Report - 1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01

Report Overview

Submitted URL
1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
IP
94.130.10.163
ASN
#24940 Hetzner Online GmbH
Submitted
2024-05-07 17:40:28
Access
public
Website Title
1win
Final URL
1wklkbv.com/v3/2431/br/external-marketing?lang=pt&
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
1wprru.life	unknown	unknown	No data	No data	926 B	446 kB	190.115.24.78
1wklkbv.com	unknown	unknown	No data	No data	10 kB	1.1 MB	94.130.10.163
www.googletagmanager.com	75	2011-11-11	2013-05-22	2024-05-07	1.8 kB	368 kB	142.250.74.168
1win-cdn.com	unknown	2022-12-12	2022-12-12	2024-04-30	513 B	634 B	154.197.121.128
1win.direct	unknown	2022-08-16	2022-08-16	2024-04-10	1.2 kB	468 B	134.122.54.186
kafka-connector.owdp.tech	unknown	unknown	No data	No data	2.0 kB	1.9 kB	34.242.170.249
www.google.no	25607	2001-02-26	2016-04-05	2024-05-07	586 B	578 B	142.250.74.163
region1.analytics.google.com	unknown	1997-09-15	2022-03-17	2024-05-06	2.8 kB	1.3 kB	216.239.32.36

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-07	medium	1win-cdn.com	Sinkholed
2024-05-07	medium	1wprru.life	Sinkholed
2024-05-07	medium	1wprru.life	Sinkholed

ThreatFox

No alerts detected

JavaScript (22)

	URL	Size	First Seen	Last Seen
	1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01	3.0 kB	2023-10-24	2024-05-19
Pretty URL 1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01 IP 94.130.10.163 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-10-24 17:39:51 Last Seen2024-05-19 08:20:03 Times Seen138 Hash b69442c8805fbe9fb0be0d9671d0acf7 0dbe79cf79574b95076c0b4eade7fc9314074b67 45ea98a4007c992d67da469da7d5f5d0ae34af0c390bce75873c0360215ce44c Loading...

	unknown	409 B	2023-03-10	2024-05-19
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 00:21:10 Last Seen2024-05-19 08:20:03 Times Seen1490 Hash efc54365d1ba6c4fb4bdf7ea1996bdbd 9f89f3485cd56eac910d9c0d6f9bd3b201074e24 da89215c040a91b80faf28d6030c58dab9d599794ef9bd1feba0fb01c621cf40 Loading...

	1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01	500 B	2023-10-24	2024-05-19
Pretty URL 1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01 IP 94.130.10.163 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-10-24 17:39:51 Last Seen2024-05-19 08:20:03 Times Seen138 Hash 4231b98643503d9e0e3074b85536dae7 4b3496ff695be3ce156b4f525e7ce3023bbb5a04 701b6e1c448f28dff6dd03ef945ca8dd1b3c4cb8f677ba62b86233763e4cee35 Loading...

	unknown	199 B	2024-05-07	2024-05-07
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-07 19:40:35 Last Seen2024-05-07 19:40:35 Times Seen1 Hash f9731ef433d89085a5adf5cf0002159f 6e7c0e15b16f3ad65bdea59ab9675ab77ab9e294 e1c2b49a969be22b5f352bced6b8ec41eacf96557e075929051cd1832fcf4540 Loading...

	unknown	347 B	2023-09-18	2024-05-19
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-18 10:51:18 Last Seen2024-05-19 08:20:03 Times Seen123 Hash dc24919eb26f2a63e544bd26e58a23a5 3811cea125d31352f3a20cca521d82d9a3469cb4 beb1db9cfddf40682243dee231991acb8b2a04a25c061d0a3ec489ba38355310 Loading...

	unknown	320 B	2024-04-25	2024-05-19
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 08:15:32 Last Seen2024-05-19 08:20:03 Times Seen27 Hash a3dc02f9a446c1d0b92d1d255f6d6aca dc38346494ef01492ac98581b80e1a5d54c17cc4 0f50264484c77b2ca8495900cd9d92dea396e31dbd233e9f2b45262210b1a899 Loading...

	www.googletagmanager.com/gtag/js?id=AW-16482547739&l=dataLayer&cx=c	260 kB	2024-05-07	2024-05-07
Pretty URL www.googletagmanager.com/gtag/js?id=AW-16482547739&l=dataLayer&cx=c IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-07 19:40:35 Last Seen2024-05-07 19:40:36 Times Seen2 Hash 7fd0be2f84883eb497d870699a57b9dd d9701ad3f2e1c237adf48818f85e6f406a1bb04b accf0115907661c13d5a5d2dd427d79a8481a48fe43ab4e07a722006d57973b4 Loading...

	unknown	421 B	2023-03-12	2024-05-19
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 20:22:06 Last Seen2024-05-19 08:20:03 Times Seen1490 Hash dc37ec839376756d26f9c8925e173ac0 c7aff54b91a363e452e3338b3cf8441b3a82cbbb f139f19f43bcda296441234e4cb82550d94bde81758de7cf37bfe55df1c96717 Loading...

	unknown	1.1 kB	2024-05-07	2024-05-07
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-07 19:40:35 Last Seen2024-05-07 19:40:35 Times Seen1 Hash da4417356847712e3f1255936f1d22c2 36f72273dd52733d4ff048d74c3511a39081227f de62024b7413c47da932f6994af033b782360f3e0dc8b287786ebaf328c49c7c Loading...

	unknown	351 B	2023-06-26	2024-05-19
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-26 22:52:58 Last Seen2024-05-19 08:20:03 Times Seen814 Hash 0673c7f330c1ac44ad83205bb517e3de 3890b0da1d481f37cee66b2f8d97a4ca2edf40b9 58cca9fb8425db78c1b9abd4e83fae44a378bf2eff7875d4e0d2154643139c13 Loading...

	unknown	351 B	2024-04-25	2024-05-19
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 08:15:32 Last Seen2024-05-19 08:20:03 Times Seen27 Hash 6e5d8e7020d5ea8518ff418159b2c449 23c3d97d478a31792f7c8015ee996024d757e447 019fd2b2e2962821bba76ce4b655f57177e243d4cdb59b8abd54a31c98eb5bc9 Loading...

	unknown	351 B	2023-11-19	2024-05-19
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-19 21:19:45 Last Seen2024-05-19 08:20:03 Times Seen26 Hash a235f44140440780f5c675186a6a33ad dc142b172e6fdf7da1894480766a438812f1c706 4d77fd2cb0b381da2865b06fcef7bb23cb1a456097347216116326eaae76aae5 Loading...

	unknown	320 B	2024-04-25	2024-05-19
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 08:15:32 Last Seen2024-05-19 08:20:03 Times Seen24 Hash 847af62d0cb678130fd7a8084f939f99 d5f6efd2037821f54d88bf1d7ef6f8650f02ebb0 fe74299e19a3cb50a36b7247ebced910ad35e35764897b465bd1467e62b23d44 Loading...

