{"report_id":"21c31d47-1465-4c47-98ad-5c7de4c43ecd","version":0,"status":"done","tags":[],"date":"2026-09-01T20:54:30Z","url":{"schema":"http","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":0,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"title":"Online Casino \u0026 Sports Betting | 1win - 173599.8214677781","dom":{"size":848615,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16965)","md5":"befc31ed8170df0c9d7c598875ae3756","sha1":"64b7167386f5788730c0733a4863c935c5dcb7a7","sha256":"42cb9a2a19c1be2dde18a159ab4883c960698872d6508cbb6df12ef8bac8b3ed","sha512":"4d55cfaebd2e2fd5e2c2146e04f8de6ae2ddadb5b3a1acbdf05a882c540cc6812ed62108515471df1c7580b7974662091f154da185e1685955a150e9d899e0b5","ssdeep":"6144:cZvXylXNxuhcOvN7Xj6QmUzfaLJhgMbgM3ggMdFEF8i57NyBxMei6Cvz:aylXNxuhcO17XjZf8vz","tlshash":"5d051870ba60f03dea739c2673ce6a5d6018e416ca1386ede61916284bd7ff313d1b19","dom_hash":"domhashab4afbab6e70db30ca906cfedc8faf0f","first_seen":"2026-09-01T20:54:52.57104Z","last_seen":"2026-09-01T20:54:52.57104Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":0,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-06T20:54:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"1wfqxn.life","ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-19T04:49:10.750483Z","last_seen":"2026-09-01T20:25:57.407077Z","alert_count":1056,"request_count":265,"received_data":3904135,"sent_data":434134,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"d21deilz814qgl.cloudfront.net","ip":{"addr":"143.204.238.66","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2026-07-31T06:20:00.471728Z","last_seen":"2026-08-30T23:25:00.343809Z","alert_count":0,"request_count":10,"received_data":558310,"sent_data":5751,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"v3.bundlecdn.com","ip":{"addr":"194.67.193.128","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"domain_registered":"2024-07-24","domain_rank":2867515,"first_seen":"2025-06-07T11:34:20.833779Z","last_seen":"2026-08-28T05:09:43.644259Z","alert_count":0,"request_count":2,"received_data":712,"sent_data":886,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"flowmetric.life","ip":{"addr":"194.67.193.200","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-09T19:09:33.354052Z","last_seen":"2026-08-28T05:09:43.995103Z","alert_count":0,"request_count":2,"received_data":2770,"sent_data":1208,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-08-30T23:53:14.545992Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":814,"comment":"","tags":null,"fingerprints":null},{"fqdn":"libs.smrtwheel.com","ip":{"addr":"194.67.193.67","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"domain_registered":"2026-05-20","domain_rank":0,"first_seen":"2026-05-24T17:27:24.428729Z","last_seen":"2026-08-30T07:38:02.262243Z","alert_count":0,"request_count":1,"received_data":444609,"sent_data":450,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-30T22:35:21.728174Z","alert_count":0,"request_count":2,"received_data":961403,"sent_data":964,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"img.smrtwheel.com","ip":{"addr":"194.67.193.67","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"domain_registered":"2026-05-20","domain_rank":0,"first_seen":"2026-06-06T18:38:49.251336Z","last_seen":"2026-09-01T10:18:32.664125Z","alert_count":0,"request_count":2,"received_data":34039,"sent_data":1177,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"optimize.v3.bundlecdn.com","ip":{"addr":"194.67.193.128","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"domain_registered":"2024-07-24","domain_rank":3006843,"first_seen":"2025-05-18T10:30:17.412331Z","last_seen":"2026-08-30T18:32:56.657649Z","alert_count":0,"request_count":8,"received_data":330803,"sent_data":5296,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-08-30T22:54:14.488664Z","alert_count":0,"request_count":1,"received_data":540,"sent_data":933,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bundlecda.com","ip":{"addr":"194.67.193.4","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"domain_registered":"2024-11-13","domain_rank":845741,"first_seen":"2025-04-14T03:06:20.310116Z","last_seen":"2026-08-28T05:09:43.133478Z","alert_count":0,"request_count":2,"received_data":2033,"sent_data":1593,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-path-based-route-matcher-u_WwO7dQ.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5e9cc4a439a5cca68fea1fddcc5e36c","sha1":"c1839917cf0caa4d8206b3fdb68740df262ca5df","sha256":"1a1b7d4a81390490d7f41d902903a805172bc6d903c64c5c204336a970597f22","sha512":"cf172a66cf1cd20a15ebc2d55b3194e6f2c52cd083e0b8b7ddb09bfde4cf0d294fd9d984fc240dc25f7a9d8fafe0b23563642842e77d9994d040fa52fdeb4eb5","ssdeep":"","tlshash":"ef11d4a511e7d1a09721de8491304037f42a5dd93509e6e0eafd6e32ee17e43d07ee2d","size":952,"data":"","first_seen":"2026-07-29T05:21:14.894571Z","last_seen":"2026-09-02T23:44:25.545436Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/calendar-CtMt1wrH.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"29b370c63f513310a83c2b78ec4741fb","sha1":"c7aecc7e20e1740e389d8ac6212e29aa57235817","sha256":"05a0b1069ee7490e3567e2aa8534701bf37670dc5a60d100f1957147629a701b","sha512":"de584a0367361b5f4c37c953e40a07eb4e7aea98ea3903d8f2f67f8a0de93f9265da969b2e4e6c33cc874d483e4783e2b0a1afd42be8ec72715a0ed93c29732c","ssdeep":"","tlshash":"de21eeb2571c66ac46db23bbcf19fca0934498e832079265d38e57e505cb156ef0f805","size":1174,"data":"","first_seen":"2026-08-28T05:09:58.555742Z","last_seen":"2026-09-01T20:54:52.771069Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/video-BoYY2GeR.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac7477c9ba6ed64944a79e13bee6d384","sha1":"89e9e8875d621147480a7daa10bb8153dd7003a8","sha256":"d3e01311298ce81d08aacae810a9844479b93de38fca182c302490d33b4109a2","sha512":"3391ea6d3a6e99fd28247cd6e7be49f90037c9c8a3933be689162c13bdecc6d306700358eab3cc39e51f2a2ab5159b19beae60cdc5db574672e86ce855eaae92","ssdeep":"","tlshash":"481186126ca2c4b012dd24879c38e5a095e4517553a1a19091fece3a83f4fdc841fac0","size":1110,"data":"","first_seen":"2026-08-26T15:23:24.104342Z","last_seen":"2026-09-01T20:54:52.809584Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/copy-BfN4uTgq.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"080eb19bac739b76ea519c59f7e5adec","sha1":"a602d70e83b7531771accea86783c0eca3c1470b","sha256":"0dd9b2b5c913959c9b46dbc737d0fdba915850a100476c50ceab40914124d52f","sha512":"ccd1d6b5b66e9a451f74f2b8fe6a9c975a88b6f6fbf3406cef3794f5ea05765b32c2cf8243872570c17dcf485f8900a48290ba6add0c48c50fad9c0d64b9ef2d","ssdeep":"","tlshash":"d211bdad1309377c80178d69efb94811c76f6cec36b184c945bd4fb5c1c289aea67e60","size":968,"data":"","first_seen":"2026-08-28T05:09:58.383633Z","last_seen":"2026-09-01T20:54:52.781167Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/component3-composition-Cx3jgoEb.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8695b39268ef13ab53677f31b3ebe1d","sha1":"afefacbc2ed14d9f3f0913f11518c588ab68c01f","sha256":"e40b141403b66bc04c84defb2bdb146565458f8b5315df70e37c0ce9e6b5944a","sha512":"fb35d32d7c9b4dfccddfd56fd34c7d94a2d096055e65586dcc6609b2cad7e2765ff187345300e4f86e46fc772874c82db673fd4d9a59c73ba1776c1b4d1f61c0","ssdeep":"768:3cmUMGfv70yYqsLw/qt8RkS49TDA62WnzMidTMfdoEWQhyFQBUmrxeroCrwDUT35:1ZDUzg+SNQBUfOLQSOReYL","tlshash":"ca53a5d033f6a46683e8d8d44cb102a3e3327b843445869df47da6df293ed4261bab75","size":62163,"data":"","first_seen":"2026-05-26T00:02:55.211308Z","last_seen":"2026-09-01T20:54:52.662968Z","times_seen":439,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/modal.vue_vue_type_script_setup_true_lang-smr9Wkbr.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae0529fe72a6ba65391ea95e5e895ffd","sha1":"d8752a7cb370d67685e2a291a1c3baa1a7ec6f76","sha256":"796c00e23b7713858ec8088ae16849505613e85465eb718ab9b3465fbb8d7862","sha512":"18d6c447ae78202ffe0b9b17fd814e29cf61a7c73cd43e41dfae5dca155127838899ac298105449eb4f53a58f86128843eab8923a11b2916264955a162c947f9","ssdeep":"192:aLsnVS8JMnyUjTj1IbYJi86sQzv6ZJp0lRCEDBK7FWECavO7SS1nWbfmnX3oMvP:G+XJMnyUjTj1JnLnGCMla2DX3oMvP","tlshash":"1942b5c6ddfc9231096f5547f16a8f10431c0b1ae2216c8272b89efd4bcbda62195a7d","size":12251,"data":"","first_seen":"2026-08-28T05:09:58.815225Z","last_seen":"2026-09-02T03:21:21.919542Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/seo-content-5XkGY-Vd.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee61197e67e23900d0481b2d445bc7ac","sha1":"070cbf66fb9db66a066ac1230157ea0a413faee3","sha256":"937e2a450e66448594395fcf09fc4ed2448a7e0a5b4749f5eb6eeb10f3cd097a","sha512":"ee25632e7547f1a69195c9f07f92db780f18f0b7575d8827103f0aa3ab9cc3cf9e7231c4fd233ef98d6c66f778fa7257ebeb2714dd497c0352662ac716a112c7","ssdeep":"192:gD9SJvSFgDr87TTWv+vJvIwI8AzviIPtnb+o3cTYbub4+Pk9+PkL+PkU+Pkg6CNI:G4FSFer4TTW2RwwI/zXPtnb+ocTY60+b","tlshash":"9012dd74bf31b068ebb34d59772ab85ca529fd1a4d4543fcd1ae460c87cbea20380b16","size":9091,"data":"","first_seen":"2026-08-26T23:17:12.008334Z","last_seen":"2026-09-01T20:54:52.844216Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/event-section-DC6Ct5dr.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ccc86ed68feb78bd83a1fec5d71ca0b","sha1":"d342a7c13688e35f7b636462605e4aa3fcec51bf","sha256":"e34a45b030d311ab425b4136cde1e825bb74912ef1ff84957378b523a0be3d71","sha512":"899826c0fd51885e17ececb3b0698ffdc0b78e2ccd1584ccccc9ada7a093ae0300700254797648aa1820764ea8e87754e638ce6bd50d6ae281d65ed26afb46ef","ssdeep":"768:2y2/ZhpGUrx+8fyaECZyY9yaECZyYnwBoIr8CVTPvUySEUW66Hs+SpS9:kU586aECZyYUaECZyYwKIr8CVTPtUQS8","tlshash":"28f2e9d52114a3bcd496590d9b2eec80931da06ef62189c19aafcb7d41cffd0fa87618","size":37474,"data":"","first_seen":"2026-09-01T10:21:12.176918Z","last_seen":"2026-09-01T20:54:52.736648Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-09-02T03:21:21.933018Z","times_seen":13634,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"1baae958998549db61a10163ef574580","sha1":"09688d36799756333271e154d095ebafb307857c","sha256":"aa80561b1eefe257e6b19c7dfad2e8d1ea7cfdd2ef141c3fd7cc6e44111c4dce","sha512":"d84a7b9e6cda04d550ac433c545981489c4014cb8b67467aff5689a2be71a6a4871c68dae47a52ce22fe9ed1869e0d85b4950b52bc20844a1c6f8e8f4d3b29a0","ssdeep":"","tlshash":"0b900298f042300c5001611924270015113d45c89d040902aa402141d41418c9822d44","size":44,"data":"","first_seen":"2026-02-04T00:12:56.265058Z","last_seen":"2026-09-01T20:54:52.865251Z","times_seen":456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/get-region-by-code-CYxhYg5B.