19:03 Times Seen1458 Hash efc54365d1ba6c4fb4bdf7ea1996bdbd 9f89f3485cd56eac910d9c0d6f9bd3b201074e24 da89215c040a91b80faf28d6030c58dab9d599794ef9bd1feba0fb01c621cf40 Loading...

	unknown	347 B	2023-10-25	2024-04-28
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-25 01:40:40 Last Seen2024-04-28 16:31:23 Times Seen17 Hash 9deb059b6ae4f34fd3f490eeeac2ef26 c05f2c097231c90ac2657223d9b4571cf9a79c1a 4891c033723a681fcaecbc048ba4b6406b02795661b043e6067cab393af5d5f3 Loading...

	unknown	319 B	2024-04-28	2024-04-28
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-28 16:31:23 Last Seen2024-04-28 16:31:23 Times Seen1 Hash fd23407ffbd34558835636c0ff58be45 3d47dc43f1b595254e19084f5df99572172e8483 be3a0906ee9acc263a2e0dc34c734489e2a0a61bcdc3a83183bb653eb520b5ae Loading...

	unknown	351 B	2023-12-31	2024-04-28
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-31 03:20:18 Last Seen2024-04-28 16:31:23 Times Seen5 Hash 6ff6edb064f8ada0525ecac194775d39 a1283e20661ecb6b1983fd139773dc4a2691b013 01140535ab177ab438bd2c02f0031bab32e8fa9834dc5c6febb1f52ebdec9cbf Loading...

	unknown	320 B	2024-04-28	2024-04-28
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-28 16:31:24 Last Seen2024-04-28 16:31:24 Times Seen1 Hash 4f979169523702063c199361f1f223c2 d501a66b69868e92ae42171dc879aecd80fa6c7d 09c0f9ae6064f8e6ebce96ec4fa04f65817dc4702f43def39af3b30f02bc329e Loading...

	unknown	320 B	2024-04-28	2024-04-28
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-28 16:31:24 Last Seen2024-04-28 16:31:24 Times Seen1 Hash 62061c12b92cb9c50bf108154020f182 b7b24e968d10d31760f6acd80689d9308101c947 f795e9fb997ccd6b1ca802f7137c4963c044333d361dd67ee613e6144b222b0d Loading...

	www.googletagmanager.com/gtag/js?id=G-548949LWLW&l=dataLayer&cx=c	258 kB	2024-04-28	2024-04-29
Pretty URL www.googletagmanager.com/gtag/js?id=G-548949LWLW&l=dataLayer&cx=c IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-28 16:31:24 Last Seen2024-04-29 05:08:37 Times Seen4 Hash 11c922b4c6d4e11d48d2ceefa2aeb0fc dbc5cc9cd5db4dbca9a38fa1006d87f65f03c31a 3631867175b4e34c7202675d3a80d2501883b7f61a5290c5b920b2abc527538f Loading...

	unknown	351 B	2023-10-24	2024-04-28
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-24 17:39:51 Last Seen2024-04-28 16:31:24 Times Seen32 Hash 35d0e99d5a4c9f01eb1948bca74d188f 067947835434e24a47c6e315e78c714961dc867f f6b4982e2b706b857c752e0c8a6538500f53e4a1fabe5b99c24c4cdd2aad8b04 Loading...

	1wfwna.life/v3/fortune-tiger	3.0 kB	2023-10-24	2024-05-11
Pretty URL 1wfwna.life/v3/fortune-tiger IP 190.115.24.78 ASN #59692 IQWeb FZ-LLC Introduced by scriptElement Embedded in HTML true Observations First Seen2023-10-24 17:39:51 Last Seen2024-05-11 11:30:26 Times Seen131 Hash b69442c8805fbe9fb0be0d9671d0acf7 0dbe79cf79574b95076c0b4eade7fc9314074b67 45ea98a4007c992d67da469da7d5f5d0ae34af0c390bce75873c0360215ce44c Loading...

	www.googletagmanager.com/gtm.js?id=GTM-KGKQDC7	363 kB	2024-04-28	2024-04-28
Pretty URL www.googletagmanager.com/gtm.js?id=GTM-KGKQDC7 IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-28 16:31:24 Last Seen2024-04-28 16:31:24 Times Seen2 Hash 41b3bf62edd298618f5bdde96baf774f 5f35f45a363679b43ad2cee8418f1cc65969bd32 3d26965b6d4487f5d17a4ecfefd74d0ab83ccb898bb0c454c2ae5c9bdb13e9cd Loading...

	unknown	468 B	2023-05-19	2024-05-11
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-19 10:04:18 Last Seen2024-05-11 11:30:27 Times Seen170 Hash f4aa10577822d528d7d95fbb8ce8d1f1 d9f3ad1a724192488e547dc9a46784badde74113 ffc6fc82ac2dd2be4163a30990ce2952502dfa4b88e7e52eb65ea20c9796929a Loading...

	unknown	287 B	2023-09-10	2024-05-07
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-10 00:55:10 Last Seen2024-05-07 19:40:36 Times Seen161 Hash 66822daf496a288ba191a460bf51c7f1 453c95b3b2b2ce229bd4d80c2d7970dc2708a6f3 75aec4091c9860658b914b7d7d07f6ed242a14102ea73dbaa236195fc8f2ae70 Loading...

	unknown	199 B	2024-04-26	2024-05-03
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-26 23:59:52 Last Seen2024-05-03 14:08:48 Times Seen33 Hash ba52d9e723ac504e606eb9ddc001c35c a61513d6aa8e8f89a54a277f922cea1bd52e94f9 cd871219d6c4b52e4cb66dcc949cb0c8ef46b4ab995f011c33e49ea130a8d067 Loading...

	www.googletagmanager.com/gtag/destination?id=DC-12688802&l=dataLayer&cx=c	200 kB	2024-04-28	2024-04-28
Pretty URL www.googletagmanager.com/gtag/destination?id=DC-12688802&l=dataLayer&cx=c IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-28 16:31:24 Last Seen2024-04-28 16:31:24 Times Seen2 Hash 3e9576bb98e1c8f858420acf65a9bfdf cd3b6e9dbc150e17252973d8fdfaae7f0976255f 3669bff32f4a4276fab87762b7b0b400de21939803ae8a02459a914591293f41 Loading...