	1wklkbv.com/v3/2431/br/external-marketing/assets/index-0ce5c634.js	137 kB	2024-04-29	2024-05-07
Pretty URL 1wklkbv.com/v3/2431/br/external-marketing/assets/index-0ce5c634.js IP 94.130.10.163 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-29 06:23:58 Last Seen2024-05-07 19:40:36 Times Seen4 Hash 9046bff6ad44bba9dccd4dc723a3d700 8af744b8a87ff7a5eb92858510c1aae25e33dc8f 291b92952130268891642dea5cb85ffa8ba9f62b3c3f95147b41a0ff8111d280 Loading...

	unknown	468 B	2023-05-19	2024-05-19
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-19 10:04:18 Last Seen2024-05-19 08:20:03 Times Seen177 Hash f4aa10577822d528d7d95fbb8ce8d1f1 d9f3ad1a724192488e547dc9a46784badde74113 ffc6fc82ac2dd2be4163a30990ce2952502dfa4b88e7e52eb65ea20c9796929a Loading...

	unknown	287 B	2023-09-10	2024-05-07
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-10 00:55:10 Last Seen2024-05-07 19:40:36 Times Seen161 Hash 66822daf496a288ba191a460bf51c7f1 453c95b3b2b2ce229bd4d80c2d7970dc2708a6f3 75aec4091c9860658b914b7d7d07f6ed242a14102ea73dbaa236195fc8f2ae70 Loading...

	unknown	317 B	2024-04-25	2024-05-19
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 08:15:32 Last Seen2024-05-19 08:20:03 Times Seen27 Hash e9fe7cf10fc485b4a799637103165af7 44d71eff2240b2b91640137130267f9c0935ce50 2d58e0d47b9f3ce8a6eb7eaea7d3b80ec2667177f307ceab869a8d05688eebf9 Loading...

	unknown	320 B	2024-04-25	2024-05-19
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 08:15:32 Last Seen2024-05-19 08:20:03 Times Seen27 Hash 2b18aeec9bf5b10fc112b55307c20140 865d1eaee49062b257e747372bb7a9c9196c95b7 f4b1aa1cd6c26cb12c7bee93581f3f63e4d9d99fc3b1f2dc7c148b5e4a32430a Loading...

	www.googletagmanager.com/gtag/destination?id=DC-12688802&l=dataLayer&cx=c	204 kB	2024-05-07	2024-05-07
Pretty URL www.googletagmanager.com/gtag/destination?id=DC-12688802&l=dataLayer&cx=c IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-07 19:40:36 Last Seen2024-05-07 19:40:36 Times Seen2 Hash 109c31305a46432d8688b891ca8816ab 6033a95af519446f56789925c0d320c2ac2b5639 70ac549e265b017565a9425d173865ec93467c02e9fbf398459a68f72abb6034 Loading...

	www.googletagmanager.com/gtag/js?id=G-548949LWLW&l=dataLayer&cx=c	263 kB	2024-05-07	2024-05-07
Pretty URL www.googletagmanager.com/gtag/js?id=G-548949LWLW&l=dataLayer&cx=c IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-07 19:40:36 Last Seen2024-05-07 19:40:36 Times Seen2 Hash 3dfaa5aadac94eeeb55a0a1a3066c0d5 9d815ccafaf9f705f11dfa9886acb88a9a59c9ff ac045b9927d045fd99c18e952276922ddebc1b8a2a993fb09052476e7fe1bf8b Loading...

	www.googletagmanager.com/gtm.js?id=GTM-KGKQDC7	375 kB	2024-05-07	2024-05-07
Pretty URL www.googletagmanager.com/gtm.js?id=GTM-KGKQDC7 IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-07 19:40:36 Last Seen2024-05-07 19:40:36 Times Seen2 Hash 4f9bacb93b6533bded2e756f5ea78b77 58c0f0b4ffa2e59d765b38e9ffd94956821deb0f bd1e38cb75be19e09109a326a94bd5a189c39c45d43d7337c14cce983c2d9995 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 0bf001dcdb310567c52654a935c4f92a	80 B	2023-03-26	2024-05-19
Pretty Observations First Seen2023-03-26 10:50:54 Last Seen2024-05-19 08:20:03 Times Seen823 Hash 0bf001dcdb310567c52654a935c4f92a fddc3d16a5af259bcfa6b87a02bde4e3bcdc7109 a3b73a3b1e36d2bfad6fe9530c9c943f28a99cbe84d0674b555d14c3ae26c780 Loading...

HTTP Transactions (36)

URL IP Response Size

1wklkbv.com/v3/2431/br/external-marketing/img/logo/logo-1win.svg

94.130.10.163

200 OK

813 B

URL GET HTTP/2
1wklkbv.com/v3/2431/br/external-marketing/img/logo/logo-1win.svg
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerLet's Encrypt
Subject1wklkbv.com
Fingerprint31:1E:AB:05:30:83:22:A2:A3:33:74:0A:30:AA:E2:C7:B2:7C:F5:CA
ValidityFri, 22 Mar 2024 13:34:29 GMT - Thu, 20 Jun 2024 13:34:28 GMT

File type
SVG Scalable Vector Graphics image
Size
813 B (813 bytes)
Hash
63e98a5afaba46c83f6bef94d342dce9
e072aed0418de20c80e9daf1985dacf99816dc4b
3cc48cc7988466d19b323285dc3cd9c54f638f4e610b7f00b03d40a312e6a10f

HTTP Headers

GET /v3/2431/br/external-marketing/img/logo/logo-1win.svg HTTP/1.1
Host: 1wklkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-type: image/svg+xml
date: Tue, 07 May 2024 17:40:02 GMT
etag: "661fb4f2-a4d"
last-modified: Wed, 17 Apr 2024 11:39:30 GMT
server: nginx/1.23.4
vary: Accept-Encoding
content-length: 813
X-Firefox-Spdy: h2

1wklkbv.com/v3/2431/br/external-marketing/sprites/form-sprite.svg

94.130.10.163

200 OK

1.0 kB

URL GET HTTP/2
1wklkbv.com/v3/2431/br/external-marketing/sprites/form-sprite.svg
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerLet's Encrypt
Subject1wklkbv.com
Fingerprint31:1E:AB:05:30:83:22:A2:A3:33:74:0A:30:AA:E2:C7:B2:7C:F5:CA
ValidityFri, 22 Mar 2024 13:34:29 GMT - Thu, 20 Jun 2024 13:34:28 GMT

File type
SVG Scalable Vector Graphics image
Size
1.0 kB (1010 bytes)
Hash
d2b31c0304cc259840aa7121d33e09c1
d0063496e9cf3980998bbf60225b6742e82c3de6
7fac6a360735f048385117afb469e559e28a63e3fd0b0800d0df07ad0e1a417b

HTTP Headers

GET /v3/2431/br/external-marketing/sprites/form-sprite.svg HTTP/1.1
Host: 1wklkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-type: image/svg+xml
date: Tue, 07 May 2024 17:40:02 GMT
etag: "661fb4f2-a62"
last-modified: Wed, 17 Apr 2024 11:39:30 GMT
server: nginx/1.23.4
vary: Accept-Encoding
content-length: 1010
X-Firefox-Spdy: h2

1wklkbv.com/v3/2431/br/external-marketing/assets/index-0ce5c634.js

94.130.10.163

200 OK

42 kB

URL GET HTTP/2
1wklkbv.com/v3/2431/br/external-marketing/assets/index-0ce5c634.js
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerLet's Encrypt
Subject1wklkbv.com
Fingerprint31:1E:AB:05:30:83:22:A2:A3:33:74:0A:30:AA:E2:C7:B2:7C:F5:CA
ValidityFri, 22 Mar 2024 13:34:29 GMT - Thu, 20 Jun 2024 13:34:28 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (62891)
Size
42 kB (41783 bytes)
Hash
d207fdb40baf31383223811eaf8bebbb
150a6a964c8e5e9d9da55e94083b40f1d62cd734
26afc2b84120487df1da5fb97f9550f06c3fb4b2eb9fb01b5db619e8841aa3e0

HTTP Headers

GET /v3/2431/br/external-marketing/assets/index-0ce5c634.js HTTP/1.1
Host: 1wklkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-type: application/javascript
date: Tue, 07 May 2024 17:40:02 GMT
etag: "661fb4f3-216b0"
last-modified: Wed, 17 Apr 2024 11:39:31 GMT
server: nginx/1.23.4
vary: Accept-Encoding
X-Firefox-Spdy: h2

1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01

94.130.10.163

200 OK

82 kB

URL User Request GET HTTP/2
1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Certificate
IssuerLet's Encrypt
Subject1wklkbv.com
Fingerprint31:1E:AB:05:30:83:22:A2:A3:33:74:0A:30:AA:E2:C7:B2:7C:F5:CA
ValidityFri, 22 Mar 2024 13:34:29 GMT - Thu, 20 Jun 2024 13:34:28 GMT