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ef54af25afba19e741169f154f89f44","sha1":"3a962a1a0ab43a6c2581a8f0248feae40c56455c","sha256":"ebc220e944b156a536195f9f1aa40527063214aa24c7a14bd519c84fded8a882","sha512":"27c1896a3bf262eb458ec5b35bf2995a0aa4cc121411af155a1264fb2e9247f71a078b66560d12c5c11b6bfdbde7ecf7d001e3941c0846a4852173e804bee6ae","ssdeep":"","tlshash":"83c080463d11255143b1197b0a5e4db54869a408394a4791b11d94c72e754b115dbe0a","size":168,"data":"","first_seen":"2026-02-20T00:06:55.063189Z","last_seen":"2026-09-02T23:44:25.435279Z","times_seen":1139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-languages-DavAeqt6.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a845d80adc5b1cf9c226ced586b46949","sha1":"60c8c03ad7186936236eee1bb148ee6e61b347c9","sha256":"46c32bcc1b2b343f9c57f3607c0ecf13fd189385cc08001c00e9909af02fbf3d","sha512":"a7b6d8a9ad97e0320565560474892141c7f97b769e98affeb921249b9c0c89e838a06cefd543bf5b2ce09012c5982a09f7cd996c6920fa90b0c989bfb9130944","ssdeep":"","tlshash":"cf1140d33047b2b221dc0dd8ea6414d00b249f95320cecda538f8e8a058b082c9efe52","size":906,"data":"","first_seen":"2026-08-28T05:09:58.817472Z","last_seen":"2026-09-02T03:21:21.926245Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-DxIZjfRi.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f80f710360f479c6b309e7443a26349","sha1":"962034b2433a465655100953361be775575e7a1d","sha256":"9a0f9b2424ed9232fe09fc9ca3a5f8e353ed653d1fa99ada9fcc1b4fcbafe65c","sha512":"2a8dd17901f3818689c34e83dfc8666a5b8c18e10015ab0e6d33e798c0247758ad28441662e101e1984387e2159d9d26ae0bc835966ba28260ea9061ecbe99e9","ssdeep":"192:BIcVgaCHbh/iIF/u4uv4YZ4Qq1w+UHPgIyKkxA2nm6nPxi:lgaEzawYZHqq+UJyKgA2nm6nPxi","tlshash":"c6d18385a2865df2233e4ed95c6511a104a44b547900c9eeffbd0d3eb1098dad2bae3a","size":6633,"data":"","first_seen":"2026-09-01T10:21:13.873958Z","last_seen":"2026-09-01T20:54:52.657011Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"339fa9e9a9b900045f3a65413e3bbcff","sha1":"ed94325e5ae002a762b1ff3865e2d30aa6da2bfa","sha256":"7af10d50539266811c9284560fbaf140ec050fbc8d886d11f9fd1107868f50ba","sha512":"0b1f4c415282d4bee298f793123a0124c78d3383b22ab878fbc7a0f9da006f7951cb9f290b246d9fb3d034e5434a4b68f991e9e977e2d31bdaebde0789f4929e","ssdeep":"","tlshash":"609004cc705170074711553cf4771045137dc5d317450000570c0141f714544c011d5d","size":40,"data":"","first_seen":"2025-06-11T16:05:43.613148Z","last_seen":"2026-09-01T20:54:52.866151Z","times_seen":3772,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c1e599c09502bd77be1c54d0a72b04d","sha1":"1c04624987470d8bbbba55b56cd181aa1b4d9ce9","sha256":"9c80f7ee8d9263b33c797485109632532790a7ebbd71be021def5c52519403d4","sha512":"a3a8362138d9c6b79e13c4726be733c7a7cb1f2ca0763d5622d5565559d91f4b8592a7e47d8d260bd043ed3c0f095a0bb7525e2c372029d2895729886ebaac2e","ssdeep":"1536:Wdu4Yet//IC46CggzkSZ0yqdCYYpvdP+VL1MOGWdjtahFNRwmIQcT1z7CP4:WKedAxg6kK/qdCYYpvdP+VsWdj8hyzc4","tlshash":"c9c3b6cdf68bb4750387e5b8d07f1216b23e3e89641c4028f56bd8d62e796098137bb9","size":129598,"data":"","first_seen":"2026-08-26T15:23:24.099836Z","last_seen":"2026-09-02T03:21:21.913288Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/page-container.vue_vue_type_script_setup_true_lang-Dx01bCb7.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"eef9ca1bd3e2826f3c09b9d64937e4d2","sha1":"be4a3ad2993ee34bf10b53fa263a0cbd6bede5da","sha256":"3dc3d2cd10e9bb2bd9616688f30aea867b7376c8075ebba8cc92f8518268cc65","sha512":"14e5a4259cc840adb156679649638c99feff87d7fd5cd9e8b844916326f631d4d4c1cea8f5d267cf18cda1a1f00a2103526ed177145a47769f911cb64910fc1c","ssdeep":"96:zgi+UTwV+AXq0boLvbMaV6K7lMs24l2f6KyvMsML:zgbPYMrbIbrqfldL","tlshash":"2791ec269fa0e8bda97e39ccc63f70a9eb4c857bdb0558d3d24cb22a07c75a8654441c","size":4605,"data":"","first_seen":"2026-08-26T15:23:23.931388Z","last_seen":"2026-09-01T20:54:52.643718Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/x-white-DR6fWqRn.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6813a2d7b0723b81ab1df16855705dd","sha1":"3a555c22afa11fefc1a2133e5255b85fff99e20d","sha256":"1d1f342f7c41008710b47298b7edb593f942405eddac781f1298199820c77453","sha512":"68c79f5956f3e6e56e77e3a5b0add670a7353724d074f179cd9d8b97d8168d84cfb8e1ce753274ccd00bc4d19e54eaa5006bd6144d514258392a9b8df66a076c","ssdeep":"","tlshash":"7ee0abcb208518b18b6c0e88e26c6ca6499029dc278e96c69a0a945392e90d0788df6a","size":412,"data":"","first_seen":"2026-08-28T05:09:58.356164Z","last_seen":"2026-09-01T20:54:52.822997Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-QfnRMTVY.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"df6857e6ce672ebecdf1fb4c8b651dd5","sha1":"2eebb1f2a55b3674b610d127b24ab406006bfe28","sha256":"99d49ed7f2d602c078ce61b2d6e0ec400b16d7e6969750bc01388b85ef547882","sha512":"6f66f0284fec2b01b1626f8c9981eff7d6a2ce632631ad8ad0ca75a64457bd3e2bd2a893e8be9e1f46958b2b5cae5c31a316e6f8a64d3dd9f0fee253535a0b30","ssdeep":"","tlshash":"8ec02b0f4039d13802111ca53770c620bf3494d00b32ba80b959031016d84c6034f002","size":136,"data":"","first_seen":"2026-08-27T02:47:30.995079Z","last_seen":"2026-09-01T20:54:52.603783Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/welcome-message-widget-CAmtS7fA.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"67edb3de34b17a78cb49800fcfa94ad5","sha1":"8ddd625607825fe69a2727af5e5bfa28d761ed6d","sha256":"548e165806c36606d61e12c0bc71f2ae1bfc011287f95ed9b72e748752075eee","sha512":"2d24d1309dae0f8f548bc45ab9919499804cc88398897bfe609a1f6abd435bc091555a5705215a6011ea7b1edd4aa08842292623c5cedece9618d5ddb1c74af8","ssdeep":"192:MkKULRq1TvkXCrBJ8XnF5ziJD8tIRnWlTe5yZ3ZmS3j4MT3:MkrLaT8XCrBJwn7sACZATayZ3ZmS3j/7","tlshash":"0712a496e9598d3e80b7a15e3a49710c1468b7daa2237ed6dc3c0d7103ef8f02563b94","size":9628,"data":"","first_seen":"2026-09-01T20:26:35.048421Z","last_seen":"2026-09-01T20:54:52.790534Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libs.smrtwheel.com/s7.js","fqdn":"libs.smrtwheel.com","domain":"smrtwheel.com","tld":"com"},"ip":{"addr":"194.67.193.67","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"81b59b79b5ae45cba3979854c4032602","sha1":"6e9509e22b4eee296f61d27906675dee28070730","sha256":"a015254eb738806442419846eab09a5789ea9537ca828d8c813fcc9145c200b6","sha512":"4674733016c61a907b1b752ac9c26b064f56ed5a3b54b60ada885e91a9476eb1e94d7b655c517ecb0ce56a737b8d167799e4067d06916a1133c7b97212bbc613","ssdeep":"12288:PUMLq5Z505c5NtQpSO5BAuu3ejzVuHluubuuuuMILFn/vXAO93wMMmVpMC4QLZxx:cdyVi33Pdb","tlshash":"ee943ce977eeb93213d14066783b1107f33ec48c180e4218f66c99de6b2994a66f6f71","size":443572,"data":"","first_seen":"2026-09-01T10:21:12.207495Z","last_seen":"2026-09-01T20:54:52.638858Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"9fa441462696aa65af0af13f19221ddf","sha1":"b323ef1f3fffa4826626a0ac3912ca6baa5ea381","sha256":"c8319e23cae6228a8d10c6e689c6d521fd4bd42b91f3ecb800838805acd9e9d8","sha512":"cbbd5c8642c4ba9a9fc56be9c09ba4f100e80fae461ec1bc8df0c1c72cb14320826a68578af106d085f7455c6d346731720c65cf847a5ec8b7b69e15979d1291","ssdeep":"","tlshash":"1ea0228ff2ccb0fa02cf320a202f0002220f2bca0c0800002f320bc0b02b003033aaec","size":74,"data":"","first_seen":"2025-02-05T22:02:34.469583Z","last_seen":"2026-09-01T20:54:52.867041Z","times_seen":327,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/arrow-back-Cb663Lss.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"efc4a73173f95506d5faafefb0f67591","sha1":"e15592c21e62a4dde92df914512fb1773e52d732","sha256":"0f8da5901b1cb33fdb3c15c2371b3bbf7aa7f87f5b2583bcc965329e8e1625d8","sha512":"5143289c6c972f81209e565897f3276b6c4fe13572845b3039f83045e38f67e4d2bd046fb3d44fd86a47bac9c91a3ddb537ed4dddb973f4a6e102bbd30112427","ssdeep":"","tlshash":"14e05c6c118958fcc9635ce0c17599150b0c61d9370bc8d7db0f003a4226ae1d4cb239","size":437,"data":"","first_seen":"2026-08-28T05:09:58.646761Z","last_seen":"2026-09-02T03:21:21.92018Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/cdp-html-content-z6IymT6M.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"970031dff2fbfd4d9529602ac2edecae","sha1":"3fa6c6cad982d9bc367c71295be4f52ad84589d1","sha256":"5a78ceb6bbe6f9f0168d9769b4a3d95011934cb5c1bba11321f6c3071d96aa33","sha512":"a1e39a8d682d8b4404701818151740c92536b0dce016ba07ff8c1404964f8d09a05cbda167b09851185150347dd151d8517ca6fee083bf6cb1437ee309b51bba","ssdeep":"","tlshash":"1e61bd6dff34e0a8e6720cd6bb59316ee404e43b1c518afdd1964a0e9ac7ba25300f17","size":3470,"data":"","first_seen":"2026-08-26T23:17:12.086963Z","last_seen":"2026-09-01T20:54:52.847662Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-Dh3Q3Z1-.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"07dfd7b2db65dcefa8a0f45f56d0b83b","sha1":"767f3085345e920672a0d7f38ae4172c2b1a71fc","sha256":"3d66a04430508efdd32ca38d8a85ea60815f7f7105ae8bd54b88f318b33c6564","sha512":"ff474b3b003d2accf4e72fb45492b5f10be968c8f4448e950ac329573fbab8bacfa384719422aee4a218f100c21b6b9404e572623801c2d529af10ac97010db4","ssdeep":"","tlshash":"0141945642011db0127c8dcccc2890e358e54bd3ba09cdccf9695e391a83e98e15bf35","size":2235,"data":"","first_seen":"2026-08-28T05:09:58.366156Z","last_seen":"2026-09-01T20:54:52.724508Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/seo-text-DAsLASnW.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7cba86608a0699a202a56c2e44bf1ac","sha1":"aa98fa54a13e58c7085b7ebd080051e100f2f588","sha256":"f1e5b5e4ce4a30288ea52204f8b36e8c7aae90486eb7fee1734ec759fbfea056","sha512":"f78ac2cfa7f8b14a240b9fce8f40e86cd1145aa35f3cabae30577b182058b729361da5085a838bb5a109aca35ff6389f2fe09926f5a41614a348205d922b9611","ssdeep":"96:vQsm408/iPOTg5h6vFBOaCudN8iFMleb6iqt93Fr11O36/h7j5boWT8:Ysg8/sOTg5hUGGNRFueb6Hr1O3Utbr8","tlshash":"3902d9e1de11e67dd3338859a32f608c720cd86bce97c7e5d6a64b0c5ac9af1124670e","size":8532,"data":"","first_seen":"2026-08-28T05:09:58.78463Z","last_seen":"2026-09-01T20:54:52.82381Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"224d814e15420b878f93c58107276228","sha1":"deb9423c99aa5a984f651581551c00f0a05cca5b","sha256":"373ec1cc85ee256740f070428a14b758a08ccec7f405f29ca8e4c41df6d42464","sha512":"5da8fc4b47e2d9bac9d8d8e64f88e48067f4e602ff26604e26488d2880096bfb5c0c4e99c62db227f5a5e9726d27edad249eccc69252e537e17f39017572ad0c","ssdeep":"","tlshash":"8fb09bfcb144695512aa42591669454d55eb05064d595040e44955e0172455d441dd31","size":124,"data":"","first_seen":"2025-10-15T18:39:53.81661Z","last_seen":"2026-09-01T20:54:52.86968Z","times_seen":3552,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-server-event-ZyQuN_gS.