	1wfwna.life/v3/fortune-tiger/assets/index-3567fcd6.js	154 kB	2024-04-14	2024-04-28
Pretty URL 1wfwna.life/v3/fortune-tiger/assets/index-3567fcd6.js IP 190.115.24.78 ASN #59692 IQWeb FZ-LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-14 23:42:55 Last Seen2024-04-28 16:31:24 Times Seen3 Hash a17c7dda6f24baa2dec06aa44ec37b18 fb95d942573ea56c6386056e3bc953f16b1904f0 5cf961c650827669447f5c99a7f526658d05602b9e7ec3f4e427504becd638bc Loading...

	www.googletagmanager.com/gtag/js?id=AW-16482547739&l=dataLayer&cx=c	249 kB	2024-04-28	2024-04-28
Pretty URL www.googletagmanager.com/gtag/js?id=AW-16482547739&l=dataLayer&cx=c IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-28 16:31:24 Last Seen2024-04-28 16:31:24 Times Seen2 Hash a58708cceb9b7147266d809cb62b01e8 387a7a743155e813710375dc28cc7cf21e6e1970 124a5df4d0941a1ebcb14d00a281283282b8b74e6bd46486e1c3dd2b67ecba1a Loading...

	1wfwna.life/v3/fortune-tiger	500 B	2023-10-24	2024-05-11
Pretty URL 1wfwna.life/v3/fortune-tiger IP 190.115.24.78 ASN #59692 IQWeb FZ-LLC Introduced by scriptElement Embedded in HTML true Observations First Seen2023-10-24 17:39:51 Last Seen2024-05-11 11:30:27 Times Seen131 Hash 4231b98643503d9e0e3074b85536dae7 4b3496ff695be3ce156b4f525e7ce3023bbb5a04 701b6e1c448f28dff6dd03ef945ca8dd1b3c4cb8f677ba62b86233763e4cee35 Loading...

	unknown	421 B	2023-03-12	2024-05-12
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 20:22:06 Last Seen2024-05-12 12:19:02 Times Seen1458 Hash dc37ec839376756d26f9c8925e173ac0 c7aff54b91a363e452e3338b3cf8441b3a82cbbb f139f19f43bcda296441234e4cb82550d94bde81758de7cf37bfe55df1c96717 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 0bf001dcdb310567c52654a935c4f92a	80 B	2023-03-26	2024-05-12
Pretty Observations First Seen2023-03-26 10:50:54 Last Seen2024-05-12 12:19:03 Times Seen791 Hash 0bf001dcdb310567c52654a935c4f92a fddc3d16a5af259bcfa6b87a02bde4e3bcdc7109 a3b73a3b1e36d2bfad6fe9530c9c943f28a99cbe84d0674b555d14c3ae26c780 Loading...

HTTP Transactions (25)

URL IP Response Size

www.googletagmanager.com/gtm.js?id=GTM-KGKQDC7

142.250.74.168

200 OK

106 kB

URL GET HTTP/2
www.googletagmanager.com/gtm.js?id=GTM-KGKQDC7
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://1wfwna.life/v3/fortune-tiger
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintFC:B1:16:E0:D8:F3:2B:F3:AB:33:E5:E1:23:57:F4:48:66:FD:4D:52
ValidityMon, 08 Apr 2024 06:34:55 GMT - Mon, 01 Jul 2024 06:34:54 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (50345)
Size
106 kB (105637 bytes)
Hash
41b3bf62edd298618f5bdde96baf774f
5f35f45a363679b43ad2cee8418f1cc65969bd32
3d26965b6d4487f5d17a4ecfefd74d0ab83ccb898bb0c454c2ae5c9bdb13e9cd

HTTP Headers

GET /gtm.js?id=GTM-KGKQDC7 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wfwna.life/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 28 Apr 2024 14:30:50 GMT
expires: Sun, 28 Apr 2024 14:30:50 GMT
cache-control: private, max-age=900
last-modified: Sun, 28 Apr 2024 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 105637
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/destination?id=DC-12688802&l=dataLayer&cx=c

142.250.74.168

200 OK

73 kB

URL GET HTTP/3
www.googletagmanager.com/gtag/destination?id=DC-12688802&l=dataLayer&cx=c
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://1wfwna.life/v3/fortune-tiger
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintFC:B1:16:E0:D8:F3:2B:F3:AB:33:E5:E1:23:57:F4:48:66:FD:4D:52
ValidityMon, 08 Apr 2024 06:34:55 GMT - Mon, 01 Jul 2024 06:34:54 GMT

File type
JavaScript source, ASCII text, with very long lines (1763)
Size
73 kB (72846 bytes)
Hash
3e9576bb98e1c8f858420acf65a9bfdf
cd3b6e9dbc150e17252973d8fdfaae7f0976255f
3669bff32f4a4276fab87762b7b0b400de21939803ae8a02459a914591293f41

HTTP Headers

GET /gtag/destination?id=DC-12688802&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wfwna.life/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 28 Apr 2024 14:30:50 GMT
expires: Sun, 28 Apr 2024 14:30:50 GMT
cache-control: private, max-age=900
last-modified: Sun, 28 Apr 2024 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 72846
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

1wfwna.life/v3/fortune-tiger/assets/tiger-logo-768-657a4ec6.avif

190.115.24.78

200 OK

95 kB

URL GET HTTP/2
1wfwna.life/v3/fortune-tiger/assets/tiger-logo-768-657a4ec6.avif
IP
190.115.24.78:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://1wfwna.life/v3/fortune-tiger
Certificate
IssuerLet's Encrypt
Subject1wfwna.life
Fingerprint17:34:42:5E:B0:F3:A5:70:C7:67:6F:7F:34:FE:4E:00:89:6E:E5:00
ValidityTue, 16 Apr 2024 12:17:59 GMT - Mon, 15 Jul 2024 12:17:58 GMT