File type
gzip compressed data
Size
82 kB (82124 bytes)
Hash
8b756a2b195f3efadf70ee6be03fc48b
46d5849b08d00cd89433720e74b6da0e46d77403
628d3190acab469266f7bb531429686a5a2a8ebc4a8a08def3aa707d864b214a

HTTP Headers

GET /v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01 HTTP/1.1
Host: 1wklkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-type: text/html
date: Tue, 07 May 2024 17:40:02 GMT
etag: "661fb4f3-4336"
last-modified: Wed, 17 Apr 2024 11:39:31 GMT
server: nginx/1.23.4
vary: Accept-Encoding
X-Firefox-Spdy: h2

1wklkbv.com/v3/2431/br/external-marketing/assets/Inter-Regular-ed64c5d8.woff2

94.130.10.163

200 OK

99 kB

URL GET HTTP/2
1wklkbv.com/v3/2431/br/external-marketing/assets/Inter-Regular-ed64c5d8.woff2
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerLet's Encrypt
Subject1wklkbv.com
Fingerprint31:1E:AB:05:30:83:22:A2:A3:33:74:0A:30:AA:E2:C7:B2:7C:F5:CA
ValidityFri, 22 Mar 2024 13:34:29 GMT - Thu, 20 Jun 2024 13:34:28 GMT

File type
Web Open Font Format (Version 2), TrueType, length 98756, version 1.0
Size
99 kB (98756 bytes)
Hash
a90c493e75dbd61aec1195dbb9bb6b06
a3e3ae8b6f79820b0b393a92fc613f50fb9f03c6
ed64c5d83f5fcc357eb8afd0a7b8d9912cae97d88dd57cccb64787bb643c7c76

HTTP Headers

GET /v3/2431/br/external-marketing/assets/Inter-Regular-ed64c5d8.woff2 HTTP/1.1
Host: 1wklkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://1wklkbv.com/v3/2431/br/external-marketing/assets/index-5d372cb9.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-type: font/woff2
date: Tue, 07 May 2024 17:40:02 GMT
etag: "661fb4f3-181c4"
last-modified: Wed, 17 Apr 2024 11:39:31 GMT
server: nginx/1.23.4
vary: Accept-Encoding
content-length: 98756
X-Firefox-Spdy: h2

1wklkbv.com/v3/2431/br/external-marketing/assets/Inter-SemiBold-d6d09054.woff2

94.130.10.163

200 OK

107 kB

URL GET HTTP/2
1wklkbv.com/v3/2431/br/external-marketing/assets/Inter-SemiBold-d6d09054.woff2
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerLet's Encrypt
Subject1wklkbv.com
Fingerprint31:1E:AB:05:30:83:22:A2:A3:33:74:0A:30:AA:E2:C7:B2:7C:F5:CA
ValidityFri, 22 Mar 2024 13:34:29 GMT - Thu, 20 Jun 2024 13:34:28 GMT

File type
Web Open Font Format (Version 2), TrueType, length 106788, version 1.0
Size
107 kB (106788 bytes)
Hash
920533ddd1d6ea543f7fc3e89b4556bb
bc11a427dcb55d1354a5ea07bbc353c57fe9cc0b
d6d0905419e1e821c57189396db46ffe335960bd68befedddaf9e73f3f2e7a3a

HTTP Headers

GET /v3/2431/br/external-marketing/assets/Inter-SemiBold-d6d09054.woff2 HTTP/1.1
Host: 1wklkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://1wklkbv.com/v3/2431/br/external-marketing/assets/index-5d372cb9.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-type: font/woff2
date: Tue, 07 May 2024 17:40:02 GMT
etag: "661fb4f3-1a124"
last-modified: Wed, 17 Apr 2024 11:39:31 GMT
server: nginx/1.23.4
vary: Accept-Encoding
content-length: 106788
X-Firefox-Spdy: h2

www.googletagmanager.com/gtm.js?id=GTM-KGKQDC7

142.250.74.168

200 OK

110 kB

URL GET HTTP/2
www.googletagmanager.com/gtm.js?id=GTM-KGKQDC7
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (50345)
Size
110 kB (109542 bytes)
Hash
4f9bacb93b6533bded2e756f5ea78b77
58c0f0b4ffa2e59d765b38e9ffd94956821deb0f
bd1e38cb75be19e09109a326a94bd5a189c39c45d43d7337c14cce983c2d9995

HTTP Headers

GET /gtm.js?id=GTM-KGKQDC7 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wklkbv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 17:40:02 GMT
expires: Tue, 07 May 2024 17:40:02 GMT
cache-control: private, max-age=900
last-modified: Tue, 07 May 2024 16:44:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 109542
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

1wklkbv.com/v3/2431/br/external-marketing/assets/Inter-Black-1d1374a7.woff2

94.130.10.163

200 OK

104 kB

URL GET HTTP/2
1wklkbv.com/v3/2431/br/external-marketing/assets/Inter-Black-1d1374a7.woff2
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerLet's Encrypt
Subject1wklkbv.com
Fingerprint31:1E:AB:05:30:83:22:A2:A3:33:74:0A:30:AA:E2:C7:B2:7C:F5:CA
ValidityFri, 22 Mar 2024 13:34:29 GMT - Thu, 20 Jun 2024 13:34:28 GMT

File type
Web Open Font Format (Version 2), TrueType, length 103832, version 1.0
Size
104 kB (103832 bytes)
Hash
edf1baa02cd941c61d54610f955f49c6
e40b42fd142c5e04e3babba3def4abc67ff410c4
1d1374a7e2f7a6d506cfcfb4b5bf6edc78801d9dbf58ceb7f5a6b54d5cee5ec4

HTTP Headers

GET /v3/2431/br/external-marketing/assets/Inter-Black-1d1374a7.woff2 HTTP/1.1
Host: 1wklkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://1wklkbv.com/v3/2431/br/external-marketing/assets/index-5d372cb9.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-type: font/woff2
date: Tue, 07 May 2024 17:40:02 GMT
etag: "661fb4f3-19598"
last-modified: Wed, 17 Apr 2024 11:39:31 GMT
server: nginx/1.23.4
vary: Accept-Encoding
content-length: 103832
X-Firefox-Spdy: h2

1wklkbv.com/v3/2431/br/external-marketing/assets/Inter-Medium-a4ad8ac6.woff2

94.130.10.163

200 OK

106 kB

URL GET HTTP/2
1wklkbv.com/v3/2431/br/external-marketing/assets/Inter-Medium-a4ad8ac6.woff2
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerLet's Encrypt
Subject1wklkbv.com
Fingerprint31:1E:AB:05:30:83:22:A2:A3:33:74:0A:30:AA:E2:C7:B2:7C:F5:CA
ValidityFri, 22 Mar 2024 13:34:29 GMT - Thu, 20 Jun 2024 13:34:28 GMT

File type
Web Open Font Format (Version 2), TrueType, length 105944, version 1.0
Size
106 kB (105944 bytes)
Hash
943a67750859470af9d9989ae91aef35
97e6452fe698bf7cbb9ffc164e967c60cb39c7dd
a4ad8ac69b901406c6d29ec3173cbf7b00f4652b997b40033c8c640028a6db1e

HTTP Headers

GET /v3/2431/br/external-marketing/assets/Inter-Medium-a4ad8ac6.woff2 HTTP/1.1
Host: 1wklkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://1wklkbv.com/v3/2431/br/external-marketing/assets/index-5d372cb9.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-type: font/woff2
date: Tue, 07 May 2024 17:40:02 GMT
etag: "661fb4f3-19dd8"
last-modified: Wed, 17 Apr 2024 11:39:31 GMT
server: nginx/1.23.4
vary: Accept-Encoding
content-length: 105944
X-Firefox-Spdy: h2