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"63ac57132a2fc3f9e9a72d6926bbf861","sha1":"9d09c2a75c755b32cfc34d53b0be256d5557f348","sha256":"4148eb5e0f432fdbba5573e9d5f6e7d3f3e6c26414dbd5035a231db559c1f8af","sha512":"d84d9da5228c89f64c69b7d4efb360ff52286c67b74c094bcf27366c417abe21970484c001f28c78c52c22c271755b3e96525cbc96c5c3bdf48258d5d79706bb","ssdeep":"","tlshash":"dcc08c274c5280f8387d98d9be1484328165228933129ad8181c4a638a0b0e1841fd5f","size":159,"data":"","first_seen":"2026-08-26T15:23:23.853913Z","last_seen":"2026-09-02T03:21:21.928476Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-ColKqq_f.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb486e6890e9d73a137d95e66dae2976","sha1":"7054ecd2add1422241ba7d2ad9f13c6102e2925b","sha256":"fb6b24aef19974d5432bb71475b9e1e2714d965b986c518ec03580bc7d20796b","sha512":"98e38ff6ac52802fdf6527ce1a14a830084e01d18379d9290eafbdc0b82e30f7bce2aeda858fe3fc5df479c41b3a61f72fd1af70830b7344b8f82e2144188e99","ssdeep":"192:xICXYyaxMLRPfWItAmqJcVu6bFaeFGH9OZIH/1yqMuwIHlXHkHXIHCd+OoX:xJDacRPfWCDqJcVpFaeFGHwZIH/8qM9u","tlshash":"ba22b606ca800ab4517e0f8cdd9626b049f55f42f610c9adbf7a1dbc7a8185ac162fb6","size":9985,"data":"","first_seen":"2026-09-01T20:26:35.101975Z","last_seen":"2026-09-01T20:54:52.591883Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/games-grid-rTxh5MXx.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1a90896c067f1909c503c9a9b61a0af","sha1":"c8f55548adef008c012b6f46af48cce5532e918d","sha256":"794d16ecd2a4b0e4f84c87b1c81de72f445f09597bc37edd1947a395d3d4230d","sha512":"a4a0b9ddc298a8ec39178bf15dbfffd9a1370ded85612cb6f9c752e5483429f098c851bf6c442a788d442159be96b18b3971becac0cc2791b128140fad7f973b","ssdeep":"96:9w9swMcMDSDoZ/RTzUi6Y4vhq8zKO598Wz30DF8mhNkf:cchGDc/Zz8XoIKO59xz30xvhNkf","tlshash":"0de1483a19a7e7354a3a216e9b7bf8dcf1281d390da2059062a5c0d637c5be30167f8c","size":6883,"data":"","first_seen":"2026-08-26T23:17:11.943762Z","last_seen":"2026-09-01T20:54:52.819648Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/app-install-widget-BCBXPULo.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"71f3246f2b0c6f07c30214d3a23d1efe","sha1":"98fddf848683c8ff9e6e5413cfbcdb97a9c7a20e","sha256":"9fa78a1e0a73d0d62dec0658ceb5beba3181134bcece305fda31f2c1de283d5f","sha512":"a50430fd42939946d9a2336c6e8e7748c49604f16ecc2154344a12b507335530815ee0c0c508d9f547dd1c28f6187fee05129312938d1ada1e28b6f730ec1ca0","ssdeep":"384:9g2kg8WUMyLPkuZRPDJ9X0uxWv6ZxyZEJZp5tZlyZcCZD2Z2SZvyBdWr9KTZ9IZJ:9Dkv5bzkuDPDJ9k+sduatOJJyGf","tlshash":"eb43ee3065669808c6f7cc3331cd1f633d19501262a68227da291eb89dfbd7b63d5b3a","size":58517,"data":"","first_seen":"2026-09-01T20:26:35.165864Z","last_seen":"2026-09-01T20:54:52.788005Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7d8720f11a3bb724fe1958271b7fb1f","sha1":"7111f29fa1d4a92a57bdcdeddc9fd582b21ed15c","sha256":"261ccf7eb2cbd7365484cf1a5d48a3539f47104daca026c97d6863c8adf2c5cb","sha512":"6e9f502ffa10d2f32def20980ea889ae4159b8765ac0284ab92f685a44a7c07d767b7e067b26ba0cfed8f722fcabe0dd87ae29f6bf6e59e0d72c5d2f7ebe506d","ssdeep":"","tlshash":"f44196327e46d8b409de289dc62f334afcb51a1c8911a080a654fe913cbdf33956355f","size":2346,"data":"","first_seen":"2026-09-01T20:54:52.870625Z","last_seen":"2026-09-01T20:54:52.870625Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-B91oazRG.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3dfac8bec07a622976188760a370e434","sha1":"e990f6ab245fb0c7fa4d6d66d3854e1117b65210","sha256":"87d3060f1f7aa956977781664c61c3c3cd2015dbde828e087cccf8bd882f9705","sha512":"76e280cda31cc52268213de09954f6586e84852bc7f1e4e28e2233efd7f3339ec6ff67ce23988e843b7f11505c2f00a0be757ddd4983858ef5e3358b82e307fd","ssdeep":"768:UqfabV43RJ0hFOZP/Z9ukZyQaUqOp7+CCIgHWZLh:Uy3RK4DcOF+2Zt","tlshash":"c7b209a4b1006c38d7b70b4cad2a5585d2e05fadce51ecf4b5ba483507caef0c19ab5e","size":25230,"data":"","first_seen":"2026-09-01T10:21:14.400104Z","last_seen":"2026-09-01T20:54:52.729129Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-theme-Btwoj3hW.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6993b14b3ceb08d61cff4ffb85353b67","sha1":"4cf3aaf4a0d08ba1281b46cf310bc48f110ca3d0","sha256":"ddd59f6082eb2667d307338c6977a29baed8fc7b992c066cc183c67589865e77","sha512":"a052bc6aeed4e1e429217cb74b752ea0058131605e8f55fe58b4ed3c8a67591c3279160ae320d5544c9c1c71989589002f225ff9a3c9c4c268ef40118d2830db","ssdeep":"","tlshash":"0df00ef1ab78a93812200cbe933055a2fe18259db7629151e13998ce1068c0083b2f74","size":505,"data":"","first_seen":"2026-05-26T00:02:55.156535Z","last_seen":"2026-09-01T20:54:52.735713Z","times_seen":338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-game-slider-analytics-BC0BgskM.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b97c813837f65b373222a108e1a77da","sha1":"bbd60995965a69b275070af7f2d3b0fbb73037da","sha256":"5e2661a7a05a71abb346b2ffeb921f5810873eda0e7fd2126e94a4f0025f1e2a","sha512":"9252ddc27814692fef1b2731dd5e19a62b75a6d4ddcc0f497db6ecb0b40c6e1e0d2ad074667d89acf155e421b2b2762cf44ee8d82802658dc21a125088da5453","ssdeep":"","tlshash":"fe01afbec0eecdf0080794f8f18084de57b146b7aa42ace44a49cf381e52c99564d989","size":849,"data":"","first_seen":"2026-08-28T05:09:58.810232Z","last_seen":"2026-09-01T20:54:52.756405Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/plugin-feature-flags-CAskxUBy.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"afb98db2c2e4e4c4f9cb9edcca3ed977","sha1":"a8268e88c62ca202e1edae604116b28bae5e2f62","sha256":"89ba8e8aebb7855bf346ead07a6cdcfe50a8e763cfb392b430eeef1251854d54","sha512":"95a89783e466811942a9019fe066558a52d9da59f2494163893ad5bd537e4aae4835833e4a91d200858489aebbf5ab655b9237929e26fb73e074e257d320705b","ssdeep":"1536:+zPdMxdVb8e10PfgdSUJ2nYvr20JnhwlXNxuhcOPXn:2MxdVb8FfgdS+v51hoXNxuhcOvn","tlshash":"b2634a40e3b0e13556b319d8f62d81a483385d64b41988f8f27e4e2916c7dd1b6abf3d","size":67392,"data":"","first_seen":"2026-08-28T05:09:58.596178Z","last_seen":"2026-09-02T03:21:21.918237Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/get-masked-id-BtopzaVp.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9bd7ad5724e1719897ab7463d2afa4c","sha1":"0963bd110e52088f4fe198e76ff3b1c05dda4559","sha256":"5cc2102dcd1d849e08a5a45a84d8d197de1e8b2078697fafccef3f9dc3cb38ee","sha512":"dfca451c888f827a42036f55baa0ee05b9241965cbf359dd91f8b5e28cba501ad326f5c017740654f97de3069ac568da1654bb8467c1d84eee52e9600d92ba78","ssdeep":"","tlshash":"de900445140130f401750c5541f5cd70cf44074d73f113d1f4151101470f0c4110d531","size":47,"data":"","first_seen":"2026-01-16T15:26:34.991782Z","last_seen":"2026-09-02T23:44:25.084003Z","times_seen":1488,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-BHj4L3sB.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f43e021e976cd12b780ca3e885f4aeb7","sha1":"06c583c54d9066e23097719b513915433f79c4c1","sha256":"1ff4c27f44463758ec3df8a04f461d688fb35744685ca6f0046dcef24dbcd481","sha512":"5ec7ac9be9a4cca255d475c27fe92c68bf6140c280a766263c7c4e7a66fe2f1c81dad91ebb4536b5f26affd9c3aa93d66faf35ef72879e1467792745eb62fb13","ssdeep":"","tlshash":"a851855a95845cb513bd4dbcdc9a21e188f84b42e444c99cbf7a4cbd7290ca8601bffa","size":3066,"data":"","first_seen":"2026-09-01T10:21:14.315198Z","last_seen":"2026-09-01T20:54:52.642149Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/title-DFpgr-se.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4d3880ca73a61bf92574109c2dd2e13","sha1":"78410c17550d08d88ef294cdb0547334e2130a76","sha256":"11da725f691a30188d5c92d8d48ba354b9ad83a5890b92980888776e6d62ef5e","sha512":"e71d3bdf06d278ff197e6e3387f54e7bf4a737af746c784befa0c467ad2f54e666ea12055fe7bfe8beffb17699364fe297799955c71c6b625b13c75ba1ae608c","ssdeep":"48:uNqDBmOR74lDkwwo3VqxmIriQcHwsQjABVV9RvlDPIMw8VhPncunAKR94EDZAEfN:nPAkwQibHwssAnDRtDAwks1PVCqE4","tlshash":"d4b16205be01e12ce5bb1c563346b444b14c911a8fb55af991fa8bab1bf6dd04312b49","size":5286,"data":"","first_seen":"2026-09-01T10:21:15.097313Z","last_seen":"2026-09-01T20:54:52.793465Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KGKQDC7","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c402ce97b36d0b7a5f1877862db70a46","sha1":"f7bd8f5797799d4ce91901e73992200cddc3b61c","sha256":"0d139880195ffcb5ad5f5a4c13fd93d013950107e5358f7427d0d94a2499e6fd","sha512":"075c2c5dee55f163cb29f04af0fd79d4855403863820b9493f2fd73751dfb74825a85ae4932594fb7eb2dedab51f4071e2d5bb7996577f5e717297eec120f2ce","ssdeep":"6144:hld0KIrxbm+Lo0wKvMkcrsA/2EgD3Yj3WfVM5/sFD:UrM++Sk3QMKh","tlshash":"66a419cdb3c6b46293a2b574903f018f727a29a2b84cd894f289dcd42e3465a5177f7c","size":493116,"data":"","first_seen":"2026-09-01T20:40:30.208602Z","last_seen":"2026-09-01T20:54:52.705124Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"41429afe04fa00a8dedf8d85da64403b","sha1":"a513e89b10881bcd84c5d15a98bd6c064135b651","sha256":"734e9d5a16ac8180f6dc200d66918d83c73c7eab878e1dfc478cb9aa3dd0381d","sha512":"08817aa268183073f9584dba8a79d8cc01e7ede8902f3d2346973198e9020ce8f6b29ee8f8b3a30a1bd17e1ee2e2fb72ec822d31648639af3cf8a4fcd1572c05","ssdeep":"","tlshash":"119002c8b8927002502d1574002e410511a98db3570410a0d22108595c601448299544","size":44,"data":"","first_seen":"2025-06-11T16:05:43.611157Z","last_seen":"2026-09-02T03:21:21.935789Z","times_seen":10780,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/badge-base-CA8XBWn-.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"46cd78ad3259c72326fd3b8b4af98f41","sha1":"daaedf1f672f57f4d2e6eec8cea757d54b210789","sha256":"5753c876884819c77116707696e51e0f5f9bd7721573d378f25bf2c6857ebc1f","sha512":"15824fc9234e13ff8186360b48deb3ad66bda93b292aa92ddb85f5394d3ae4298df0d5ab753062deddd92530e2509689c8ef7418f97d2ad71ac2ff0638109910","ssdeep":"96:tyRoUNb5mfP2y0djbeki0JSKah/VQjGR04P:tyDbQOyijqKah/VQaP","tlshash":"c0d1ef5af210d579a7323ddabd18a0b8c044f4fdc9281ed9f1611c1d1ac2efb6247a8b","size":6474,"data":"","first_seen":"2026-08-26T15:23:23.891924Z","last_seen":"2026-09-01T20:54:52.8317Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/plug-CwCRoaxn.