File type
gzip compressed data
Size
95 kB (94664 bytes)
Hash
660f255f8dba401226093c87d1be5f7f
29811e253e77ec0db82ee58e4e89e6a04a1499c1
5d469575d4c3b069237e727c62b0f4b0bc2954be79b0e015a1e2c98339e49fe7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /v3/fortune-tiger/assets/tiger-logo-768-657a4ec6.avif HTTP/1.1
Host: 1wfwna.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wfwna.life/v3/fortune-tiger
Cookie: __ddg1_=B2D2WBTnO2pvCHAReR1b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: ddos-guard
date: Sun, 28 Apr 2024 14:30:50 GMT
content-type: image/avif
accept-ranges: bytes
content-encoding: gzip
etag: "65f1baf0-107f"
last-modified: Wed, 13 Mar 2024 14:40:48 GMT
vary: Accept-Encoding
access-control-allow-origin: *
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=AW-16482547739&l=dataLayer&cx=c

142.250.74.168

200 OK

86 kB

URL GET HTTP/3
www.googletagmanager.com/gtag/js?id=AW-16482547739&l=dataLayer&cx=c
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://1wfwna.life/v3/fortune-tiger
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintFC:B1:16:E0:D8:F3:2B:F3:AB:33:E5:E1:23:57:F4:48:66:FD:4D:52
ValidityMon, 08 Apr 2024 06:34:55 GMT - Mon, 01 Jul 2024 06:34:54 GMT

File type
JavaScript source, ASCII text, with very long lines (4179)
Size
86 kB (86544 bytes)
Hash
a58708cceb9b7147266d809cb62b01e8
387a7a743155e813710375dc28cc7cf21e6e1970
124a5df4d0941a1ebcb14d00a281283282b8b74e6bd46486e1c3dd2b67ecba1a

HTTP Headers

GET /gtag/js?id=AW-16482547739&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wfwna.life/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 28 Apr 2024 14:30:50 GMT
expires: Sun, 28 Apr 2024 14:30:50 GMT
cache-control: private, max-age=900
last-modified: Sun, 28 Apr 2024 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 86544
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

1wfwna.life/v3/fortune-tiger/assets/Inter-Medium-aaa02aa0.woff2

190.115.24.78

200 OK

111 kB

URL GET HTTP/2
1wfwna.life/v3/fortune-tiger/assets/Inter-Medium-aaa02aa0.woff2
IP
190.115.24.78:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://1wfwna.life/v3/fortune-tiger
Certificate
IssuerLet's Encrypt
Subject1wfwna.life
Fingerprint17:34:42:5E:B0:F3:A5:70:C7:67:6F:7F:34:FE:4E:00:89:6E:E5:00
ValidityTue, 16 Apr 2024 12:17:59 GMT - Mon, 15 Jul 2024 12:17:58 GMT

File type
Web Open Font Format (Version 2), TrueType, length 111192, version 3.1245
Size
111 kB (111192 bytes)
Hash
823f35a845a9dfbf9800c8a37b635269
c3064c7e34213e30493c6a972f3d66f4d145885b
aaa02aa09b0bc5bc5c57095aaa6e15bea07480136e9aab705f69886daa213325

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /v3/fortune-tiger/assets/Inter-Medium-aaa02aa0.woff2 HTTP/1.1
Host: 1wfwna.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://1wfwna.life/v3/fortune-tiger/assets/index-b8f437e1.css
Cookie: __ddg1_=B2D2WBTnO2pvCHAReR1b; _gcl_au=1.1.1085428183.1714314650
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: ddos-guard
date: Sun, 28 Apr 2024 14:30:50 GMT
content-type: font/woff2
content-length: 111192
accept-ranges: bytes
etag: "65f1baf0-1b258"
last-modified: Wed, 13 Mar 2024 14:40:48 GMT
vary: Accept-Encoding
access-control-allow-origin: *
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

1win.direct/v4/socket.io/?Language=en&xorigin=1wfwna.life&EIO=4&transport=websocket

134.122.54.186

0 B

URL
1win.direct/v4/socket.io/?Language=en&xorigin=1wfwna.life&EIO=4&transport=websocket
IP
134.122.54.186:0
ASN
#14061 DIGITALOCEAN-ASN

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /v4/socket.io/?Language=en&xorigin=1wfwna.life&EIO=4&transport=websocket HTTP/1.1
Host: 1win.direct
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://1wfwna.life
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: erRdUBiJwZeZj7rh1p4vKQ==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Sec-Websocket-Accept: tNyQYBi5jHSA/iSbpzE499w9wW8=
Sec-Websocket-Extensions: permessage-deflate
Set-Cookie: core-sticky=77972f1471683818; Path=/; HttpOnly
Upgrade: websocket

1wfwna.life/v3/fortune-tiger/assets/Inter-Regular-f536bae0.woff2

190.115.24.78

200 OK

103 kB

URL GET HTTP/2
1wfwna.life/v3/fortune-tiger/assets/Inter-Regular-f536bae0.woff2
IP
190.115.24.78:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://1wfwna.life/v3/fortune-tiger
Certificate
IssuerLet's Encrypt
Subject1wfwna.life
Fingerprint17:34:42:5E:B0:F3:A5:70:C7:67:6F:7F:34:FE:4E:00:89:6E:E5:00
ValidityTue, 16 Apr 2024 12:17:59 GMT - Mon, 15 Jul 2024 12:17:58 GMT

File type
Web Open Font Format (Version 2), TrueType, length 103152, version 3.1245
Size
103 kB (103152 bytes)
Hash
5891e05821cbf2402b6dd3f4a84cfe12
43371fc7dd74393cb3f1de7f500164b4156a7a50
f536bae011685cdeb84a3ec10450fd024d62536949d870582f4651cd47404067