1wklkbv.com/v3/2431/br/external-marketing/assets/Inter-Bold-04079eb5.woff2

94.130.10.163

200 OK

107 kB

URL GET HTTP/2
1wklkbv.com/v3/2431/br/external-marketing/assets/Inter-Bold-04079eb5.woff2
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerLet's Encrypt
Subject1wklkbv.com
Fingerprint31:1E:AB:05:30:83:22:A2:A3:33:74:0A:30:AA:E2:C7:B2:7C:F5:CA
ValidityFri, 22 Mar 2024 13:34:29 GMT - Thu, 20 Jun 2024 13:34:28 GMT

File type
Web Open Font Format (Version 2), TrueType, length 107236, version 1.0
Size
107 kB (107236 bytes)
Hash
231f444dc08212ed0133d8ea5c95c670
a9fdc76a1229a5db11b54c8790d11458547cd3b9
04079eb5aa58d207bc036c8e55d464ea23947d1b1d48d220ebcd1b7c230f589f

HTTP Headers

GET /v3/2431/br/external-marketing/assets/Inter-Bold-04079eb5.woff2 HTTP/1.1
Host: 1wklkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://1wklkbv.com/v3/2431/br/external-marketing/assets/index-5d372cb9.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-type: font/woff2
date: Tue, 07 May 2024 17:40:02 GMT
etag: "661fb4f3-1a2e4"
last-modified: Wed, 17 Apr 2024 11:39:31 GMT
server: nginx/1.23.4
vary: Accept-Encoding
content-length: 107236
X-Firefox-Spdy: h2

1win-cdn.com/domains/by/filters

154.197.121.128

200 OK

0 B

URL POST HTTP/2
1win-cdn.com/domains/by/filters
IP
154.197.121.128:443
ASN
#328608 Africa-on-Cloud-AS

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint4D:C6:44:3C:1A:1A:11:DB:B7:6E:B5:A9:ED:81:CA:3D:DE:30:40:2A
ValidityFri, 03 May 2024 12:22:54 GMT - Thu, 01 Aug 2024 12:22:53 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

OPTIONS /domains/by/filters HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://1wklkbv.com/
Origin: https://1wklkbv.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 204 No Content
date: Tue, 07 May 2024 17:40:02 GMT
access-control-allow-headers: content-type
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: *
vary: Origin, Access-Control-Request-Headers
x-frame-options: DENY
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=eczchST5053zcxFV8z7TxQ6vR6CHfE_VxuE3beQxL8Q-1715103602-1.0.1.1-xY3lBACWSreBJDS0i48sSCKEc1Nn14XOZvtfbAJnXLPwcKlguQws7i4Jo_._mqdZYJgR8rfgDGRLcdj394vHbA; path=/; expires=Tue, 07-May-24 18:10:02 GMT; domain=.1win-cdn.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 8802fe2e1aa656cc-OSL
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=AW-16482547739&l=dataLayer&cx=c

142.250.74.168

200 OK

90 kB

URL GET HTTP/2
www.googletagmanager.com/gtag/js?id=AW-16482547739&l=dataLayer&cx=c
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT

File type
JavaScript source, ASCII text, with very long lines (4179)
Size
90 kB (90174 bytes)
Hash
7fd0be2f84883eb497d870699a57b9dd
d9701ad3f2e1c237adf48818f85e6f406a1bb04b
accf0115907661c13d5a5d2dd427d79a8481a48fe43ab4e07a722006d57973b4

HTTP Headers

GET /gtag/js?id=AW-16482547739&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wklkbv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 17:40:02 GMT
expires: Tue, 07 May 2024 17:40:02 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 90174
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=G-548949LWLW&l=dataLayer&cx=c

142.250.74.168

200 OK

92 kB

URL GET HTTP/2
www.googletagmanager.com/gtag/js?id=G-548949LWLW&l=dataLayer&cx=c
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT

File type
JavaScript source, ASCII text, with very long lines (5955)
Size
92 kB (91596 bytes)
Hash
3dfaa5aadac94eeeb55a0a1a3066c0d5
9d815ccafaf9f705f11dfa9886acb88a9a59c9ff
ac045b9927d045fd99c18e952276922ddebc1b8a2a993fb09052476e7fe1bf8b

HTTP Headers

GET /gtag/js?id=G-548949LWLW&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wklkbv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 17:40:02 GMT
expires: Tue, 07 May 2024 17:40:02 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 91596
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/destination?id=DC-12688802&l=dataLayer&cx=c

142.250.74.168

200 OK

74 kB

URL GET HTTP/2
www.googletagmanager.com/gtag/destination?id=DC-12688802&l=dataLayer&cx=c
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT

File type
JavaScript source, ASCII text, with very long lines (1822)
Size
74 kB (74098 bytes)
Hash
109c31305a46432d8688b891ca8816ab
6033a95af519446f56789925c0d320c2ac2b5639
70ac549e265b017565a9425d173865ec93467c02e9fbf398459a68f72abb6034

HTTP Headers

GET /gtag/destination?id=DC-12688802&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wklkbv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 17:40:02 GMT
expires: Tue, 07 May 2024 17:40:02 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74098
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

1win.direct/v4/socket.io/?Language=en&xorigin=location.host&EIO=4&transport=websocket

134.122.54.186

0 B

URL
1win.direct/v4/socket.io/?Language=en&xorigin=location.host&EIO=4&transport=websocket
IP
134.122.54.186:0
ASN
#14061 DIGITALOCEAN-ASN

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /v4/socket.io/?Language=en&xorigin=location.host&EIO=4&transport=websocket HTTP/1.1
Host: 1win.direct
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://1wklkbv.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: XFxJDeHogezxNe6sEEsImA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Sec-Websocket-Accept: oazRuIt4EIVHqmNy/FojYKx1jHQ=
Sec-Websocket-Extensions: permessage-deflate
Set-Cookie: core-sticky=ff478d6931481ad2; Path=/; HttpOnly
Upgrade: websocket

kafka-connector.owdp.tech/events

34.242.170.249

204 No Content

0 B

URL POST HTTP/2
kafka-connector.owdp.tech/events
IP
34.242.170.249:443
ASN
#16509 AMAZON-02

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerLet's Encrypt
Subjectkafka-connector.owdp.tech
FingerprintCB:93:53:96:FA:F3:D8:33:0B:36:A7:96:9A:8F:1A:65:0F:C4:C8:88
ValidityMon, 15 Apr 2024 11:47:55 GMT - Sun, 14 Jul 2024 11:47:54 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /events HTTP/1.1
Host: kafka-connector.owdp.tech
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://1wklkbv.com/
Origin: https://1wklkbv.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 204 No Content
date: Tue, 07 May 2024 17:40:03 GMT
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-max-age: 1728000
content-length: 0
X-Firefox-Spdy: h2

kafka-connector.owdp.tech/events

34.242.170.249

204 No Content

0 B

URL POST HTTP/2
kafka-connector.owdp.tech/events
IP
34.242.170.249:443
ASN
#16509 AMAZON-02

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerLet's Encrypt
Subjectkafka-connector.owdp.tech
FingerprintCB:93:53:96:FA:F3:D8:33:0B:36:A7:96:9A:8F:1A:65:0F:C4:C8:88
ValidityMon, 15 Apr 2024 11:47:55 GMT - Sun, 14 Jul 2024 11:47:54 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /events HTTP/1.1
Host: kafka-connector.owdp.tech
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 335
Origin: https://1wklkbv.com
DNT: 1
Connection: keep-alive
Referer: https://1wklkbv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 204 No Content
date: Tue, 07 May 2024 17:40:03 GMT
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-max-age: 1728000
X-Firefox-Spdy: h2

1wklkbv.com/v3/2431/br/external-marketing/favicon/favicon.svg

94.130.10.163

200 OK

528 B

URL GET HTTP/2
1wklkbv.com/v3/2431/br/external-marketing/favicon/favicon.svg
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerLet's Encrypt
Subject1wklkbv.com
Fingerprint31:1E:AB:05:30:83:22:A2:A3:33:74:0A:30:AA:E2:C7:B2:7C:F5:CA
ValidityFri, 22 Mar 2024 13:34:29 GMT - Thu, 20 Jun 2024 13:34:28 GMT