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"89020871d93e7d330447fb5b23e36021","sha1":"40da465cbbdab4c14b096caa0cb27a4870360716","sha256":"7ca53c101294e7635384f698a342237a00047d975e4943d5c214470d4c4aa8f5","sha512":"102dd652155d3ba3d4de13559fc87127b1f062ca5c4a542c01e86f94708b727b9214c1f42448741bf10401243f8bfd6a17059e142e5b7f23fbdfff5f7ef5bb1d","ssdeep":"","tlshash":"93e0ab5b028c77bc4e1a8790c13d28d6437911ed278d8698860d133a024b071ea9b254","size":398,"data":"","first_seen":"2026-08-28T05:09:58.792709Z","last_seen":"2026-09-01T20:54:52.807154Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-favorite-snackbar-Bb-AxuUT.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"606b339de8eba37b39983dcd083b0ab1","sha1":"73bca216fac7dc9caadebdde86ea3bb023c9d36e","sha256":"f2867c0cc5495c5d6b3136ea81fa9130acae3b88c182d53cfb85c4a5098d37fc","sha512":"2f52b868765f168440e734787b3c50ab786106a65c1fe595732e5febdfe732b22aab759a105cb77f68efafc9d1a165c0b503e2ef5a0cd6113e2cd342a56f45b4","ssdeep":"","tlshash":"32317447a152d1772810ecfce810d0a122ab5a49f7a5cec0e08f8e458a435edd22ff2a","size":1641,"data":"","first_seen":"2026-09-01T20:26:35.085813Z","last_seen":"2026-09-01T20:54:52.774693Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/mf/modules/paywidget/bundle/1.82.0/index.es.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"bc94ad14061228561fefb56bd37ac150","sha1":"6a27b40afe22c61bc28510eea7fc1df7efd19f4f","sha256":"b24b7b1f9a063e342b96c2a1d9d4aa6e671ed9d1d4f2c4443da1716a1648f247","sha512":"196833492c519589ef0f76afe8790efe976d9911d7dcd3d1a0bc6e7373f7b672416c208f79c10ce339eba3c879d48f780c15370753f10f96638777e447993fce","ssdeep":"","tlshash":"21b0124d7512871450100b44182d845237370d989841249104cc0f45f282054d821404","size":88,"data":"","first_seen":"2026-09-01T20:40:30.22844Z","last_seen":"2026-09-02T23:44:25.583162Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"665e109394d87d30272d42588860a71f","sha1":"79c5fcc8df3ee9a080465b6a4705d37c14bea743","sha256":"ac58b1b533c07bd46878b9e9dafa04151fe74ed2f01192a508ee418d5bcf440a","sha512":"dd8795a7bdd9cb3c5bc44f23227c88a4e3a3795e56e5fedee4516cb8f1b4ded64728fc00ba7807cd761c38f80b35212c8600489badd0485ca6f0f7eb930d38f1","ssdeep":"","tlshash":"774196327e57d8b409de289dc62f334afcb51a1c8911a080a6a4fe913cb9f33956355f","size":2344,"data":"","first_seen":"2026-09-01T20:54:52.874394Z","last_seen":"2026-09-01T20:54:52.874394Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"4c5f3ca54afe821fb496c0e3a9d5f272","sha1":"d902ce0d39f33170c471c8a707b766b1aecd96f2","sha256":"c88194c270314292fb69a148605379921a219952368dad51577fc5a86667ea17","sha512":"62289a5ba1b46fa01b0b030aa1adc2b526daf7c5a6d11d3e58aa15b3623c81a3b1e35cee7482e599861bf05bdd7612c0b340a8cba11deb311db3f88756dbb128","ssdeep":"","tlshash":"6c90029ef15e7158501120541066400a253918e059061840a740444294145888525a84","size":45,"data":"","first_seen":"2025-10-02T15:31:38.085391Z","last_seen":"2026-09-01T20:54:52.876135Z","times_seen":3216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-scroll-container-C9YwbMXP.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7cd16b73d16a52383b3df571e3bd096b","sha1":"e2abff419df2cc255915e5d7b57bbb79869f2ad6","sha256":"3a40799cc82b4739e59ca74896a1b058e8d90c1a31f00e6ca8a36cfa51dcbfc8","sha512":"cc3aa708743057d7a2f6c4973d937dfa42414c36115ad9a2bbfd67d06538363e69f2f0d4a12a6956b281ca44fc3151d5e5c9c6f4ea9c37a3018e9c8465770e1a","ssdeep":"","tlshash":"f72141020950603867ec58d7e866022066b102da3333e5d4f80d5e6b5a267b7b1bf70a","size":1375,"data":"","first_seen":"2026-08-26T15:23:24.064223Z","last_seen":"2026-09-01T20:54:52.718995Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-casino-category-analytics-CvnRMDdB.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f75413186e1abbc0424ed70e3ea9090d","sha1":"a5f544da1fcb4434cb30fdd2eb102b22c4cd40d1","sha256":"dd5e98b563885db399f1da66b9367dc5100a1403755c7ee7bac2c40ef42930d2","sha512":"491fd7c73292dbadabddc3d096c19ec9077cefc1e5c818a7488557c37bbab25de63e38d3d00b46140baa455bb00e7c856950e7909e71b9d6adaadb4099ec24a2","ssdeep":"","tlshash":"88e0267f80ab50f0580a4cfae129cd36113045a263c1fd90a0deee740f96592928da06","size":333,"data":"","first_seen":"2026-08-28T05:09:58.482134Z","last_seen":"2026-09-01T20:54:52.713963Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-history-favorite-ab-test-DlJtFOXo.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f98d264ec0c911387400b2ca1ef7ec84","sha1":"5b3a7f7b30da348097256d96e0957b2815b3d443","sha256":"933e92643abb7a2047b5716ddd2e00bbf08e5c4b0ed94b039066e48b07b65328","sha512":"8a33d750166c16a6306c1f960a3bbd5c9c5d7c88ff86790aa74df96f92892324572aeca6adaace705e6e152bb628d5e685c804cdb59008ea4b24cb7a58821bc6","ssdeep":"","tlshash":"a8e02b2fa82556b0074b8cedf114c87692654bd93788dbd1e1cd27384786564c15f807","size":295,"data":"","first_seen":"2026-08-28T05:09:58.770997Z","last_seen":"2026-09-01T20:54:52.617853Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-game-sections-hYGr0d6r.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f94895091a4c98882ae82ac9f6e14a9b","sha1":"ed6680e74497d271de5784590cea3178d5b4c0d0","sha256":"ddd2ee74759154b4e0d0df7b03204d3527eb4c9290a72218714b774b3b38b367","sha512":"0906670cf2b66522f383393165c56789623c7a98d733e0afbb573b98f30d6819e8dce93f109861374334c635524de4aedc105c1be97d5d699eea52dc7e616150","ssdeep":"","tlshash":"4041d712620371779937ecc4e81824d595a1a296727bcfd095bf0aa8060bac8d0fbf2d","size":2388,"data":"","first_seen":"2026-09-01T20:26:35.046487Z","last_seen":"2026-09-01T20:54:52.579517Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-B0yGsZwp.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1ba044e5b2a5aaa374b2bb838580420","sha1":"16e108010ef7e85d06eb2ea94f7dde45d7010c32","sha256":"913cdb7cab374f19dbbf3119c9b4e61374548fe3d6c7bb57fe758e886872e74f","sha512":"00f176f96f5a01273613aff54f3e09b534cb2187f1f138fb05d7e07208d4320fa2eb9945965c567071e87383ee5be20881ba45bb2d08564efa8ec72ce0683a6f","ssdeep":"768:u1qK2D1vK0plmRNSwHiS6h+82L25jUMdTrUB8i7GPwDFektw1DZHihFMsRuQhaEg:u330plm0dPZzQhaEha6dmjVy9GEkCkx","tlshash":"1ce24ac1e13079791bb7c9dbb52514426454da99f440c8e8f23e1ef817dbec0a2a3f6a","size":33175,"data":"","first_seen":"2026-09-01T20:26:35.11157Z","last_seen":"2026-09-01T20:54:52.848557Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/helpers-BVRNAj2t.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed51fbf722966cc2be991b35726a8dff","sha1":"7c89b789efe6e84c66a4d7bd305a5734254e8113","sha256":"0105bdf37d7fd44da0b90a782e043a20bbe4c5777e853a1c5f1aa5f611d4c439","sha512":"c54ab28b21764047338b99f5a42094c3d8bc9f2acc392a59274bdd928e9ba2022a9c7a654de267696017d7d14c91455b9328973cd6e8275306a8ad5577760640","ssdeep":"","tlshash":"61b012da114013fe5b05828021d35604f562036c24a2b2470eb027d115c0043e10ed8e","size":105,"data":"","first_seen":"2026-01-20T19:14:14.321823Z","last_seen":"2026-09-02T23:44:25.340995Z","times_seen":1272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-CMkaqWIw.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5572bca29f5dda1880f2683395e6524","sha1":"8e89c91009e1622beadb3209262d9e21317e341c","sha256":"e7303aed8bdde21a0e1ba5f9203ea4a9fb2088da519b3e107bd64451a8b0ea3c","sha512":"465dc23852a0248ede9b179cc14325f40c63a1a5902e28a1b3530e2c0bf946c193737682aa6463f1fa7ca3506f6b5c9d8a8be2cec9f6ab926b8e1743ae764871","ssdeep":"192:XmaCBpKYTfJAqgI5esjfMmr7YnnGm/6IFouGsd8LdF:XmaCharG9rV7Y5jnedF","tlshash":"4a02c5856b102e7252ad4ccdef5a36d148f25bab9a00c08e7f756dbd3048c89d61aff1","size":8927,"data":"","first_seen":"2026-09-01T20:26:35.100376Z","last_seen":"2026-09-01T20:54:52.80792Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-category-ab-tests-BwpVEZxz.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"46b56a6b960d59887c9dc7b5a3dffe01","sha1":"794d3d2d256b7004f40df51793350f66d7142caa","sha256":"d651cab5d3cd56461aebb66d7f9b3a09b50de4b2c057411fd2da145a7d2a1c35","sha512":"c3e73c8b1381546fe471de32afd5918b39dcbaecfba95ba3774daa56d0fcf45c6019a742cc315f1e0e062a0f07a60963ecafd0cbfaa67364ef43674bae715bac","ssdeep":"","tlshash":"b31175aa301e6c336234d5cb901195b84b1ea3d13573cfe0605d4afbb374d8245ccd59","size":1069,"data":"","first_seen":"2026-08-28T05:09:58.731644Z","last_seen":"2026-09-01T20:54:52.601855Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"629533c8b596c2535a36d2beb15c5219","sha1":"4821eb943381332f6d21fa7cf39f4e27b64b61c4","sha256":"1922918d50b3b08a240956a08329205b756378ddaded6e1241a0879872a5a78e","sha512":"7ea7ab012d2b4924f387f51223f7fb3ae7cb552acf3f236925064a286cb8f668093d9a2ce78e6a857cd5c720b1e7cacc67ddecfeb1a7ea1fa0fc12321dbdbf4f","ssdeep":"","tlshash":"ad4196327e47d8b809de28add62f234afcb41a1c8511a080a650fe913cb9f33956355f","size":2339,"data":"","first_seen":"2026-09-01T20:54:52.876955Z","last_seen":"2026-09-01T20:54:52.876955Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/messages-JryZL6QX.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d7f98cc5ec7d4e1987485a93ef15f07","sha1":"61024dd6d474131e423422b21af317b9b76f71b7","sha256":"d1a29ab1807ba7a61cc67b303fb8d2b1ce6ba4561b398ff9c374708c2341df7d","sha512":"27791f156077a6cea8e45ab4f6fdf7c09d9a2f38af700c4abf0b6cf0620a004f040f44403ac92f8363472470b92f2664b70758deec54a8faae1206d3d781b83e","ssdeep":"","tlshash":"3cf04179036a286cb563808cd3780811870c049e3b8ac8cd1b1f8e628326ea0db4fa35","size":586,"data":"","first_seen":"2026-08-28T05:09:58.476837Z","last_seen":"2026-09-01T20:54:52.791966Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/sidebar-banner-promo-CAAMwIu3.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d84f48197afadfebe3eae232248e01e","sha1":"0422d854c2bf4420039769095b555e9e37e56bff","sha256":"f5a6fe9130a8fcae4f436796b25bd0063f4acb4ff3582f4e1b94f63a2e1cd8eb","sha512":"db11a0c9f6cf31bf6e580ebf599f7aec3011eaddf5c27038f2b583a9d3164f5bc5e5187e6701641545ba72b07846112f5bb917c578b36cc8ee731cfe26d9a228","ssdeep":"","tlshash":"ee713401ee31b57cb3b9598b354908ea509dbebec034cbcfc179922e15dfae08696345","size":3643,"data":"","first_seen":"2026-08-26T15:23:24.239557Z","last_seen":"2026-09-01T20:54:52.609015Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/mask-input-DDfJfQJl.