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /v3/fortune-tiger/assets/Inter-Regular-f536bae0.woff2 HTTP/1.1
Host: 1wfwna.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://1wfwna.life/v3/fortune-tiger/assets/index-b8f437e1.css
Cookie: __ddg1_=B2D2WBTnO2pvCHAReR1b; _gcl_au=1.1.1085428183.1714314650
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: ddos-guard
date: Sun, 28 Apr 2024 14:30:50 GMT
content-type: font/woff2
content-length: 103152
accept-ranges: bytes
etag: "65f1baf0-192f0"
last-modified: Wed, 13 Mar 2024 14:40:48 GMT
vary: Accept-Encoding
access-control-allow-origin: *
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

1wfwna.life/v3/fortune-tiger/assets/Inter-Black-9bdfd3f7.woff2

190.115.24.78

200 OK

108 kB

URL GET HTTP/2
1wfwna.life/v3/fortune-tiger/assets/Inter-Black-9bdfd3f7.woff2
IP
190.115.24.78:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://1wfwna.life/v3/fortune-tiger
Certificate
IssuerLet's Encrypt
Subject1wfwna.life
Fingerprint17:34:42:5E:B0:F3:A5:70:C7:67:6F:7F:34:FE:4E:00:89:6E:E5:00
ValidityTue, 16 Apr 2024 12:17:59 GMT - Mon, 15 Jul 2024 12:17:58 GMT

File type
Web Open Font Format (Version 2), TrueType, length 108304, version 3.1245
Size
108 kB (108304 bytes)
Hash
1072249056f4f7a5be7f0471c9ab78f7
67bb20dbc035eda1d7ea59c6b5491bb1053cec63
9bdfd3f7659d5ce371d366c2a2b6106e746b3e3966fcc39c60d0ffced96cb858

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /v3/fortune-tiger/assets/Inter-Black-9bdfd3f7.woff2 HTTP/1.1
Host: 1wfwna.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://1wfwna.life/v3/fortune-tiger/assets/index-b8f437e1.css
Cookie: __ddg1_=B2D2WBTnO2pvCHAReR1b; _gcl_au=1.1.1085428183.1714314650
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: ddos-guard
date: Sun, 28 Apr 2024 14:30:50 GMT
content-type: font/woff2
content-length: 108304
accept-ranges: bytes
etag: "65f1baf0-1a710"
last-modified: Wed, 13 Mar 2024 14:40:48 GMT
vary: Accept-Encoding
access-control-allow-origin: *
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-548949LWLW&cid=1823872497.1714314651&gtm=45je44o0v894728184z8894400803za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3lPl2l1&npa=1&z=419132253

142.250.74.163

200 OK

42 B

URL GET HTTP/2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-548949LWLW&cid=1823872497.1714314651&gtm=45je44o0v894728184z8894400803za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3lPl2l1&npa=1&z=419132253
IP
142.250.74.163:443
ASN
#15169 GOOGLE

Requested by
https://1wfwna.life/v3/fortune-tiger
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.no
FingerprintDE:35:DD:F6:8A:FF:6F:9D:0E:3D:27:DD:E2:B8:DE:CE:A4:6A:C8:C9
ValidityMon, 08 Apr 2024 07:44:18 GMT - Mon, 01 Jul 2024 07:44:17 GMT

File type
GIF image data, version 89a, 1 x 1
Size
42 B (42 bytes)
Hash
d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

HTTP Headers

GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-548949LWLW&cid=1823872497.1714314651&gtm=45je44o0v894728184z8894400803za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3lPl2l1&npa=1&z=419132253 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wfwna.life/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 28 Apr 2024 14:30:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

region1.analytics.google.com/g/collect?v=2&tid=G-548949LWLW&gtm=45je44o0v894728184z8894400803za200&_p=1714314650000&_gaz=1&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1823872497.1714314651&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&dp=%2Fv3%2Ffortune-tiger&sid=1714314650&sct=1&seg=0&dl=https%3A%2F%2F1wfwna.life%2Fv3%2Ffortune-tiger&dt=1win&en=page_view&_fv=1&_nsi=1&_ss=1&ep.page_url=https%3A%2F%2F1wfwna.life%2Fv3%2Ffortune-tiger&tfd=1307

216.239.34.36

204 No Content

0 B

URL POST HTTP/2
region1.analytics.google.com/g/collect?v=2&tid=G-548949LWLW&gtm=45je44o0v894728184z8894400803za200&_p=1714314650000&_gaz=1&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1823872497.1714314651&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&dp=%2Fv3%2Ffortune-tiger&sid=1714314650&sct=1&seg=0&dl=https%3A%2F%2F1wfwna.life%2Fv3%2Ffortune-tiger&dt=1win&en=page_view&_fv=1&_nsi=1&_ss=1&ep.page_url=https%3A%2F%2F1wfwna.life%2Fv3%2Ffortune-tiger&tfd=1307
IP
216.239.34.36:443
ASN
#15169 GOOGLE

Requested by
https://1wfwna.life/v3/fortune-tiger
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintFC:B1:16:E0:D8:F3:2B:F3:AB:33:E5:E1:23:57:F4:48:66:FD:4D:52
ValidityMon, 08 Apr 2024 06:34:55 GMT - Mon, 01 Jul 2024 06:34:54 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /g/collect?v=2&tid=G-548949LWLW&gtm=45je44o0v894728184z8894400803za200&_p=1714314650000&_gaz=1&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1823872497.1714314651&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&dp=%2Fv3%2Ffortune-tiger&sid=1714314650&sct=1&seg=0&dl=https%3A%2F%2F1wfwna.life%2Fv3%2Ffortune-tiger&dt=1win&en=page_view&_fv=1&_nsi=1&_ss=1&ep.page_url=https%3A%2F%2F1wfwna.life%2Fv3%2Ffortune-tiger&tfd=1307 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1wfwna.life
DNT: 1
Connection: keep-alive
Referer: https://1wfwna.life/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

HTTP/2 204 No Content
access-control-allow-origin: https://1wfwna.life
date: Sun, 28 Apr 2024 14:30:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

1wfwna.life/v3/fortune-tiger/favicon/android-icon-512x512.png

190.115.24.78

200 OK

21 kB

URL GET HTTP/2
1wfwna.life/v3/fortune-tiger/favicon/android-icon-512x512.png
IP
190.115.24.78:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://1wfwna.life/v3/fortune-tiger
Certificate
IssuerLet's Encrypt
Subject1wfwna.life
Fingerprint17:34:42:5E:B0:F3:A5:70:C7:67:6F:7F:34:FE:4E:00:89:6E:E5:00
ValidityTue, 16 Apr 2024 12:17:59 GMT - Mon, 15 Jul 2024 12:17:58 GMT