File type
SVG Scalable Vector Graphics image
Size
528 B (528 bytes)
Hash
d2260239c47a557dc50312dc01cbad3f
dac1c20799be1d52a444de7c1838d4e38fc06c93
da27421d59a3829fd6292f822eed7c6b1b7a745870d6b736dc67220627d9d656

HTTP Headers

GET /v3/2431/br/external-marketing/favicon/favicon.svg HTTP/1.1
Host: 1wklkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Cookie: _gcl_au=1.1.700998733.1715103603; _ga_548949LWLW=GS1.1.1715103603.1.0.1715103603.60.0.0; _ga=GA1.1.428892762.1715103603
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-type: image/svg+xml
date: Tue, 07 May 2024 17:40:03 GMT
etag: "661fb4f2-5b5"
last-modified: Wed, 17 Apr 2024 11:39:30 GMT
server: nginx/1.23.4
vary: Accept-Encoding
content-length: 528
X-Firefox-Spdy: h2

www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-548949LWLW&cid=428892762.1715103603&gtm=45je4560v894728184z8894400803za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3lPl2l1&npa=1&z=1700537972

142.250.74.163

200 OK

42 B

URL GET HTTP/2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-548949LWLW&cid=428892762.1715103603&gtm=45je4560v894728184z8894400803za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3lPl2l1&npa=1&z=1700537972
IP
142.250.74.163:443
ASN
#15169 GOOGLE

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.no
Fingerprint7D:68:6D:B1:32:34:52:51:20:C9:53:FF:B9:B7:8F:7E:05:F9:F5:97
ValidityTue, 16 Apr 2024 04:31:00 GMT - Tue, 09 Jul 2024 04:30:59 GMT

File type
GIF image data, version 89a, 1 x 1
Size
42 B (42 bytes)
Hash
d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

HTTP Headers

GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-548949LWLW&cid=428892762.1715103603&gtm=45je4560v894728184z8894400803za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3lPl2l1&npa=1&z=1700537972 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wklkbv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 07 May 2024 17:40:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

1wklkbv.com/v3/2431/br/external-marketing/favicon/android-icon-512x512.png

94.130.10.163

200 OK

16 kB

URL GET HTTP/2
1wklkbv.com/v3/2431/br/external-marketing/favicon/android-icon-512x512.png
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerLet's Encrypt
Subject1wklkbv.com
Fingerprint31:1E:AB:05:30:83:22:A2:A3:33:74:0A:30:AA:E2:C7:B2:7C:F5:CA
ValidityFri, 22 Mar 2024 13:34:29 GMT - Thu, 20 Jun 2024 13:34:28 GMT

File type
gzip compressed data
Size
16 kB (15624 bytes)
Hash
c819a6839e0dbfe56c3bb1e4ed0795f0
f2a0949c97ca2cf1dd947c49b5c488fa49e9f1f8
af11fb3d27384b5d2ea3594025b965652747c2410e1d1d20de450ca840382422

HTTP Headers

GET /v3/2431/br/external-marketing/favicon/android-icon-512x512.png HTTP/1.1
Host: 1wklkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Cookie: _gcl_au=1.1.700998733.1715103603; _ga_548949LWLW=GS1.1.1715103603.1.0.1715103603.60.0.0; _ga=GA1.1.428892762.1715103603
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-type: image/png
date: Tue, 07 May 2024 17:40:03 GMT
etag: "661fb4f2-2b40"
last-modified: Wed, 17 Apr 2024 11:39:30 GMT
server: nginx/1.23.4
vary: Accept-Encoding
X-Firefox-Spdy: h2

region1.analytics.google.com/g/collect?v=2&tid=G-548949LWLW&gtm=45je4560v894728184z8894400803za200&_p=1715103602356&_gaz=1&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=428892762.1715103603&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&dp=%2Fv3%2F2431%2Fbr%2Fexternal-marketing&sid=1715103603&sct=1&seg=0&dl=https%3A%2F%2F1wklkbv.com%2Fv3%2F2431%2Fbr%2Fexternal-marketing%3Flang%3Dpt%26sub1%3Derv6nc65gd01&dt=1win&en=page_view&_fv=1&_nsi=1&_ss=1&ep.page_url=https%3A%2F%2F1wklkbv.com%2Fv3%2F2431%2Fbr%2Fexternal-marketing%3Flang%3Dpt%26sub1%3Derv6nc65gd01&tfd=1439

216.239.32.36

204 No Content

0 B

URL POST HTTP/2
region1.analytics.google.com/g/collect?v=2&tid=G-548949LWLW&gtm=45je4560v894728184z8894400803za200&_p=1715103602356&_gaz=1&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=428892762.1715103603&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&dp=%2Fv3%2F2431%2Fbr%2Fexternal-marketing&sid=1715103603&sct=1&seg=0&dl=https%3A%2F%2F1wklkbv.com%2Fv3%2F2431%2Fbr%2Fexternal-marketing%3Flang%3Dpt%26sub1%3Derv6nc65gd01&dt=1win&en=page_view&_fv=1&_nsi=1&_ss=1&ep.page_url=https%3A%2F%2F1wklkbv.com%2Fv3%2F2431%2Fbr%2Fexternal-marketing%3Flang%3Dpt%26sub1%3Derv6nc65gd01&tfd=1439
IP
216.239.32.36:443
ASN
#15169 GOOGLE

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /g/collect?v=2&tid=G-548949LWLW&gtm=45je4560v894728184z8894400803za200&_p=1715103602356&_gaz=1&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=428892762.1715103603&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&dp=%2Fv3%2F2431%2Fbr%2Fexternal-marketing&sid=1715103603&sct=1&seg=0&dl=https%3A%2F%2F1wklkbv.com%2Fv3%2F2431%2Fbr%2Fexternal-marketing%3Flang%3Dpt%26sub1%3Derv6nc65gd01&dt=1win&en=page_view&_fv=1&_nsi=1&_ss=1&ep.page_url=https%3A%2F%2F1wklkbv.com%2Fv3%2F2431%2Fbr%2Fexternal-marketing%3Flang%3Dpt%26sub1%3Derv6nc65gd01&tfd=1439 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1wklkbv.com
DNT: 1
Connection: keep-alive
Referer: https://1wklkbv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

HTTP/2 204 No Content
access-control-allow-origin: https://1wklkbv.com
date: Tue, 07 May 2024 17:40:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

kafka-connector.owdp.tech/events

34.242.170.249

204 No Content

0 B

URL POST HTTP/2
kafka-connector.owdp.tech/events
IP
34.242.170.249:443
ASN
#16509 AMAZON-02

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerLet's Encrypt
Subjectkafka-connector.owdp.tech
FingerprintCB:93:53:96:FA:F3:D8:33:0B:36:A7:96:9A:8F:1A:65:0F:C4:C8:88
ValidityMon, 15 Apr 2024 11:47:55 GMT - Sun, 14 Jul 2024 11:47:54 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /events HTTP/1.1
Host: kafka-connector.owdp.tech
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://1wklkbv.com/
Origin: https://1wklkbv.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 204 No Content
date: Tue, 07 May 2024 17:40:04 GMT
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-max-age: 1728000
content-length: 0
X-Firefox-Spdy: h2

kafka-connector.owdp.tech/events

34.242.170.249

204 No Content

0 B

URL POST HTTP/2
kafka-connector.owdp.tech/events
IP
34.242.170.249:443
ASN
#16509 AMAZON-02