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"77b8e7776d97f11070813bf4e3b40cd6","sha1":"039dc856f2de9559575f8d6fdf99f4c7a5a51793","sha256":"f76d21c58eaf8b0b24bb70edc885cbf3191e662432c1eedbfd4787da43c00b5e","sha512":"fc463964a41ef16535d888f457c985b4d7594066d376e239b0f21ba0ee490503f23cc14dba990adc7c0f80f1e3dde3743e4ff1293628955e70f8d80055055929","ssdeep":"","tlshash":"4171a412755c60730bbb89a6f0fbd4a0ad649358e2f114e1089ef8281faddc4c51ff96","size":3551,"data":"","first_seen":"2026-08-28T05:09:58.575638Z","last_seen":"2026-09-01T20:54:52.763334Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"adc8164e4f3613610fea7ad941b8b968","sha1":"f331280efcd3b2cf7ce4521184af683f713484ed","sha256":"d901fab1a40d81f450f602c5b6952293d663034941b71b693647a31d8ccaf278","sha512":"a2f4128af1eec8e2df39c8804209eface75b2fc1d48ef5859cb391847032bedb1c1b85eab0768b0a5f4c936e3e12628325073607eb5e63d28094c7ce75493c41","ssdeep":"","tlshash":"71a0228ff2ccf0fa02cf320a202f0002220f0bca0c0800002b300bc0302b003223abec","size":75,"data":"","first_seen":"2025-01-28T09:42:40.612175Z","last_seen":"2026-09-01T20:54:52.878876Z","times_seen":2761,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/plugin-server-updates-CIs3ZXCp.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"009da0bcd7dbfb66b8b212ef78ead3ac","sha1":"baf548557ae7d3ac81419c1d17a8a0a37ea5bd3f","sha256":"fe94de4d3c677a83e70d39d3fa39c69de0318a578279b988b373aef2cd08fe33","sha512":"7db163bec3bebb258e8af38a56bd5242c53f27f26917be24bdcacc79772d7a55b92575dc297877c16f113101ddb10ff3ad095f60e4653b824c8f03b7b3418caf","ssdeep":"","tlshash":"5f41b56df0d670b783eb1ddde43a6020afa016a8b010e0f4b33c15c21b53181eab6e19","size":2001,"data":"","first_seen":"2026-08-26T15:23:24.168206Z","last_seen":"2026-09-02T03:21:21.91153Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5ed963f8e1846880d471a62583c0cd1","sha1":"0c34324d286d9bd52c7eeea589f550854fb42583","sha256":"b34f6a48dc81ca0fedb0849aa536aa1622ba4ea71c7800711afb3d8ab47ac365","sha512":"c7855c2ccc544265a15c639d00224ec15b17ec75146c39594c068d5bb06700655f99fa75ed2282825e154a8bd7a813a38235a582082ac84f9f239f6bb7c5a238","ssdeep":"384:EbgM1dkMs99TEDCqoZM6XwTNBZVr7UT1Dh5XdzKmXDbmlVqJyS2Lwddpky:EBXkFtzpZM6XwBnVr7C1F5Xdu5l4owlb","tlshash":"ec9294cdbacfbac473437079456b70cea6696c81d46c45bcd332a4d4fa6478b622ad0c","size":20963,"data":"","first_seen":"2026-09-01T20:54:52.853863Z","last_seen":"2026-09-01T20:54:52.853863Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/scroll-top-C7kMlMrW.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e88824b1befe2b700aa45ed04019afed","sha1":"adc323497725e23a1bc95145de448c0fa8b90b4e","sha256":"b5457b022acae11a02e836dfd5e1f77d885cea22d2ea47ee21d59ebc9c1a3b0f","sha512":"3a441088dfec100dab1cc0372d128c862d56e7717b1c0d3c05f6287f3ace06717f7ab12925b77a1298bbdfeca63e3dfdee8f8e319a33a9e195f2efd2bca8920e","ssdeep":"","tlshash":"c4f052bd12092abd403e8b34c32a0c925b6889fbb78a50d0174e263b02824fce58b5a4","size":494,"data":"","first_seen":"2026-08-28T05:09:58.779736Z","last_seen":"2026-09-01T20:54:52.644852Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/top-events-TkVjTH2g.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"224326709f3114de206a8b829545c7f3","sha1":"6de152efa720ea7dcd7b12527fa7df346d46e468","sha256":"1db8cbd3b5564d8a832dd0d09dcd959a8124231e701c96fe098dc42fe8d07a53","sha512":"07b60cbbfdbcd14e903e5b7058cb7c93b29c20b925e740a70c2764ad90c8e777d05f7c2ae16074e89ef89ecdecc5699662bab610e6f6c5af4a8c8fbe33765b3b","ssdeep":"96:iB4WjgrPOvFMfvF4Z5sIAyF4lRgFYaSO62fbP6CLSUxWUk/Ka9g889i/4ZlQLV1T:iB49bONMfdU5iWCglSdOUUwDg8/0O1fr","tlshash":"80f10a72f08b6574186e52fde8124890d6b60de6ba54e6e0f3ef4d3907dacc4e12522f","size":7648,"data":"","first_seen":"2026-09-01T10:21:12.588294Z","last_seen":"2026-09-01T20:54:52.614207Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/sidebar-dynamic-section-DlBilNCJ.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5077d72da4c4c1f0e935d6c691bd852d","sha1":"bc98b5d646a9933307e2839ebad30311045a7bec","sha256":"050c571c77d5b99b6a2d50947910d2f69708837a2ff973a8d9b7c0ea3448c2f9","sha512":"8f6778cf2a65f0ee366a75794a489209c0b4ac1ff5354d08467eba18fe6b4e23c6104343875b4321352fb5155f2b3a4968e0040b286b3b8f6bff86c2c573f3ca","ssdeep":"96:0zUvT3sLxPLY3De6nDp0ua/aeIezp7lysL6+4X53JE4:k6TcLJLY3i6Duua/aReZj94","tlshash":"b9b1ea46f530b574553748f6f69970a0d0245aa913d0cce8d1bd8f10cbe1ea9e5ca7cb","size":5491,"data":"","first_seen":"2026-08-28T05:09:58.395892Z","last_seen":"2026-09-01T20:54:52.616214Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"fc5548165afb3d4ce3a49412a44ff925","sha1":"ed38e6b5bf1416c8b1899b99cdd9eafe3af7c9c6","sha256":"7091a3b990495c11e2ba9809f170a4b92d026a3a6179f56aebe55f442eb82bd6","sha512":"1fb7777b89a4acfe8be5303905730d950bd99c3edfcac92ac634c329601309e6ced010abb55fbc42d69e2c124862ad2e8ae185152d642685fb7e2b8b086ed258","ssdeep":"","tlshash":"e2900298f483319c410d215c2076d015157d558199088d00a37104955438109a569b54","size":48,"data":"","first_seen":"2025-06-23T00:10:28.622802Z","last_seen":"2026-09-01T20:54:52.87966Z","times_seen":3425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/date-input-BYQo5S4s.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce4d65849c00e5a4f9a1dba3d2d0156a","sha1":"e4352aeb6a278e77ca4325a9751c5c57c3ea8f29","sha256":"de797dd57ef83b8626174a8a73a1df25020e811a4c36d8b1b06bb4b5b08c9a82","sha512":"58ddcf3fe7d4aa6006c0f14d5338ad26a01141abfc505d0c17af5945ba081c48d677f932b17b66ad1e2cf91adee1dcb002ccaec4dd35fca077a249ab13c3fa95","ssdeep":"96:Ltn+JWUufh9ddJmy0qNKuQ20z3m3KUeu78BeXFj4:Ld+JWUu53dJmy0v28W3778G4","tlshash":"a881b68171fa4cf703b24899f0e69060ae340bba619981f0c45d8e661bffc84d66ff65","size":4194,"data":"","first_seen":"2026-08-28T05:09:58.497185Z","last_seen":"2026-09-01T20:54:52.764217Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/hint-Bx9ATtIj.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7de726c747ddc1b64097d8e62f3348b9","sha1":"56494c97ba23dd02ca92c0dc74057e4b15c3e27f","sha256":"3bde3cb2a161941f56b1e96a87a9ac3bd36b6901ff2d1ed9f24152b038c072a7","sha512":"29d0e8bbba77e950c322f4be9ca6a6451ca1798b4a0a56873fd3f012256ccf150e35d82d4feccdc9c6eff3ec6f95633069ddea54eb01697e477f88f924c2bd4e","ssdeep":"","tlshash":"59416315fbb594b595f74d59bb1e60a8c024f4b5035a54ecc26fc44887ebd62d3c1b02","size":1983,"data":"","first_seen":"2026-08-26T23:17:11.935566Z","last_seen":"2026-09-01T20:54:52.863525Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/wallet-DJjcN-gS.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c4bf9e53602a2db7b972f5aeaf3f6c9","sha1":"01d21c35d1f4b4cd771f8a0bff530773534ca771","sha256":"85915345ea03b9480c26e23a144a6c67f43f34cac817a59a88c1bcfda075f07d","sha512":"59f09ba07c4c9384cec9e164275872ef996ec1a7f0c65d7e510355acff3470405b93d9558e28051580107ab56d1469600e3cb378a5a3d27028a9cc986237bf53","ssdeep":"","tlshash":"8c01abbcd649159d5b1b83788b3c78f0931d14bc331a46909a5f22b1a04a5b4ca8f860","size":813,"data":"","first_seen":"2026-08-28T05:09:58.590439Z","last_seen":"2026-09-01T20:54:52.825491Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/support-row-CaekctOc.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"088a98738f90ec8b6afddb67d49293e8","sha1":"68665a9f44ef16462d2784b6ec3962624bbc63ba","sha256":"9bbafcce5b24a3c64a8c60e84a19d6980f73fcd26c77abd21871e72ae3098d21","sha512":"ba7fb6eb25ec0705eaa8acd0f7cb68d08f3c7d016bfb2606f8eece12410415b9539aacb84d192dcf446cb6d7cbd0c4e2cdb9b176c5e98d5f52138e3d9188e577","ssdeep":"192:qBxOJ8tTfvuRsGnpWK0g4Eo9dAkjOJByAKPObVFqm4:qrOYvPGnpWK0KotOJBynPORs","tlshash":"81f1c746ee74aab48077487ff11d54279524e526cbc9cae4c0ed93a643f6db0c27ea03","size":8026,"data":"","first_seen":"2026-09-01T20:26:35.029403Z","last_seen":"2026-09-01T20:54:52.665069Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-BkZBUjIo.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9288b3bff163efbdde5108bb632467cc","sha1":"c758e81d560d37a43ae6cd198c743056632e2ead","sha256":"31da4c8eda95166c4263fdbe22ffc5cd86a8202a83a8fba453641b6df87fdb0b","sha512":"94622ad5c1381008c2fdb806e6ae89394e427a3153b0828a9535eddfb2ad8eb0ee2b7d6a74d7898c746518a4b04a9964857d8df0f6028a860853bb812b9f115f","ssdeep":"","tlshash":"fdf0753935f5408043b528fd40051131ea331a987c0df1d1f30c09bb9f5404085f39ea","size":524,"data":"","first_seen":"2026-04-02T00:03:41.742429Z","last_seen":"2026-09-02T23:44:25.341418Z","times_seen":1118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/get-captcha-enabled-DGcPoDlP.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"82de50813279bd2c55a33b2b2979f2f4","sha1":"cc558cc588f9578b5a4e3b80890bfbef3d9c1afe","sha256":"c84a459a5a59d049b0a51922af05e89189a6b97389f11c09600846158aa8fce5","sha512":"33720db27f2b2772ad759581e58e602fb586eb04b3987d2630a01b18031fed5280dc5473e5b5e2268135e45c551aff5533a81a5503b606e228e4a3d14a1a1c3c","ssdeep":"","tlshash":"5bf026257449313c070f9c1cce35c55616594555f620d8de714a9fcd42c79d3810be36","size":555,"data":"","first_seen":"2026-08-28T05:09:58.698253Z","last_seen":"2026-09-01T20:54:52.799834Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/modal-info-BYLoINVW.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"cac8d7eb14a4b8234a4a6347bd369776","sha1":"75ce8f748b534c48676630f240ac1a51f21504f0","sha256":"ec23d247146b7c5b51f522a6fe61108165b35df30d80981244d6d846d5f821ca","sha512":"0121445716759dac239b22a26a6c334fabf73cf7eaccdb891abb9e75faa551cccb4c1784985c5eaba9f14a016d11bda51c70515ed051fe7997a3a8d6a99a7b2c","ssdeep":"","tlshash":"845196847eb8d3b4647f0417a57fe949610ce52a83377ce48078892c07eaca2835874b","size":2756,"data":"","first_seen":"2026-08-28T05:09:58.80356Z","last_seen":"2026-09-02T03:21:21.899059Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-src-to-imgproxy-picture-C0cE2EmZ.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a47b6a81e5282b1bae86e0b6615206f7","sha1":"cd26f4741784dc4c317c654c937aa1ad08e05f05","sha256":"be9c0bed849ddd286c804334c72b122d4566a28e109704f6b9e09f460260df88","sha512":"f3f9311b2db7b45273bf3a31083cd1861124a9eb5f69a699049824348d73cb0d86a7bd1e01c51d303bf6b22c5c330d037886c4534c87d1405792b3df6fe0bd28","ssdeep":"","tlshash":"3e014170a6d495b0e77088e81220c173f13c3e453a2ce6d1f1ae185f593a05281a7c1b","size":794,"data":"","first_seen":"2026-08-26T15:23:24.127305Z","last_seen":"2026-09-01T20:54:52.682195Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/plus-NsoYnfxy.