File type
gzip compressed data
Size
21 kB (21111 bytes)
Hash
84f445785696130739dd4bb74d0dd05e
f40c63ffe806daa4c0b9779ee17999a73e6f7515
01c14c261471fee8d858620f6ff17521e535c8471a9e1394c81718ae940c7759

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /v3/fortune-tiger/favicon/android-icon-512x512.png HTTP/1.1
Host: 1wfwna.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wfwna.life/v3/fortune-tiger
Cookie: __ddg1_=B2D2WBTnO2pvCHAReR1b; _gcl_au=1.1.1085428183.1714314650; _ga_548949LWLW=GS1.1.1714314650.1.0.1714314650.60.0.0; _ga=GA1.1.1823872497.1714314651; visit_domain=1wfwna.life; sub_ids=%20; core-sticky=http://10.233.97.77:80
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: ddos-guard
date: Sun, 28 Apr 2024 14:30:51 GMT
content-type: image/png
accept-ranges: bytes
content-encoding: gzip
etag: "65f1baef-2b40"
last-modified: Wed, 13 Mar 2024 14:40:47 GMT
vary: Accept-Encoding
access-control-allow-origin: *
age: 2
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=G-548949LWLW&l=dataLayer&cx=c

142.250.74.168

200 OK

258 kB

URL GET HTTP/3
www.googletagmanager.com/gtag/js?id=G-548949LWLW&l=dataLayer&cx=c
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://1wfwna.life/v3/fortune-tiger
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintFC:B1:16:E0:D8:F3:2B:F3:AB:33:E5:E1:23:57:F4:48:66:FD:4D:52
ValidityMon, 08 Apr 2024 06:34:55 GMT - Mon, 01 Jul 2024 06:34:54 GMT

File type
JavaScript source, ASCII text, with very long lines (5945)
Size
258 kB (258497 bytes)
Hash
11c922b4c6d4e11d48d2ceefa2aeb0fc
dbc5cc9cd5db4dbca9a38fa1006d87f65f03c31a
3631867175b4e34c7202675d3a80d2501883b7f61a5290c5b920b2abc527538f

HTTP Headers

GET /gtag/js?id=G-548949LWLW&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wfwna.life/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 28 Apr 2024 14:30:50 GMT
expires: Sun, 28 Apr 2024 14:30:50 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 90499
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

1wfwna.life/v3/fortune-tiger/assets/rectangle-77e94fe0.svg

190.115.24.78

200 OK

184 B

URL GET HTTP/2
1wfwna.life/v3/fortune-tiger/assets/rectangle-77e94fe0.svg
IP
190.115.24.78:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://1wfwna.life/v3/fortune-tiger
Certificate
IssuerLet's Encrypt
Subject1wfwna.life
Fingerprint17:34:42:5E:B0:F3:A5:70:C7:67:6F:7F:34:FE:4E:00:89:6E:E5:00
ValidityTue, 16 Apr 2024 12:17:59 GMT - Mon, 15 Jul 2024 12:17:58 GMT

File type
SVG Scalable Vector Graphics image
Size
184 B (184 bytes)
Hash
1abb9d782fd643317a03c4195ba193c9
f3d54c005f537b1cf10f170e014f02c3e8ab9a40
5e40cece26d590b641b884b3c5f5e03f5aac60936ec9026c86acb09726d19dba

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /v3/fortune-tiger/assets/rectangle-77e94fe0.svg HTTP/1.1
Host: 1wfwna.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wfwna.life/v3/fortune-tiger/assets/index-b8f437e1.css
Cookie: __ddg1_=B2D2WBTnO2pvCHAReR1b; _gcl_au=1.1.1085428183.1714314650
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
date: Sun, 28 Apr 2024 14:30:50 GMT
content-type: image/svg+xml
accept-ranges: bytes
etag: W/"65f1baf0-b8"
last-modified: Wed, 13 Mar 2024 14:40:48 GMT
vary: Accept-Encoding
access-control-allow-origin: *
content-encoding: br
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

1wfwna.life/v3/fortune-tiger

190.115.24.78

200 OK

36 kB

URL User Request GET HTTP/2
1wfwna.life/v3/fortune-tiger
IP
190.115.24.78:443
ASN
#59692 IQWeb FZ-LLC

Certificate
IssuerLet's Encrypt
Subject1wfwna.life
Fingerprint17:34:42:5E:B0:F3:A5:70:C7:67:6F:7F:34:FE:4E:00:89:6E:E5:00
ValidityTue, 16 Apr 2024 12:17:59 GMT - Mon, 15 Jul 2024 12:17:58 GMT

File type

Size
36 kB (36418 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /v3/fortune-tiger HTTP/1.1
Host: 1wfwna.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg1_=B2D2WBTnO2pvCHAReR1b; Domain=.1wfwna.life; HttpOnly; Path=/; Expires=Mon, 28-Apr-2025 14:30:49 GMT
date: Sun, 28 Apr 2024 14:30:49 GMT
content-type: text/html
accept-ranges: bytes
content-encoding: gzip
etag: "65f1baf0-8e42"
last-modified: Wed, 13 Mar 2024 14:40:48 GMT
vary: Accept-Encoding
access-control-allow-origin: *
X-Firefox-Spdy: h2

1wfwna.life/v3/fortune-tiger/assets/index-b8f437e1.css

190.115.24.78

200 OK

58 kB

URL GET HTTP/2
1wfwna.life/v3/fortune-tiger/assets/index-b8f437e1.css
IP
190.115.24.78:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://1wfwna.life/v3/fortune-tiger
Certificate
IssuerLet's Encrypt
Subject1wfwna.life
Fingerprint17:34:42:5E:B0:F3:A5:70:C7:67:6F:7F:34:FE:4E:00:89:6E:E5:00
ValidityTue, 16 Apr 2024 12:17:59 GMT - Mon, 15 Jul 2024 12:17:58 GMT