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerLet's Encrypt
Subjectkafka-connector.owdp.tech
FingerprintCB:93:53:96:FA:F3:D8:33:0B:36:A7:96:9A:8F:1A:65:0F:C4:C8:88
ValidityMon, 15 Apr 2024 11:47:55 GMT - Sun, 14 Jul 2024 11:47:54 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /events HTTP/1.1
Host: kafka-connector.owdp.tech
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 301
Origin: https://1wklkbv.com
DNT: 1
Connection: keep-alive
Referer: https://1wklkbv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 204 No Content
date: Tue, 07 May 2024 17:40:04 GMT
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-max-age: 1728000
X-Firefox-Spdy: h2

region1.analytics.google.com/g/collect?v=2&tid=G-548949LWLW&gtm=45je4560v894728184z8894400803za200&_p=1715103602356&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=428892762.1715103603&ul=en-us&sr=1280x1024&pscdl=noapi&dp=%2Fv3%2F2431%2Fbr%2Fexternal-marketing&sid=1715103603&sct=1&seg=0&dl=https%3A%2F%2F1wklkbv.com%2Fv3%2F2431%2Fbr%2Fexternal-marketing%3Flang%3Dpt%26sub1%3Derv6nc65gd01&dt=1win&_s=2&tfd=2942

216.239.32.36

204 No Content

0 B

URL POST HTTP/3
region1.analytics.google.com/g/collect?v=2&tid=G-548949LWLW&gtm=45je4560v894728184z8894400803za200&_p=1715103602356&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=428892762.1715103603&ul=en-us&sr=1280x1024&pscdl=noapi&dp=%2Fv3%2F2431%2Fbr%2Fexternal-marketing&sid=1715103603&sct=1&seg=0&dl=https%3A%2F%2F1wklkbv.com%2Fv3%2F2431%2Fbr%2Fexternal-marketing%3Flang%3Dpt%26sub1%3Derv6nc65gd01&dt=1win&_s=2&tfd=2942
IP
216.239.32.36:443
ASN
#15169 GOOGLE

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /g/collect?v=2&tid=G-548949LWLW&gtm=45je4560v894728184z8894400803za200&_p=1715103602356&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=428892762.1715103603&ul=en-us&sr=1280x1024&pscdl=noapi&dp=%2Fv3%2F2431%2Fbr%2Fexternal-marketing&sid=1715103603&sct=1&seg=0&dl=https%3A%2F%2F1wklkbv.com%2Fv3%2F2431%2Fbr%2Fexternal-marketing%3Flang%3Dpt%26sub1%3Derv6nc65gd01&dt=1win&_s=2&tfd=2942 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 403
Origin: https://1wklkbv.com
DNT: 1
Connection: keep-alive
Referer: https://1wklkbv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/3 204 No Content
access-control-allow-origin: https://1wklkbv.com
date: Tue, 07 May 2024 17:40:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

region1.analytics.google.com/g/collect?v=2&tid=G-548949LWLW&gtm=45je4560v894728184za200&_p=1715103602356&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=428892762.1715103603&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AEA&_s=3&dp=%2Fv3%2F2431%2Fbr%2Fexternal-marketing&dl=https%3A%2F%2F1wklkbv.com%2Fv3%2F2431%2Fbr%2Fexternal-marketing%3Flang%3Dpt%26&dr=https%3A%2F%2F1wklkbv.com%2Fv3%2F2431%2Fbr%2Fexternal-marketing%3Flang%3Dpt%26sub1%3Derv6nc65gd01&sid=1715103603&sct=1&seg=1&dt=1win&en=page_view&ep.page_url=https%3A%2F%2F1wklkbv.com%2Fv3%2F2431%2Fbr%2Fexternal-marketing%3Flang%3Dpt%26sub1%3Derv6nc65gd01&tfd=7943

216.239.32.36

204 No Content

0 B

URL POST HTTP/3
region1.analytics.google.com/g/collect?v=2&tid=G-548949LWLW&gtm=45je4560v894728184za200&_p=1715103602356&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=428892762.1715103603&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AEA&_s=3&dp=%2Fv3%2F2431%2Fbr%2Fexternal-marketing&dl=https%3A%2F%2F1wklkbv.com%2Fv3%2F2431%2Fbr%2Fexternal-marketing%3Flang%3Dpt%26&dr=https%3A%2F%2F1wklkbv.com%2Fv3%2F2431%2Fbr%2Fexternal-marketing%3Flang%3Dpt%26sub1%3Derv6nc65gd01&sid=1715103603&sct=1&seg=1&dt=1win&en=page_view&ep.page_url=https%3A%2F%2F1wklkbv.com%2Fv3%2F2431%2Fbr%2Fexternal-marketing%3Flang%3Dpt%26sub1%3Derv6nc65gd01&tfd=7943
IP
216.239.32.36:443
ASN
#15169 GOOGLE

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /g/collect?v=2&tid=G-548949LWLW&gtm=45je4560v894728184za200&_p=1715103602356&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=428892762.1715103603&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AEA&_s=3&dp=%2Fv3%2F2431%2Fbr%2Fexternal-marketing&dl=https%3A%2F%2F1wklkbv.com%2Fv3%2F2431%2Fbr%2Fexternal-marketing%3Flang%3Dpt%26&dr=https%3A%2F%2F1wklkbv.com%2Fv3%2F2431%2Fbr%2Fexternal-marketing%3Flang%3Dpt%26sub1%3Derv6nc65gd01&sid=1715103603&sct=1&seg=1&dt=1win&en=page_view&ep.page_url=https%3A%2F%2F1wklkbv.com%2Fv3%2F2431%2Fbr%2Fexternal-marketing%3Flang%3Dpt%26sub1%3Derv6nc65gd01&tfd=7943 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1wklkbv.com
DNT: 1
Connection: keep-alive
Referer: https://1wklkbv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

HTTP/3 204 No Content
access-control-allow-origin: https://1wklkbv.com
date: Tue, 07 May 2024 17:40:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

1wprru.life/affiliate:link_visit?visit_domain=1wklkbv.com&sub_ids=sub1%3Derv6nc65gd01

190.115.24.78

200 OK

5.0 kB

URL OPTIONS HTTP/2
1wprru.life/affiliate:link_visit?visit_domain=1wklkbv.com&sub_ids=sub1%3Derv6nc65gd01
IP
190.115.24.78:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerLet's Encrypt
Subject1wprru.life
Fingerprint4D:52:14:56:09:A2:86:CB:A9:65:1C:A7:15:F3:98:2E:E4:BD:70:E1
ValidityThu, 25 Apr 2024 16:35:27 GMT - Wed, 24 Jul 2024 16:35:26 GMT

File type
gzip compressed data, from Unix
Size
5.0 kB (5047 bytes)
Hash
11d72a39c5b82f2f652782f814c7c5a1
13c951a3dcb5dedbbc7a09833929e792c1755567
03f6b27ab136c8b8481527fd3a5988a832a137a09f2d4c5acddb493839939c33

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /affiliate:link_visit?visit_domain=1wklkbv.com&sub_ids=sub1%3Derv6nc65gd01 HTTP/1.1
Host: 1wprru.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-origin: 1wklkbv.com
Origin: https://1wklkbv.com
DNT: 1
Connection: keep-alive
Referer: https://1wklkbv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: ddos-guard
date: Tue, 07 May 2024 17:40:03 GMT
content-type: application/json; charset=utf-8
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Authorization, X-Origin
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-origin: https://1wklkbv.com
access-control-expose-headers: Authorization
access-control-max-age: 7200
etag: W/"25-Zj67mG54TfZ031q1ea2QwFUXWX4"
set-cookie: __ddg1_=ta8cqj6HSrqr2oPZXQkC; Domain=.1wprru.life; HttpOnly; Path=/; Expires=Wed, 07-May-2025 17:40:03 GMT
core-sticky=http://10.233.84.5:80; Path=/; HttpOnly
x-powered-by: Express
x-frame-options: ALLOW-FROM   ww.1win.run 1win.run www.1win.work 1win.work www.1w.run 1w.run www.1wip.best 1wip.best www.1wint.run 1wint.run www.1winr.run 1winr.run www.1wind.run 1wind.run www.1wins.run 1wins.run www.1w.fan 1w.fan www.1win.team 1win.team www.1win.partners 1win.partners 1wip.best www.1wip.best 1wint.run www.1wint.run 1winr.run www.1winr.run 1wind.run www.1wind.run 1wins.run www.1wins.run 1w.fan www.1w.fan, ALLOW-FROM 1win-partner.com  ww.1win.run 1win.run www.1win.work 1win.work www.1w.run 1w.run www.1wip.best 1wip.best www.1wint.run 1wint.run www.1winr.run 1winr.run www.1wind.run 1wind.run www.1wins.run 1wins.run www.1w.fan 1w.fan www.1win.team 1win.team www.1win.partners 1win.partners 1wip.best www.1wip.best 1wint.run www.1wint.run 1winr.run www.1winr.run 1wind.run www.1wind.run 1wins.run www.1wins.run 1w.fan www.1w.fan
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2