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ebea6a613f1f572bfc40920541e0ec4f","sha1":"b44ae92700ef00a8675929c8f83d92544c4d81b1","sha256":"898c25fc1f044aac4abb18ea0752af6e5268d7418aa8dd241ce9c398c651aa17","sha512":"d3ff5611bf74cd0a3a427c4a0ef69ac4434d6747fb72af86f865a5a37389ef9fc0c114cdb2981db2ac7f156bcd84d3962fd11bcb56919488a1b83526342e1f53","ssdeep":"","tlshash":"cde0d8fd02491bbc801ac778d73d1c872b1505ef638d81f0964e563a02970e8a45f9b5","size":370,"data":"","first_seen":"2026-08-28T05:09:58.781552Z","last_seen":"2026-09-01T20:54:52.784436Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/button-placeholder-ByfWt604.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb9b78ff620fab6f6c8896caa7165aeb","sha1":"71bc51e942c47a26115dbb7419f6fe2aafa5da26","sha256":"c6d545258d3eb9d3a0c9ef534b5da40fb8b7bf01f078828962267e16ea6132c9","sha512":"7fd7c2cadbe547e36a89ed68e27bf620e10f4208e452c084e831a6d27776835650c4e9699df60b37eb5207ec25e0c34ee558c43b6a8dde3e56de3decf148057a","ssdeep":"","tlshash":"ee414eef9ff8a3e86791c60fd21ade5676209813642138f1189864fa2ec5dd1d03e2c6","size":2007,"data":"","first_seen":"2026-08-26T15:23:24.163626Z","last_seen":"2026-09-01T20:54:52.757209Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/base-input.vue_vue_type_script_setup_true_lang-CKonV0s5.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4836c2b0bb8c13d5a77af2e23926986f","sha1":"4beba064c7dda5d3a67d3b664384a797ccc9f64b","sha256":"c6bdbb83b5b6a35568dd0d4db58d2d4c04384ad2a0c02addee92398c5ff2884b","sha512":"7790ad1d862a427dccae7688ce07a692b6823eb45d7c8cfa8990054c040fbac08a1b07c1f4fb28151a2a699b25fbd7c66571ef5d9467248f8934592172747282","ssdeep":"","tlshash":"ac51ea1f566ca4731e97c68af8eba060da58926c668000e094cfca345fbdfc4c51ef92","size":2780,"data":"","first_seen":"2026-08-28T05:09:58.628604Z","last_seen":"2026-09-01T20:54:52.739095Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/plugin-form-builder-VSkHwrfC.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"08de428c119e3e5da82e998d5ca4d712","sha1":"250626968088f72a85b526790c1a4e9aef4cecbb","sha256":"a39724feb483cf6b5762cbfa442a2b06693640d4f2536224b57ad069209fff1d","sha512":"186ed74f6b8fc4157c2c069d835470a5efb92c31b20d04471dc4909349db26ee3fef68391f94ad24bc84ba6914ac608195be61b127a1bf0746d32a3803fb28f9","ssdeep":"768:3bv+gt7c8+QTaDhiL+6ZGJOn5wzhzDiyRBNqhCy5:39m7FBgGon52ZBIhF5","tlshash":"9c336188cb65069dfc73ab9c740a7821163a7f63f5ccc6c0bcdd4ba6a4d0ee19160799","size":54355,"data":"","first_seen":"2026-09-01T20:26:35.13577Z","last_seen":"2026-09-01T20:54:52.758777Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/progress-ChUIU5Mz.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb33175a9f1782cd692888e83172c2a8","sha1":"03eb1cb44a7594e6fbdd5dcfe6a3d357c29b4a0b","sha256":"11aad1de6bc9f6751dc548949218d4ad73aafccdf1c30d8168954909b919d3eb","sha512":"0a5aed0a85b9058eb42eeb52e7c79c9e5b91a5af837c5597609237dd62303cc08d9bbc1bfe70ecf735df3822dc28d2c7ceab01ca6ccdeaf6ba30194c6a0294af","ssdeep":"","tlshash":"a2417781fa74d7b899730c5a5b3a40646208a17d471ff8d8ce69c579c7caae1050dbc6","size":2168,"data":"","first_seen":"2026-08-28T05:09:58.664135Z","last_seen":"2026-09-01T20:54:52.602801Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/dice-DP7hpcFb.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f8abff7f93eefeb06fbe22487c6bd98","sha1":"af9c9f08962891b3ecbc896c155e398a672772c9","sha256":"04e3bb597eaac0f7054183148667696820571c9a6e339761cde7a0db4e5ed868","sha512":"a076eb3622a9946d6211671b1f35c7cca9dd3f45c71876cc906f8c57934f298af18f577f8c1591c68025ec648324a1c6b5493992b3feadd7275bb098b032e8d8","ssdeep":"","tlshash":"1611bdeb6e5595bcc6ab49f9ce3a36010f97926a325d0059f7dd26770087950c483c50","size":947,"data":"","first_seen":"2026-08-28T05:09:58.407492Z","last_seen":"2026-09-01T20:54:52.688315Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/games-section-widget-DwnYt60X.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"104d569124fae2202987b975a3131a52","sha1":"87546c7ff846cb13454e68327f4e495718e9d694","sha256":"227db725421b7f0395939d8c393e0d9fe2f553370ef1174f1fca8a694b0cf002","sha512":"cd6e035ce4b0ab0d13073a3d421ede5bd69ea02ed4a7d50a1bb7c583fb3bb57aa8d1253c291c112842ada52b34342f25d7131812287d69899de1a0374ddd9747","ssdeep":"192:VddwpaiJaWLtsgxQw9cu28ygFrEWWQ0Rmwm:VdWBLtHp9cL8ZOWW9Lm","tlshash":"5ed18346ea5459b284279dfee025e0b0ab3505a78799dee0d0ffcb710b9d9b4c01e60f","size":6672,"data":"","first_seen":"2026-09-01T20:26:35.096439Z","last_seen":"2026-09-01T20:54:52.839519Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"de71c380e96d9b7bf68cb0a923e08eba","sha1":"9aae5681bf56d422dbf17bc20de1ffc684f6bcf2","sha256":"d4fdb974acf7a5b6f9f81dc7eb577fec64b2f814fdf47ca5c28e9c6683f7efd6","sha512":"a8a4091e05901dd2af4061255342bb0c5494967b8c23044c93af0c642d2090067443be2c68b48cb2774398a46304f8de144bde0ec0af57c10e62c980e447f89e","ssdeep":"","tlshash":"d780008cf0a3b00ce8023028303b002aaa3eb8c03a082002f3000082a83820cc023ec8","size":34,"data":"","first_seen":"2025-06-11T16:05:43.634134Z","last_seen":"2026-09-01T20:54:52.880393Z","times_seen":7588,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"fd45ca2e4062fa9b59ac1528cba8fce2","sha1":"4002123a4b26de5f26d40fdda3970fc29c29f1a9","sha256":"29fba0ae1b947d785762f1f052b32dba2f8b53171ef5b13a03eeae81c2e4543b","sha512":"1b07926d06b5e580825cb5ed63aecff29b91b0885a795eecfe6bb02e73d8eff1b5b8c71ba10883436b58f019917ff66ee2ff17fd70436a135538441d1fca1ad2","ssdeep":"","tlshash":"16a0118af28cb0aa828b320a202a0002220b0aca0c0800002b300ac0202a002023aaea","size":75,"data":"","first_seen":"2025-04-14T07:41:21.716401Z","last_seen":"2026-09-01T20:54:52.881114Z","times_seen":455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index--nwlGUcV.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c2061c01b805ef40e4a9d3d3ca732ea","sha1":"864facdf1e80fd8be7e2adadb68973c6bd9b90be","sha256":"fad962af681445b6530695da33545e5be12ab6a6bca16567bc27751f68822e46","sha512":"14c9956508ed908accf981e44020b181625e889f4441d414cb5f5465dc04410771410fbbdc573f4103ce6b621239433f257362c6211e3efc39f85b687377d58e","ssdeep":"96:jib8Pa/QVbUhPRkpoDory3IzR+K7eoZf0/oZuI+tuRP0oASn++pAqO8Uve:XaLRKu3GR+KaRoZN+0Ht++pAqO8UW","tlshash":"9ba1b777e5f4cab901b8dac7eb1114e2c6f016d1f908e8d0a7be4d797e805c981aaf14","size":4650,"data":"","first_seen":"2026-08-28T05:09:58.611086Z","last_seen":"2026-09-01T20:54:52.593443Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-xuAcHwP9.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"cef17d843652fef238beb66aaeec462f","sha1":"8b00cac5c1a3963fa1bb527d7d00e69d8b28a103","sha256":"ba948e93b681693014d449b00a55c866a1e7851d297e25f5292e185be3d5b285","sha512":"f0e00ea84f780ca2419bdb7fa4495fff9a8752b01e31f20940e24b544d9d912351884bce0e405e0e519aae67dad1d3c45f7852a3f0483ffb119e55b070f42167","ssdeep":"","tlshash":"1bf0a3b790068bf428bf89f5c52cd562566205d70741c3d152ff775127460e7611e20b","size":449,"data":"","first_seen":"2026-08-26T15:23:24.174535Z","last_seen":"2026-09-01T20:54:52.798222Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/page-heading-D99oT0ZS.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7101d07223512de7d451c765314d40f8","sha1":"9633baee484ab514e4b28fa81eb1b953e9b96d9b","sha256":"41c21f2cbbd7dc6cf680f1b290d7a99e620face1da2d2189933434cf189e8b9f","sha512":"8912f18f47824ebf1eccd7924534b53b985adf103448fa600d627cc0cc1fe929014a5d42210e3b67119fbb5f9438e8e501d74ffe06ff5b965e50fe338215cb29","ssdeep":"48:S2FuvK1mv3y7wCCxUPXxpSp7xGLyjyzzoukyoGdGiX3QdBI3V3o8GAgSkZH3QIjl:3+v8wUxI7Qtp3Qd+tt43Q6ibaxP","tlshash":"74c18449aa24ab38fe322c503769621db25cb81a4a9547fce5f64f5b07c39f1c721f05","size":5791,"data":"","first_seen":"2026-09-01T10:21:14.513983Z","last_seen":"2026-09-01T20:54:52.842461Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/swiper-core-R1npE_02.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d5589b341fddbbbf30a8dafbc901725","sha1":"82f1ec6b37c8b63c9e1c829ffd16504955e9c331","sha256":"02fb2557c9d8fbf868e34cb91705b81a2c2c6302f597eafecac7eda6f8a53539","sha512":"61ff026a014964e63de29f3bb105fd0791ccc9887c59396481813d576d902be8aea6a38f80c41a4e3940c234f3018949e958a8992b2b044c70f8eabacc9d79c6","ssdeep":"1536:g3RBJ0tQYVXhuuBJ7ILPf/uxPxcY3I4sTMWHasN/jPBl6vHeUBNFkK:ghBJ0RhudD/2PxcY44YM","tlshash":"6c630989a164753682e326da53a5c502b3a54c54b449c4e8b1fc8c6f597e89c03feffc","size":69380,"data":"","first_seen":"2026-06-24T21:34:31.156988Z","last_seen":"2026-09-02T23:44:25.307531Z","times_seen":514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/cup-BLgxx0Ku.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"eacb8923a2fce4062f02ea66f5ea9d3c","sha1":"76b018f016b4b0f7024fa0b542928761475eda76","sha256":"d5528a8567f8d14870d08572435291a45a9ada243e3a3e1f453074546cd1ae38","sha512":"0ad67bff09d41a26eb0850799ec1279020888cd496006c1f09c547b0a14c276a5b7e7ead8f94550bd8c69b0dee64d28a443b00a0fafb9f654a6068a0d762d70e","ssdeep":"","tlshash":"c801bdae3729a0ed961ee80ece29848d934ea8f5371691c40d4ecfb6070b4d1ea07930","size":813,"data":"","first_seen":"2026-08-28T05:09:58.537298Z","last_seen":"2026-09-01T20:54:52.576875Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/menu-tab-CDNKseFR.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2efee3f366d88de24364562025f372d","sha1":"1374cdcf56e750572caca0a6d7b2daf8be640efb","sha256":"24155d5f411af7c25c27caa04ec0586631248e29acdcd6f1106ba04daadaaccd","sha512":"483e8a693935023e946ab62a12eb2e9e13c3a93c513ad3c84047484222cea14e40bd58d267ce57b6c548d3dd08d6a1932ff9e16066aef6144938662e67760e8a","ssdeep":"192:1Jfnvt4B9eXlQKoDeISpWPS1eq7Ftqqg4:1x6eXN1pWPB8fR","tlshash":"74e1bcbc7d90e13c9a67b47b4778f0ec620864e48f4606e4d238d93e4fc6bd29192356","size":7380,"data":"","first_seen":"2026-08-26T23:17:11.938716Z","last_seen":"2026-09-01T20:54:52.743981Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/checkmark-DqDOOLD8.