File type
ASCII text, with very long lines (57974)
Size
58 kB (57975 bytes)
Hash
12ad0fa9503ebb1bce670c1582d45a25
1471f41471a955a2f0ed6ddeed0e57da886259d2
b8f437e18827c325ba56df32f47ae2918e00d67b23d0eb7f81e69e92fd4300d2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /v3/fortune-tiger/assets/index-b8f437e1.css HTTP/1.1
Host: 1wfwna.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wfwna.life/v3/fortune-tiger
Cookie: __ddg1_=B2D2WBTnO2pvCHAReR1b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
date: Sun, 28 Apr 2024 14:30:50 GMT
content-type: text/css
accept-ranges: bytes
content-encoding: br
etag: W/"65f1baf0-e277"
last-modified: Wed, 13 Mar 2024 14:40:48 GMT
vary: Accept-Encoding
access-control-allow-origin: *
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

1wfwna.life/v3/fortune-tiger/assets/logo-3c31be17.svg

190.115.24.78

200 OK

2.7 kB

URL GET HTTP/2
1wfwna.life/v3/fortune-tiger/assets/logo-3c31be17.svg
IP
190.115.24.78:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://1wfwna.life/v3/fortune-tiger
Certificate
IssuerLet's Encrypt
Subject1wfwna.life
Fingerprint17:34:42:5E:B0:F3:A5:70:C7:67:6F:7F:34:FE:4E:00:89:6E:E5:00
ValidityTue, 16 Apr 2024 12:17:59 GMT - Mon, 15 Jul 2024 12:17:58 GMT

File type
SVG Scalable Vector Graphics image
Size
2.7 kB (2698 bytes)
Hash
205d9c9a0c052c7025acc733ef5ee217
aefa74a00d9bc0956043e44eda83aa534a2dbbc4
13c51a0697aa0d59d794a63730a1f04b5b563691abe5441a74559861a7dfb412

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /v3/fortune-tiger/assets/logo-3c31be17.svg HTTP/1.1
Host: 1wfwna.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wfwna.life/v3/fortune-tiger
Cookie: __ddg1_=B2D2WBTnO2pvCHAReR1b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
date: Sun, 28 Apr 2024 14:30:50 GMT
content-type: image/svg+xml
accept-ranges: bytes
content-encoding: br
etag: W/"65f1baf0-a8a"
last-modified: Wed, 13 Mar 2024 14:40:48 GMT
vary: Accept-Encoding
access-control-allow-origin: *
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

1wfwna.life/v3/fortune-tiger/flags/flags.svg

190.115.24.78

200 OK

194 kB

URL GET HTTP/2
1wfwna.life/v3/fortune-tiger/flags/flags.svg
IP
190.115.24.78:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://1wfwna.life/v3/fortune-tiger
Certificate
IssuerLet's Encrypt
Subject1wfwna.life
Fingerprint17:34:42:5E:B0:F3:A5:70:C7:67:6F:7F:34:FE:4E:00:89:6E:E5:00
ValidityTue, 16 Apr 2024 12:17:59 GMT - Mon, 15 Jul 2024 12:17:58 GMT

File type
SVG Scalable Vector Graphics image
Size
194 kB (194332 bytes)
Hash
a92bcc34e96e6149bbbf43a1bc9c52d8
cebda3ba8b9260a4de36e6f8ab10e4f192c882bc
46f7c85353be615eb961fca31f10d696cc75f317786b29fc250028fd70a081e7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /v3/fortune-tiger/flags/flags.svg HTTP/1.1
Host: 1wfwna.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wfwna.life/v3/fortune-tiger
Cookie: __ddg1_=B2D2WBTnO2pvCHAReR1b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
date: Sun, 28 Apr 2024 14:30:50 GMT
content-type: image/svg+xml
accept-ranges: bytes
content-encoding: br
etag: W/"65f1baef-2f71c"
last-modified: Wed, 13 Mar 2024 14:40:47 GMT
vary: Accept-Encoding
access-control-allow-origin: *
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

1wfwna.life/v3/fortune-tiger/assets/tiger-r-768-c5411fe8.avif

190.115.24.78

200 OK

8.6 kB

URL GET HTTP/2
1wfwna.life/v3/fortune-tiger/assets/tiger-r-768-c5411fe8.avif
IP
190.115.24.78:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://1wfwna.life/v3/fortune-tiger
Certificate
IssuerLet's Encrypt
Subject1wfwna.life
Fingerprint17:34:42:5E:B0:F3:A5:70:C7:67:6F:7F:34:FE:4E:00:89:6E:E5:00
ValidityTue, 16 Apr 2024 12:17:59 GMT - Mon, 15 Jul 2024 12:17:58 GMT

File type
ISO Media, AVIF Image
Size
8.6 kB (8623 bytes)
Hash
80cf29695ba775a0391f55c2028a24bc
0640f83065ccabcc6c957e07cd259d3c71b06041
c5411fe89ec5633aa24de81321da5a8e1c3a8f855a4e005da36055ec9308217b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /v3/fortune-tiger/assets/tiger-r-768-c5411fe8.avif HTTP/1.1
Host: 1wfwna.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wfwna.life/v3/fortune-tiger/assets/index-b8f437e1.css
Cookie: __ddg1_=B2D2WBTnO2pvCHAReR1b; _gcl_au=1.1.1085428183.1714314650
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
date: Sun, 28 Apr 2024 14:30:50 GMT
content-type: image/avif
accept-ranges: bytes
content-encoding: gzip
etag: "65f1baf0-21af"
last-modified: Wed, 13 Mar 2024 14:40:48 GMT
vary: Accept-Encoding
access-control-allow-origin: *
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