1wklkbv.com/v3/2431/br/external-marketing/flags/flags.svg

94.130.10.163

200 OK

194 kB

URL GET HTTP/2
1wklkbv.com/v3/2431/br/external-marketing/flags/flags.svg
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerLet's Encrypt
Subject1wklkbv.com
Fingerprint31:1E:AB:05:30:83:22:A2:A3:33:74:0A:30:AA:E2:C7:B2:7C:F5:CA
ValidityFri, 22 Mar 2024 13:34:29 GMT - Thu, 20 Jun 2024 13:34:28 GMT

File type
SVG Scalable Vector Graphics image
Size
194 kB (194332 bytes)
Hash
a92bcc34e96e6149bbbf43a1bc9c52d8
cebda3ba8b9260a4de36e6f8ab10e4f192c882bc
46f7c85353be615eb961fca31f10d696cc75f317786b29fc250028fd70a081e7

HTTP Headers

GET /v3/2431/br/external-marketing/flags/flags.svg HTTP/1.1
Host: 1wklkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-type: image/svg+xml
date: Tue, 07 May 2024 17:40:02 GMT
etag: "661fb4f2-2f71c"
last-modified: Wed, 17 Apr 2024 11:39:30 GMT
server: nginx/1.23.4
vary: Accept-Encoding
X-Firefox-Spdy: h2

1wklkbv.com/v3/2431/br/external-marketing/assets/badge-bg-e1fcd70b.svg

94.130.10.163

200 OK

683 B

URL GET HTTP/2
1wklkbv.com/v3/2431/br/external-marketing/assets/badge-bg-e1fcd70b.svg
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerLet's Encrypt
Subject1wklkbv.com
Fingerprint31:1E:AB:05:30:83:22:A2:A3:33:74:0A:30:AA:E2:C7:B2:7C:F5:CA
ValidityFri, 22 Mar 2024 13:34:29 GMT - Thu, 20 Jun 2024 13:34:28 GMT

File type
SVG Scalable Vector Graphics image
Size
683 B (683 bytes)
Hash
131fb43b426a517c04e6121a2fd92105
ba6d013d8e3a6cdd891fb1b71bbc379af4939f11
5eef3f75903e0857c0586910a3e92f2c00a02af458fa4abb2a282a03d6efc2e9

HTTP Headers

GET /v3/2431/br/external-marketing/assets/badge-bg-e1fcd70b.svg HTTP/1.1
Host: 1wklkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wklkbv.com/v3/2431/br/external-marketing/assets/index-5d372cb9.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-type: image/svg+xml
date: Tue, 07 May 2024 17:40:02 GMT
etag: "661fb4f3-2ab"
last-modified: Wed, 17 Apr 2024 11:39:31 GMT
server: nginx/1.23.4
vary: Accept-Encoding
content-length: 457
X-Firefox-Spdy: h2

1wklkbv.com/v3/2431/br/external-marketing/assets/girl-tablet-1024-d19fe06a.avif

94.130.10.163

200 OK

25 kB

URL GET HTTP/2
1wklkbv.com/v3/2431/br/external-marketing/assets/girl-tablet-1024-d19fe06a.avif
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerLet's Encrypt
Subject1wklkbv.com
Fingerprint31:1E:AB:05:30:83:22:A2:A3:33:74:0A:30:AA:E2:C7:B2:7C:F5:CA
ValidityFri, 22 Mar 2024 13:34:29 GMT - Thu, 20 Jun 2024 13:34:28 GMT

File type
ISO Media, AVIF Image
Size
25 kB (25381 bytes)
Hash
24c4b93cc5e4ebb6f4272e62d46fd83e
2b306914efad306f4fab602dbbd2069f99ccf65d
d19fe06a63037d93665f30fec9dcb140d95a79b8ff94da4330b111491fab6e4d

HTTP Headers

GET /v3/2431/br/external-marketing/assets/girl-tablet-1024-d19fe06a.avif HTTP/1.1
Host: 1wklkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wklkbv.com/v3/2431/br/external-marketing/assets/index-5d372cb9.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-type: image/avif
date: Tue, 07 May 2024 17:40:02 GMT
etag: "661fb4f3-6325"
last-modified: Wed, 17 Apr 2024 11:39:31 GMT
server: nginx/1.23.4
vary: Accept-Encoding
X-Firefox-Spdy: h2

1wprru.life/

190.115.24.78

200 OK

438 kB

URL GET HTTP/2
1wprru.life/
IP
190.115.24.78:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerLet's Encrypt
Subject1wprru.life
Fingerprint4D:52:14:56:09:A2:86:CB:A9:65:1C:A7:15:F3:98:2E:E4:BD:70:E1
ValidityThu, 25 Apr 2024 16:35:27 GMT - Wed, 24 Jul 2024 16:35:26 GMT

File type

Size
438 kB (438150 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 1wprru.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1wklkbv.com/
Origin: https://1wklkbv.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg1_=l5c6BKLi8SrmV3SOGPfx; Domain=.1wprru.life; HttpOnly; Path=/; Expires=Wed, 07-May-2025 17:40:03 GMT
date: Tue, 07 May 2024 17:40:03 GMT
content-type: text/html; charset=utf-8
x-request-id: X7KaF2IFKnRaW4Gk
vary: Origin
access-control-allow-origin: https://1wklkbv.com
access-control-allow-credentials: true
x-match-domain: 1wklkbv.com
x-frame-options: ALLOW-FROM   ww.1win.run 1win.run www.1win.work 1win.work www.1w.run 1w.run www.1wip.best 1wip.best www.1wint.run 1wint.run www.1winr.run 1winr.run www.1wind.run 1wind.run www.1wins.run 1wins.run www.1w.fan 1w.fan www.1win.team 1win.team www.1win.partners 1win.partners 1wip.best www.1wip.best 1wint.run www.1wint.run 1winr.run www.1winr.run 1wind.run www.1wind.run 1wins.run www.1wins.run 1w.fan www.1w.fan, ALLOW-FROM 1win-partner.com  ww.1win.run 1win.run www.1win.work 1win.work www.1w.run 1w.run www.1wip.best 1wip.best www.1wint.run 1wint.run www.1winr.run 1winr.run www.1wind.run 1wind.run www.1wins.run 1wins.run www.1w.fan 1w.fan www.1win.team 1win.team www.1win.partners 1win.partners 1wip.best www.1wip.best 1wint.run www.1wint.run 1winr.run www.1winr.run 1wind.run www.1wind.run 1wins.run www.1wins.run 1w.fan www.1w.fan
content-encoding: gzip
X-Firefox-Spdy: h2

1wklkbv.com/v3/2431/br/external-marketing/assets/star-3f49e448.svg

94.130.10.163

200 OK

431 B

URL GET HTTP/2
1wklkbv.com/v3/2431/br/external-marketing/assets/star-3f49e448.svg
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerLet's Encrypt
Subject1wklkbv.com
Fingerprint31:1E:AB:05:30:83:22:A2:A3:33:74:0A:30:AA:E2:C7:B2:7C:F5:CA
ValidityFri, 22 Mar 2024 13:34:29 GMT - Thu, 20 Jun 2024 13:34:28 GMT