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"204b7fc16c32808d0ed595e0a2c41003","sha1":"a78088c4591c9510e28fe3482d6238f017f727df","sha256":"fc7cd5fe615681ff620963c232911bf9ad944d917887afe1e5a257aa8768d958","sha512":"f1c18f75c3f09701c2fda8c2ae7d1fc37eebcfc095875044e1efac3fe4dfff4b27e661aee682e2bfb281cec1497094060b0ea2a648c13f21b597fc30d55670bb","ssdeep":"","tlshash":"7ae022ba02491eb8402b8938c63e0d92470c1eeb3b8484d1830e2f3a46d61f4e94fa79","size":396,"data":"","first_seen":"2026-08-28T05:09:58.826792Z","last_seen":"2026-09-02T03:21:21.885037Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-DjRPrGkf.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"43a4a8aa61c98891517fb6221ee8748b","sha1":"cd074f56df636107b8728e42baef1c022798bfea","sha256":"092f0d5c723c9e3fb61efd065bfcf65beee5780c926fcb704524eeb2c075a0ff","sha512":"5432e9e220868839cf7066577ceaba00a8cf3f34e8c2ff7f5a950b2fdd7ca0f749b103d7d2589c85bef8b0e67b0a0f8ba7bf7e6515328110bf7768c44fdccf81","ssdeep":"","tlshash":"4161645c9391d03057ed44996b791621baf11389b27994e8f2b82cb8f407dc2c0adeae","size":3200,"data":"","first_seen":"2026-08-26T15:23:24.150003Z","last_seen":"2026-09-02T03:21:21.915826Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/fp.esm-CU1Fjgwn.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"aded6609fefb70bd1b20c1a94964f528","sha1":"9389a4b4ba90424f8116365f38807af6220ac944","sha256":"c3357ca1028cb2b8a9d4a3ae26eb5a150af9664124a134c1f82415674d849a3e","sha512":"da59096c56042daf8325ef450f29d42c061ebfd7d75ff7be6433b790123342dabd761d8006b32a03f64187036dc0cc3fcdc88225fe605ffe500a23b5eb3d667d","ssdeep":"768:rGhcsg9NF/z1l1QB/iBi+7RB6hJg4tNqJWWyxop:rxTi+7RB8J1tNqJWWv","tlshash":"d40308dc7287b078836354b544bf9107b23e3c61641d8902d467d9993cbae6e823bfb9","size":37708,"data":"","first_seen":"2026-08-26T15:23:24.323447Z","last_seen":"2026-09-02T03:21:21.909163Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-CPo_BH7C.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"95b130f0451cead3b818a1fec6bca164","sha1":"c226899379c04138d5cb01dd461ff58bb0f15cdc","sha256":"b8b5f69eed04e3304b430f5976d268bdf65c97fc6e0c1cf0a50ec2881581c64b","sha512":"a6d0cf06b483e03f689428bdfcbde3b00201e76e1585dec878c9ca4ff95f8271fb272ae1c8bd0e84069aa5f7f0fab49f550e000bf17bfbb057df60cea02bc2ab","ssdeep":"","tlshash":"aae02bb78016c6f4397e89f9d448d112586355a65780c37293de6725274547ae10ea07","size":414,"data":"","first_seen":"2026-08-26T15:23:24.062839Z","last_seen":"2026-09-01T20:54:52.748084Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/closable-tooltip-header-CzjRHpAW.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b814ffb93a7d9b7bd4865146295cf47c","sha1":"894f7fa934bacec7225c0047717380550857af4f","sha256":"4096924d817481e3acf808c4fd4a83a2895fe1f66e8bb2a8c0edee9bcb7c8698","sha512":"347f2266982b70eaa1773ea41ba4982bd1305fb2d0a68cf2896f2d7f396d7a450e3dc7a830be66599b0f83b270bd4444aeb47208f4bb6358bf4676befc83b709","ssdeep":"","tlshash":"e631741ae632db78e037902b262ce749f48854bb0e75aef8952a147c07ddeb5430ab41","size":1713,"data":"","first_seen":"2026-08-28T05:09:58.852134Z","last_seen":"2026-09-01T20:54:52.782759Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-BNFtgC1Z.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0f884b770acfa31471e644737bd90a3","sha1":"fe829e2553b7772604b1b67a73ff8e9ecef6fa3c","sha256":"f285f939cdea70f62608491f650eab91bb879d06af9b9aa978d9f9ccac7df7b1","sha512":"8e74ce03d886bfb48dd838ebab9e153f607e53d0f0c8dbe6c2d5765e44f1fe71e06da7039c34f0376d41aef095222b014be407afaaf6c3dfb62be7a9f8837173","ssdeep":"","tlshash":"2051720aaa98acf501bdce88ec62b5e148f18781d240c98cfe365c7c3590c75805ffb6","size":2673,"data":"","first_seen":"2026-09-01T20:26:35.019401Z","last_seen":"2026-09-01T20:54:52.702687Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/modal-header-D5bOGTxx.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f9aa43ac273b5c7965d9579d65c2cc6","sha1":"2ed229aa18c0153c28fa6bf03c8602a8ef1cda83","sha256":"6d156dabd3cdb55923955d9ecdaa84138d34528806a82636715ada53b0ea501d","sha512":"3d68aadf17b3bdbd57d14f89bff3f97331a7d110450d07b2a703fdb158bd62f455f69522e2b45fbd498b557e18d8fbea9d67e544642c1b221868c9cc900ad9d0","ssdeep":"384:PHwrlO7NPXrQHRDRXR1TFTJTYAPeSWsUo:PHwrlCNPX0HRDRXR1TFTJTYmpWsP","tlshash":"7f6261d5ad3c763cdabe0813f68f9d04668ca43994515df6b97d018f03c14b3a2ea36a","size":15581,"data":"","first_seen":"2026-08-28T05:09:58.566682Z","last_seen":"2026-09-02T03:21:21.907062Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-D-1au1dZ.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ebe5b85b6438003c30c9ac4cee6239dd","sha1":"5e3b43d3441e34b028305f36b35d456879452c67","sha256":"0136fdeb7e92e3ef8212e21b03abdd66ee01341cab22ab479e58bd753bca5871","sha512":"ad60b24919f202f5ec879ae4aa5206c63f24e768154dd137b0d1d4dc1ebe53bab852c99129d04e1a371b58eb7eca61b34603dac843aeafd7865d1647720a8bc2","ssdeep":"3072:5CNEv+p/NywPMklC1gpGgGMHZEH5lbVj9bdf0NX:5C+vKNywPMklC1gpGgGMHWblYX","tlshash":"92444c91bf20aa7c9733640cd7491054a11d7bacda0699e6ba7e257f03cbff0c122b59","size":255860,"data":"","first_seen":"2026-09-01T20:26:35.130038Z","last_seen":"2026-09-01T20:54:52.832571Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/infiniteQueryOptions-Kf6x0a2l.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"36074a4ad1ee712f187f8a9017574356","sha1":"09e567f710fc27c5a03f2396ae8dc1d9a88cc989","sha256":"146d9737b192711c6cb3ac1635aa88f9e409e813b163ab4d9b5ef6aa7243bced","sha512":"3732bd7f8aba0a9448ea0d35aa4f5c6b7c26e41f98e3b727e700ed02d4ceaf0d728136879946d18004f9ca8284220d60c15fe1a081d68662c628ef344290958c","ssdeep":"","tlshash":"c690044530c170745111313445377c05d114c45cc5d5d735c104454035100f0531fc0c","size":39,"data":"","first_seen":"2025-09-20T01:00:19.497611Z","last_seen":"2026-09-02T23:44:25.304122Z","times_seen":3054,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"96d69c7371ad6b7e2d91f73cc2d28051","sha1":"c8c56c9f3f49ce47921c2a469b633825e070ef48","sha256":"6926ad929eb09be5027ce76cc01015a208d9fda0658abbd635e4db66a3ee70c1","sha512":"840156b8403c7d359f11c123846cda451593f9e3870d89c27dea9107ae76382e2d13ce4bab59ba173be6e9b3d2cad526aa0e53ebc03e4f7441696d9bfe366d4f","ssdeep":"","tlshash":"16a0124af18870a5018a3106101a0001124b06c51c150000172006c0201601201259d9","size":75,"data":"","first_seen":"2025-01-28T09:42:26.514511Z","last_seen":"2026-09-01T20:54:52.881998Z","times_seen":1744,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eventHandler","is_inline":false,"md5":"179b2090399bb6c167ead1a8ed210356","sha1":"c5f2fff6d51b90f44cd2bcb927bf0487824b56e1","sha256":"4e3de161fde742bee604783057e1b13d9d239234e3c00d514e93559c64def42a","sha512":"b423b67e1b35f17b8478eb309215ccf17cd74df7cd5de57cf373a666d76512910ad646f159b562c74316c5001b77a645e97bff06b8d03c1da46c16b48fa6701b","ssdeep":"","tlshash":"0bb012f1a633b2b0853c01de864e78c3c5133ec335d887fea4000810a34c5542438517","size":104,"data":"","first_seen":"2026-07-03T13:21:45.082962Z","last_seen":"2026-09-02T23:44:25.613417Z","times_seen":412,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-template-ref-BXEEq4q-.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0793715f8344a7d3e08de3fe77c607ef","sha1":"88ff6e3d51b021e4033f51580fa1d2a3ebf159e4","sha256":"98bae4d2db0ebf9ba2356600d4df31e797845bc757af808ed5545ad5bad34680","sha512":"c781cef105becf20831b3c8e6ac1ba950312f1a0522fb6113c7d34b755d05477927cb888262397559dde736d87cf3fd74889af4a5dbdd08d2881b94b1a6beb93","ssdeep":"","tlshash":"17c08c6fe003b1b3d221389821204db0820189c6232bd5d0d4440ad106052d0c07bb79","size":163,"data":"","first_seen":"2026-08-26T23:17:12.006316Z","last_seen":"2026-09-02T03:21:21.91892Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/badge-deprecated-1BFHje8J.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ceadeee008d0a643f18ebed88869cbbe","sha1":"5cd7bf5bc58690b39fc001a7d5b56669df2d8a8d","sha256":"13f21c25fac275478d8f788ddf49023b9ce07459e2cd7db66d234beed38054f4","sha512":"d9ddf1afb6c449a26629d14427677e56dd548074431beeadf6a52b7fbb6b4f6c10b0620aec91f48372648b831e4ab0e32bfbf3e572e3ec6e440f3f95d985f294","ssdeep":"","tlshash":"2981ce77f19b96a1bf1346bbb90ee075c44814f88b291ff6f295421a13cdefd018a900","size":3882,"data":"","first_seen":"2026-08-26T23:17:12.102059Z","last_seen":"2026-09-02T03:21:21.899714Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/modal-footer-BqYuj3k_.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a6ebc568d481239626a0183531872d1","sha1":"ea93d717b8343c0f7062b3aa2b412d3bd55ba8bc","sha256":"fcc8eff667c0329301d9443c2bab9a1574908d971b33a104e6058b79a02b96bf","sha512":"62eb00942bcee6268ff51ca56945c2fb12df96a1ac22a01e0586c489314ab955b3ef22eb10b12e5ba12a2f38cba6673d4e395f3b3b3021714d10da4fc13306b9","ssdeep":"","tlshash":"3121e2497ff991fc094f5087e63b9ed89595a4716a81b8e1d838c43e0bcf9fb40c6a44","size":1274,"data":"","first_seen":"2026-09-01T10:21:14.711928Z","last_seen":"2026-09-01T20:54:52.826309Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/arrow-forward-BcqAeZQr.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"70ce560038bcdb3009e1cc9ab069f0bb","sha1":"4199e0d0d59213385aad6976072e6a11d4ea0d05","sha256":"f8d4677f0b851dd5aba1309ae5aa0ebe760d84cbc817e9df63d04872fb5db9eb","sha512":"555475795b1f49f6ce3b6ba7b639755edc7b1a91124d02ca6913b9bd5f7e5e9407c3e175baadb2ff84c230b2ff3f4fb334fd4ae557453de92640bb3a1c86fa35","ssdeep":"","tlshash":"46f05c7c214f61bc011742a4c6ab3d150709aaf737c584f50a0fda3a42225c4f94b17a","size":441,"data":"","first_seen":"2026-08-28T05:09:58.446854Z","last_seen":"2026-09-01T20:54:52.590303Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/load-remote-module-nzX6ryby.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"911809a3d203bbf9f1ce0a8de60d3946","sha1":"50ef71e172937824fee37918444af8b81942910b","sha256":"1fe4f5ddcb2480d399bbdea26fef41e0534047c60dfa7163dc522d13bd61f87c","sha512":"696f88fbe79c83fd086c5620a3e76517ed9974499c38d390d9a55ee05d5d3c2357050bc6553fe32e26b3d7bd4cc59ef53245bc6882fa84e7ae5a835cee8688b3","ssdeep":"","tlshash":"891186717232e034d3b548d926710650ec391331756a80d3f20d7e26379b4e68acafd5","size":869,"data":"","first_seen":"2026-08-26T15:23:24.325764Z","last_seen":"2026-09-01T20:54:52.824671Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/banners-carousel-Bu3LdDBo.