1wfwna.life/v3/fortune-tiger/assets/index-3567fcd6.js

190.115.24.78

200 OK

154 kB

URL GET HTTP/2
1wfwna.life/v3/fortune-tiger/assets/index-3567fcd6.js
IP
190.115.24.78:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://1wfwna.life/v3/fortune-tiger
Certificate
IssuerLet's Encrypt
Subject1wfwna.life
Fingerprint17:34:42:5E:B0:F3:A5:70:C7:67:6F:7F:34:FE:4E:00:89:6E:E5:00
ValidityTue, 16 Apr 2024 12:17:59 GMT - Mon, 15 Jul 2024 12:17:58 GMT

File type

Size
154 kB (154497 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /v3/fortune-tiger/assets/index-3567fcd6.js HTTP/1.1
Host: 1wfwna.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wfwna.life/v3/fortune-tiger
Cookie: __ddg1_=B2D2WBTnO2pvCHAReR1b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
date: Sun, 28 Apr 2024 14:30:50 GMT
content-type: application/javascript
accept-ranges: bytes
content-encoding: br
etag: W/"65f1baf0-25b81"
last-modified: Wed, 13 Mar 2024 14:40:48 GMT
vary: Accept-Encoding
access-control-allow-origin: *
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

1win.direct/v4/socket.io/?Language=en&xorigin=1wfwna.life&EIO=4&transport=websocket

134.122.54.186

101 Switching Protocols

0 B

URL GET HTTP/1.1
1win.direct/v4/socket.io/?Language=en&xorigin=1wfwna.life&EIO=4&transport=websocket
IP
134.122.54.186:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://1wfwna.life/v3/fortune-tiger
Certificate
IssuerLet's Encrypt
Subject*.1win.direct
Fingerprint52:A8:ED:F5:F8:3D:CF:F0:55:C1:2A:96:EA:32:49:27:6C:D8:26:27
ValiditySun, 17 Mar 2024 06:46:18 GMT - Sat, 15 Jun 2024 06:46:17 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /v4/socket.io/?Language=en&xorigin=1wfwna.life&EIO=4&transport=websocket HTTP/1.1
Host: 1win.direct
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://1wfwna.life
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: erRdUBiJwZeZj7rh1p4vKQ==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Sec-Websocket-Accept: tNyQYBi5jHSA/iSbpzE499w9wW8=
Sec-Websocket-Extensions: permessage-deflate
Set-Cookie: core-sticky=77972f1471683818; Path=/; HttpOnly
Upgrade: websocket

1wfwna.life/affiliate:link_visit?visit_domain=1wfwna.life&sub_ids=%20

190.115.24.78

200 OK

37 B

URL GET HTTP/2
1wfwna.life/affiliate:link_visit?visit_domain=1wfwna.life&sub_ids=%20
IP
190.115.24.78:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://1wfwna.life/v3/fortune-tiger
Certificate
IssuerLet's Encrypt
Subject1wfwna.life
Fingerprint17:34:42:5E:B0:F3:A5:70:C7:67:6F:7F:34:FE:4E:00:89:6E:E5:00
ValidityTue, 16 Apr 2024 12:17:59 GMT - Mon, 15 Jul 2024 12:17:58 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
37 B (37 bytes)
Hash
2f6af1a09e6d352c1603fe2326189744
baed183cee7c7fd534e8519a683c9f398e696329
7dbce63a298c62ef7fd9b97b1512bcfc0fb402338670dbd194362e0ffac42458

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /affiliate:link_visit?visit_domain=1wfwna.life&sub_ids=%20 HTTP/1.1
Host: 1wfwna.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-origin: 1wfwna.life
DNT: 1
Connection: keep-alive
Referer: https://1wfwna.life/v3/fortune-tiger
Cookie: __ddg1_=B2D2WBTnO2pvCHAReR1b; _gcl_au=1.1.1085428183.1714314650; _ga_548949LWLW=GS1.1.1714314650.1.0.1714314650.60.0.0; _ga=GA1.1.1823872497.1714314651; visit_domain=1wfwna.life; sub_ids=%20
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
date: Sun, 28 Apr 2024 14:30:50 GMT
content-type: application/json; charset=utf-8
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Authorization, X-Origin
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-origin: undefined
access-control-expose-headers: Authorization
access-control-max-age: 7200
etag: W/"25-Zj67mG54TfZ031q1ea2QwFUXWX4"
set-cookie: core-sticky=http://10.233.97.77:80; Path=/; HttpOnly
x-powered-by: Express
x-frame-options: ALLOW-FROM   ww.1win.run 1win.run www.1win.work 1win.work www.1w.run 1w.run www.1wip.best 1wip.best www.1wint.run 1wint.run www.1winr.run 1winr.run www.1wind.run 1wind.run www.1wins.run 1wins.run www.1w.fan 1w.fan www.1win.team 1win.team www.1win.partners 1win.partners 1wip.best www.1wip.best 1wint.run www.1wint.run 1winr.run www.1winr.run 1wind.run www.1wind.run 1wins.run www.1wins.run 1w.fan www.1w.fan, ALLOW-FROM 1win-partner.com  ww.1win.run 1win.run www.1win.work 1win.work www.1w.run 1w.run www.1wip.best 1wip.best www.1wint.run 1wint.run www.1winr.run 1winr.run www.1wind.run 1wind.run www.1wins.run 1wins.run www.1w.fan 1w.fan www.1win.team 1win.team www.1win.partners 1win.partners 1wip.best www.1wip.best 1wint.run www.1wint.run 1winr.run www.1winr.run 1wind.run www.1wind.run 1wins.run www.1wins.run 1w.fan www.1w.fan
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2

1wfwna.life/v3/fortune-tiger/favicon/favicon.svg

190.115.24.78

200 OK

1.5 kB

URL GET HTTP/2
1wfwna.life/v3/fortune-tiger/favicon/favicon.svg
IP
190.115.24.78:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://1wfwna.life/v3/fortune-tiger
Certificate
IssuerLet's Encrypt
Subject1wfwna.life
Fingerprint17:34:42:5E:B0:F3:A5:70:C7:67:6F:7F:34:FE:4E:00:89:6E:E5:00
ValidityTue, 16 Apr 2024 12:17:59 GMT - Mon, 15 Jul 2024 12:17:58 GMT