File type
SVG Scalable Vector Graphics image
Size
431 B (431 bytes)
Hash
357c73f48bd258a20703a6ba5083849f
c1483764293b0fba56f61e55f4cec894bb30daf2
5eb8b40023f5c7e204e43bacf42ca633b26f706783fc3468e5f99a6bcced04be

HTTP Headers

GET /v3/2431/br/external-marketing/assets/star-3f49e448.svg HTTP/1.1
Host: 1wklkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wklkbv.com/v3/2431/br/external-marketing/assets/index-5d372cb9.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-type: image/svg+xml
date: Tue, 07 May 2024 17:40:02 GMT
etag: "661fb4f3-1af"
last-modified: Wed, 17 Apr 2024 11:39:31 GMT
server: nginx/1.23.4
vary: Accept-Encoding
content-length: 431
X-Firefox-Spdy: h2

1wklkbv.com/v3/2431/br/external-marketing/assets/racket-left-tablet-768-2a1536de.avif

94.130.10.163

200 OK

6.5 kB

URL GET HTTP/2
1wklkbv.com/v3/2431/br/external-marketing/assets/racket-left-tablet-768-2a1536de.avif
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerLet's Encrypt
Subject1wklkbv.com
Fingerprint31:1E:AB:05:30:83:22:A2:A3:33:74:0A:30:AA:E2:C7:B2:7C:F5:CA
ValidityFri, 22 Mar 2024 13:34:29 GMT - Thu, 20 Jun 2024 13:34:28 GMT

File type
ISO Media, AVIF Image
Size
6.5 kB (6470 bytes)
Hash
02bb2b0662747cc7f190510665bc2766
b8eef192d0d2f6d635d763f6c276b9d4cd1d6181
2a1536dec00b0ec3d3063400280ea1290f056e4f65a38d0cf3d81232ec2fe74f

HTTP Headers

GET /v3/2431/br/external-marketing/assets/racket-left-tablet-768-2a1536de.avif HTTP/1.1
Host: 1wklkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wklkbv.com/v3/2431/br/external-marketing/assets/index-5d372cb9.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-type: image/avif
date: Tue, 07 May 2024 17:40:02 GMT
etag: "661fb4f3-1946"
last-modified: Wed, 17 Apr 2024 11:39:31 GMT
server: nginx/1.23.4
vary: Accept-Encoding
X-Firefox-Spdy: h2

1wklkbv.com/v3/2431/br/external-marketing/assets/index-5d372cb9.css

94.130.10.163

200 OK

137 kB

URL GET HTTP/2
1wklkbv.com/v3/2431/br/external-marketing/assets/index-5d372cb9.css
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerLet's Encrypt
Subject1wklkbv.com
Fingerprint31:1E:AB:05:30:83:22:A2:A3:33:74:0A:30:AA:E2:C7:B2:7C:F5:CA
ValidityFri, 22 Mar 2024 13:34:29 GMT - Thu, 20 Jun 2024 13:34:28 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
137 kB (136943 bytes)
Hash
c81cac529cb09ab89321a75e141e0d45
185432078271f83526f8dcf4f7d7e8acc117c240
5d372cb95c04fd5b2c34790d6b8679f6dd5796cb27db5c83b68940c568d4bbd1

HTTP Headers

GET /v3/2431/br/external-marketing/assets/index-5d372cb9.css HTTP/1.1
Host: 1wklkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-type: text/css
date: Tue, 07 May 2024 17:40:02 GMT
etag: "661fb4f3-216ef"
last-modified: Wed, 17 Apr 2024 11:39:31 GMT
server: nginx/1.23.4
vary: Accept-Encoding
X-Firefox-Spdy: h2

1wklkbv.com/v3/2431/br/external-marketing/assets/racket-right-tablet-1024-e8e95cbf.avif

94.130.10.163

200 OK

14 kB

URL GET HTTP/2
1wklkbv.com/v3/2431/br/external-marketing/assets/racket-right-tablet-1024-e8e95cbf.avif
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerLet's Encrypt
Subject1wklkbv.com
Fingerprint31:1E:AB:05:30:83:22:A2:A3:33:74:0A:30:AA:E2:C7:B2:7C:F5:CA
ValidityFri, 22 Mar 2024 13:34:29 GMT - Thu, 20 Jun 2024 13:34:28 GMT

File type
ISO Media, AVIF Image
Size
14 kB (14197 bytes)
Hash
6dcc68dc6324a026ab508bff5768f692
b6195dbdb54faeb1c282251b078df740934f7130
e8e95cbff2326f2d86274faff7316bd42788a97692e99666fe011a3f251a2521

HTTP Headers

GET /v3/2431/br/external-marketing/assets/racket-right-tablet-1024-e8e95cbf.avif HTTP/1.1
Host: 1wklkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wklkbv.com/v3/2431/br/external-marketing/assets/index-5d372cb9.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-type: image/avif
date: Tue, 07 May 2024 17:40:02 GMT
etag: "661fb4f3-3775"
last-modified: Wed, 17 Apr 2024 11:39:31 GMT
server: nginx/1.23.4
vary: Accept-Encoding
X-Firefox-Spdy: h2

1wklkbv.com/v3/2431/br/external-marketing/assets/ball-tablet-1024-2cf1b1d8.avif

94.130.10.163

200 OK

9.3 kB

URL GET HTTP/2
1wklkbv.com/v3/2431/br/external-marketing/assets/ball-tablet-1024-2cf1b1d8.avif
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerLet's Encrypt
Subject1wklkbv.com
Fingerprint31:1E:AB:05:30:83:22:A2:A3:33:74:0A:30:AA:E2:C7:B2:7C:F5:CA
ValidityFri, 22 Mar 2024 13:34:29 GMT - Thu, 20 Jun 2024 13:34:28 GMT

File type
ISO Media, AVIF Image
Size
9.3 kB (9285 bytes)
Hash
0b4fca4960e45bc16364d28c258a30e1
914a4e25ef34b5650eacbf7aaa85db8fea6dba62
2cf1b1d8eb61b4f2cf3276106c97f25a4bd2e8bdecbdb0a878f9c3d1f19bb3fb

HTTP Headers

GET /v3/2431/br/external-marketing/assets/ball-tablet-1024-2cf1b1d8.avif HTTP/1.1
Host: 1wklkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1wklkbv.com/v3/2431/br/external-marketing/assets/index-5d372cb9.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-type: image/avif
date: Tue, 07 May 2024 17:40:02 GMT
etag: "661fb4f3-2445"
last-modified: Wed, 17 Apr 2024 11:39:31 GMT
server: nginx/1.23.4
vary: Accept-Encoding
X-Firefox-Spdy: h2

1win.direct/v4/socket.io/?Language=en&xorigin=location.host&EIO=4&transport=websocket

134.122.54.186

101 Switching Protocols

0 B

URL GET HTTP/1.1
1win.direct/v4/socket.io/?Language=en&xorigin=location.host&EIO=4&transport=websocket
IP
134.122.54.186:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://1wklkbv.com/v3/2431/br/external-marketing?lang=pt&sub1=erv6nc65gd01
Certificate
IssuerLet's Encrypt
Subject*.1win.direct
Fingerprint52:A8:ED:F5:F8:3D:CF:F0:55:C1:2A:96:EA:32:49:27:6C:D8:26:27
ValiditySun, 17 Mar 2024 06:46:18 GMT - Sat, 15 Jun 2024 06:46:17 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /v4/socket.io/?Language=en&xorigin=location.host&EIO=4&transport=websocket HTTP/1.1
Host: 1win.direct
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://1wklkbv.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: XFxJDeHogezxNe6sEEsImA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Sec-Websocket-Accept: oazRuIt4EIVHqmNy/FojYKx1jHQ=
Sec-Websocket-Extensions: permessage-deflate
Set-Cookie: core-sticky=ff478d6931481ad2; Path=/; HttpOnly
Upgrade: websocket

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (22)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by