File type
SVG Scalable Vector Graphics image
Size
1.5 kB (1461 bytes)
Hash
7c9c6b5800335eb4a0d4f460331b278e
7e5fcd092fef1c364f1c50e72a6b7429b46a4c65
7b618779ed3c3bbb7e90ea7ed6c2c3aa46a3c4ef9605b4a0cc4e68f023c2f912

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /v3/fortune-tiger/favicon/favicon.svg HTTP/1.1
Host: 1wfwna.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wfwna.life/v3/fortune-tiger
Cookie: __ddg1_=B2D2WBTnO2pvCHAReR1b; _gcl_au=1.1.1085428183.1714314650; _ga_548949LWLW=GS1.1.1714314650.1.0.1714314650.60.0.0; _ga=GA1.1.1823872497.1714314651; visit_domain=1wfwna.life; sub_ids=%20; core-sticky=http://10.233.97.77:80
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
date: Sun, 28 Apr 2024 14:30:51 GMT
content-type: image/svg+xml
accept-ranges: bytes
content-encoding: br
etag: W/"65f1baef-5b5"
last-modified: Wed, 13 Mar 2024 14:40:47 GMT
vary: Accept-Encoding
access-control-allow-origin: *
age: 2
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

1wfwna.life/v3/fortune-tiger/assets/tiger-l-768-06864715.avif

190.115.24.78

200 OK

8.9 kB

URL GET HTTP/2
1wfwna.life/v3/fortune-tiger/assets/tiger-l-768-06864715.avif
IP
190.115.24.78:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://1wfwna.life/v3/fortune-tiger
Certificate
IssuerLet's Encrypt
Subject1wfwna.life
Fingerprint17:34:42:5E:B0:F3:A5:70:C7:67:6F:7F:34:FE:4E:00:89:6E:E5:00
ValidityTue, 16 Apr 2024 12:17:59 GMT - Mon, 15 Jul 2024 12:17:58 GMT

File type
ISO Media, AVIF Image
Size
8.9 kB (8945 bytes)
Hash
e660933894c385789f67425e066fbc8f
91992af827fd4b9bec26f6f5ec3b59c657c91a7b
068647159729ef84b6df669c5699be44134ba022c7351c6ff6d2d2da83b6ddd2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /v3/fortune-tiger/assets/tiger-l-768-06864715.avif HTTP/1.1
Host: 1wfwna.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wfwna.life/v3/fortune-tiger/assets/index-b8f437e1.css
Cookie: __ddg1_=B2D2WBTnO2pvCHAReR1b; _gcl_au=1.1.1085428183.1714314650
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
date: Sun, 28 Apr 2024 14:30:50 GMT
content-type: image/avif
accept-ranges: bytes
content-encoding: gzip
etag: "65f1baf0-22f1"
last-modified: Wed, 13 Mar 2024 14:40:48 GMT
vary: Accept-Encoding
access-control-allow-origin: *
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

1wfwna.life/v3/fortune-tiger/assets/body-back-1024-89ba2c21.avif

190.115.24.78

200 OK

24 kB

URL GET HTTP/2
1wfwna.life/v3/fortune-tiger/assets/body-back-1024-89ba2c21.avif
IP
190.115.24.78:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://1wfwna.life/v3/fortune-tiger
Certificate
IssuerLet's Encrypt
Subject1wfwna.life
Fingerprint17:34:42:5E:B0:F3:A5:70:C7:67:6F:7F:34:FE:4E:00:89:6E:E5:00
ValidityTue, 16 Apr 2024 12:17:59 GMT - Mon, 15 Jul 2024 12:17:58 GMT

File type
ISO Media, AVIF Image
Size
24 kB (24331 bytes)
Hash
c514e8db1d5660c5b87072fb933c6e38
f45ce1ac5e56ed9d5d2995f386335f4bf02abee1
89ba2c2137ca550b1a5193b10e2da8fb03d233067a715c5831c80d9c1bdfe62a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /v3/fortune-tiger/assets/body-back-1024-89ba2c21.avif HTTP/1.1
Host: 1wfwna.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wfwna.life/v3/fortune-tiger/assets/index-b8f437e1.css
Cookie: __ddg1_=B2D2WBTnO2pvCHAReR1b; _gcl_au=1.1.1085428183.1714314650
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
date: Sun, 28 Apr 2024 14:30:50 GMT
content-type: image/avif
accept-ranges: bytes
content-encoding: gzip
etag: "65f1baf0-5f0b"
last-modified: Wed, 13 Mar 2024 14:40:48 GMT
vary: Accept-Encoding
access-control-allow-origin: *
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

1wfwna.life/v3/fortune-tiger/sprites/form-sprite.svg

190.115.24.78

200 OK

3.3 kB

URL GET HTTP/2
1wfwna.life/v3/fortune-tiger/sprites/form-sprite.svg
IP
190.115.24.78:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://1wfwna.life/v3/fortune-tiger
Certificate
IssuerLet's Encrypt
Subject1wfwna.life
Fingerprint17:34:42:5E:B0:F3:A5:70:C7:67:6F:7F:34:FE:4E:00:89:6E:E5:00
ValidityTue, 16 Apr 2024 12:17:59 GMT - Mon, 15 Jul 2024 12:17:58 GMT

File type
SVG Scalable Vector Graphics image
Size
3.3 kB (3268 bytes)
Hash
e750583205bd2c93482615d3720d0bf0
2119d46f700b31768e6fbc308dd830ac3c48bbb8
210b9cd2bb26605ae91e0de6aa23fa95955532e41cc8c404b3c204c146cb6874

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /v3/fortune-tiger/sprites/form-sprite.svg HTTP/1.1
Host: 1wfwna.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wfwna.life/v3/fortune-tiger
Cookie: __ddg1_=B2D2WBTnO2pvCHAReR1b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
date: Sun, 28 Apr 2024 14:30:50 GMT
content-type: image/svg+xml
accept-ranges: bytes
content-encoding: br
etag: W/"65f1baef-cc4"
last-modified: Wed, 13 Mar 2024 14:40:47 GMT
vary: Accept-Encoding
access-control-allow-origin: *
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (19)

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by