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c79bf071eaf6960ca210f20468c1fe60","sha1":"539168766cbc9cedd4c2228d0c7cd2ef4af49c95","sha256":"0f61ab1da36abc41fa123610118260bdc165be8d99a049a7f0c2997f9612b918","sha512":"68f1a090dbcb5102d7aea57c55dfa9ea135ab628515d667856c8f129a0a81e13fd59ac48512a303e7bde040d322b4569a140f6fcd23204128c1a3eb8e355d526","ssdeep":"192:ezWQGCQLH63CkMlZnwhdfXhZ+lFdJ66jjSuVHRlJQKqXCaSte+jeHm5JZy:kWQGlLHPZnwhVC7PZJQKqh/+SG5JZy","tlshash":"e852a5106b20483bd5238e6ca644d578b2586471cb839e89d2db6e3dc7fdcf4106e78e","size":13345,"data":"","first_seen":"2026-08-28T05:09:58.775123Z","last_seen":"2026-09-01T20:54:52.621457Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"30e225e788a5a94e440538950d234394","sha1":"a9d485746dfa67ad6e6ecf25260d59a7102041af","sha256":"8e2e9679862cd4e113f86f4ce63cdd0e41918e37f15af52c202ffa9e51be3ea6","sha512":"f1267b09a109b18b4f85f0fbcad59fca1a6a0ccd47d3f6a33d5734e6cd97ce0f93aa1105d41e2ca4139662c97b2e1a256193f380693ff9be263d7f795fc7b333","ssdeep":"","tlshash":"07f05485f858c1889537017ad37bcba8559000072d801a234452c4e53c3dfcf46838ec","size":483,"data":"","first_seen":"2025-08-30T00:25:12.164782Z","last_seen":"2026-09-01T20:54:52.88351Z","times_seen":3045,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-spAEgv-d.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"de54cdbd911f81ffd04894acae9dd3db","sha1":"7fde4fcf83ea43f79dbc832509511f3d9fd6fde1","sha256":"dba255c962fdf487036bef27e80d295ec7fdbc416ec79f3f91d5c4d0485a85f1","sha512":"683b033a7a4a5ff89f83645546247c392d21dfd01b21de458d6639a6a593ec0653bab660307c9909cae271c694b1c7d9d641ee7929da43828e433d597ce4d2aa","ssdeep":"","tlshash":"e2d023750413e07d75e4acc8d794ff3103d9688fd55602c583890984af00150f85be5f","size":221,"data":"","first_seen":"2026-08-26T15:23:24.129971Z","last_seen":"2026-09-02T03:21:21.896226Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-PFDisf9Y.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3aebaa649e8f5933969b33e69c6d4834","sha1":"1ad1edebbe916a142ef28a8f1750f99c1ade7b97","sha256":"53b39c6c5fc6997df5fa54187954f849e781f300d4213cdc3d8c81d3c10a2551","sha512":"7a7582b00262d4442873da6e9250efb7ca744b6d192cd144ff9401447fd96841e9a5cdb54a63687a27385f7d9bbb7f005fba78280a605865da65a883b81f88d1","ssdeep":"","tlshash":"4601f508e5f896b8c9adc0dba61144a3e5b031c6fa34d8d447fa2d689b805c253bad48","size":788,"data":"","first_seen":"2026-08-28T05:09:58.438718Z","last_seen":"2026-09-01T20:54:52.586087Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"68af0cdfe2fe1b1779dbea1a2b9d6f98","sha1":"69d1c8127396d9f4ba78630415de9beae7cc6d3b","sha256":"b67dc66e3f6a983c8bbf452a8f86424f68ff15d73440c18da06a717c81ab6c23","sha512":"497093bd09649a16950e8fc0e05fee05e8d8e610384ba9107e998dd5d841fa81deba431f9aec99a044bdf9455be943206f35c79bbde6889ed8b9bd1e1502fc13","ssdeep":"","tlshash":"b1d023a929b6843063d813476176e394357120507711e504c1c9cc1f9e10ed705b555c","size":217,"data":"","first_seen":"2026-09-01T20:54:52.884337Z","last_seen":"2026-09-01T20:54:52.884337Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/list-item-BhzgBJ-_.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2451e6bd119d5b75de3424f15c17a4c7","sha1":"c7dabfd2235333f9b58b36d69764a00eb9d22b98","sha256":"3f71896b6aa850239245ebb9e769385fb56e6afd0c4088fe175e45215ddbfc72","sha512":"fa4a0ace62848ed22be99716f26c6592d9bb19f832ac021d4bae77972c8504cf609fc7d5e39de31fbbce4161e86ba83d7b686218e0246ad97dd110f811730bb5","ssdeep":"96:oBWwOs/hoTw7tPT8ngLpKJwvSNt5PYbPPJb7nUpUb0n:oIwf/hoU7tPcgLpKESNt5Qb5bDUpUb0n","tlshash":"d3f1405f9721ba7cc9e6b823a21f10b85a18e46bc97405f7c5150f3e43cb7e242b1b48","size":7989,"data":"","first_seen":"2026-08-26T15:23:24.18007Z","last_seen":"2026-09-02T03:21:21.869158Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-Ba2RL6Qq.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"874406731030327bc53b3b710d39ed9b","sha1":"a3e2dfe83732e522ec6017657e0969b81245ea72","sha256":"c70edc34531c6baae7f3246045e4ad750fd90a17de09aca4250d59fe4fc06e6d","sha512":"29903a459deaa2e8b7ea7ae67603488ec865c6ca6a5363c7447c79542c69b768244cf56048576d25e741106f3a0f64d7f9afaf0866973b3cf8dd0574b6959d56","ssdeep":"384:ka5qV8eI4coBSubVfHtYMZVur6Oq//RJUOT9T162n/27ZC2W56hiN2BbekHglVMA:kEqV8rUSKVfIOOq/rj9T17OilquL/Ddr","tlshash":"0ba2b62a4b441a6502bd0ecc1c17718158f08b06b409d86dffb79efe346ad5ca4b5fba","size":22413,"data":"","first_seen":"2026-09-01T20:26:35.001386Z","last_seen":"2026-09-01T20:54:52.626181Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/pagination-AuDotTjV.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9554f3464bca9661198bf328b65acb5","sha1":"b328528bf069c0971bcb9d7220d6711e6135cec4","sha256":"da6d6b5d53be48808dfa3d5444605a48e9ec52b5efecbb9da36b9d022c713ee3","sha512":"78fc3ad667ec7a97b6eaad635057abeaa35d5587883bc91f6178c31c15cecda6f7c81c9ed217e2f9d7286455c0f0b911fa01a811597514ce3a0a31650049356f","ssdeep":"192:lClP+bmu5vMqZ02D4fQPhxP6DqDTo4C5GY+s4ZDMpj4qR9MHqItjd6R9r2Yy2IyX:lIemuZMqz9fWeGps4S9YH665gFuJ6a","tlshash":"151250de611265b24ad317b642f84ad0d6b00844f48ca87870f8cd9f177e88807e7bbe","size":9083,"data":"","first_seen":"2026-06-24T21:34:31.330217Z","last_seen":"2026-09-02T23:44:25.287354Z","times_seen":515,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/footer-partners-link-D-kUgnsj.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c225c3d2fb8f4cb91155a760a2651a71","sha1":"45358a901a9380cafff78333e11e5b853e88edfa","sha256":"41eea658d79230c85e15c9b666db4483ac968c5c6aae976dc9681768cfa3ee36","sha512":"f473e2ff2facc782c24749684442983a9aba2a7e39db9eb318d119b794112c319e7470a4bc12ad7e15c237e7b39ad47fb0a3eb68f86938596b312597bb726d4f","ssdeep":"","tlshash":"816196a1bd648c7412635c41f62d3146c658ca7d8a5590dbe2cfab3807f3fc922d7709","size":3351,"data":"","first_seen":"2026-09-01T20:26:35.137677Z","last_seen":"2026-09-01T20:54:52.704519Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-modal-DN7xCc4P.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5bded6821a0a694c23a758f4cf3bb7b","sha1":"1ae88c869f18c8b8539ee1c5170d9c3d53f90e14","sha256":"300ee5af93e47ba6ed090600f407f6ea5617f8cd0b3b78be6b51cffb9efd09b0","sha512":"b78c10ba967473bf1149719182eb53c87df4eeee4f38376e9fd6f7ba4c24e05eb04f4dbb031ad176e20fa6bb62b7fadda08531bb4667b2ff82200ede97f5ae4e","ssdeep":"","tlshash":"37210f5fce69aab8020be95ac49187bf973817e0d25ff1a3906e175822673c2431b81c","size":1226,"data":"","first_seen":"2026-08-28T05:09:58.442264Z","last_seen":"2026-09-02T03:21:21.912083Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/support-banner-BHreMl78.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5c3f1b65f665490b47008852e8891d4","sha1":"04c40e708265e067222eb9d54384f555771dfd93","sha256":"5d66469713b526360c49ffbe7c51c6df4f04fc7f6644a18da8c0f4cb55f67cdd","sha512":"14909fb909a8269725dcd797a90631ac5a84e81da900431ba052cbd9ee4e4625a247aee6d3dd2a616b2c3c87f2bbd4f3ee58a770d916837dcc351bde45e0bd09","ssdeep":"96:UG24/cqWIRnv+qsGBk6/Z+DhPUc2tUzIJovwvG04mRTxjsVx8d9UmurU0zQNButj:UGvtWIRngGBku+DhPUc2tUzIcwe04mRi","tlshash":"4cc1a705ea30bb7cc5e7586f3315674a9455b2a68ee7cd8c8075db1847feae0c345309","size":5703,"data":"","first_seen":"2026-09-01T20:26:35.018411Z","last_seen":"2026-09-01T20:54:52.808737Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/useQueries-9j_7dr4K.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa0928de037dc379d51e47b931eb224a","sha1":"032995e581ac5ce4f560661641b5e1f8bc7ee8bd","sha256":"6a8a49d869e3beecb6b4a8fc97d144be20147ec83f5f240fc0cf44b1a0a9b326","sha512":"73c81e04f7ba8ffd5af0a47744f14703d10b406de8a196c5b4f10a3cfd1c6279dd582308e7193dda6b4da28de7b38bed67e086dc4c4745501643892992ead8f0","ssdeep":"","tlshash":"1761734fb054a17673a1c5e9cc358066a3196e08300d406cfbad9ddbae53cc96672f3d","size":3202,"data":"","first_seen":"2026-08-26T15:23:24.278634Z","last_seen":"2026-09-01T20:54:52.663911Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/result-empty-hgnMQ8Hk.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c84437019a15b2bbd56d65db2e481fbe","sha1":"5d7bd2f53893762cb88c265b9d1974d1a617d802","sha256":"497bf9d3fee3af107338d6646d9701175d04d729a0718ad4643a4a82debfbd00","sha512":"64a932d65bea60ac830c9590abe04176663f2898968092c93f79911b297795388ed21a3e6d013bd53b930d498d27f6a6a2dfe1aa07d4ac1fd05c30433ef4d17e","ssdeep":"","tlshash":"1a616585fe20d36cf5335c567b2a601cf00cf52e569aa9f8d1aa860947df9e2070cb42","size":3195,"data":"","first_seen":"2026-08-28T05:09:58.530756Z","last_seen":"2026-09-01T20:54:52.789707Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/events-BJrNQYeD.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a23f55b23e13299d16b70d6618cc3c07","sha1":"c41af9200ac1ef38ce9215adc5543654eb27b1c3","sha256":"6e753cc621fdd877be5783959192eb9c7232160ad78542760506364f8f175443","sha512":"1e5e41c673a9e90787f2548b03972052a03a0cdc2e02af18c92655c77741502deb7f593ca4b0c01d7b8ba1cbd6824e170ce3aef2c349d99fcda3425c31896908","ssdeep":"","tlshash":"e6d0a70ba11983b4045dd4fcf391c863c9b419d2b794c5c0c7eb0f3847d04eb8269e4a","size":252,"data":"","first_seen":"2026-08-28T05:09:58.459001Z","last_seen":"2026-09-01T20:54:52.612692Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-DBM-vbUb.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1701fd486af54392bf8bb36a28dc99a","sha1":"ac146c5a184e06d5389cf00ced0ac538eedb8d4c","sha256":"d915c223122a6aba5251b206371e239ecaec4a9e8dc69aa9ae6cf50f108e53c6","sha512":"b39ce07ccaf4d0e7553ec6d6071baa1016eed5ae28b4a60411e71100d5d4380546751fb0f3a5af35bcebed84e885280242dbe9698daa82efd232394e6fe6f917","ssdeep":"","tlshash":"e0c02b1f1032c53c02230cad3648da11b738c8700b30f980994933210385091831f003","size":133,"data":"","first_seen":"2026-08-26T15:23:24.365577Z","last_seen":"2026-09-01T20:54:52.851155Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/plugin-vue-query-DmKbFtvY.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a9a0e760deb1656e4a60e8d5cf3deef","sha1":"98fbfd7db0ee52ace3f987ddc4177594bba8ce52","sha256":"d269713b0e49d084a4cdf27d95174d003f4aa396323167d99c41bf59436c334c","sha512":"4c5677042e112041f66d04c929819e11e063e3fa2fe00881e498897abddf02b7aa190194c9d44851376b347e2c334e404dea107ca26bf84f5cd62fe6dea4cdf1","ssdeep":"","tlshash":"3001d01fa478e3ff4b5e5668a2748c1564104fd9a721c1e8d48e6e2ca92fa41a24ff05","size":756,"data":"","first_seen":"2026-08-26T15:23:23.964502Z","last_seen":"2026-09-02T03:21:21.905414Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/game-history-section-lobby-DqWJpphc.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b32704700ed7eb5c86d09352788e0f61","sha1":"0969789f9cea836b198f97c1af5cda3aa327227f","sha256":"6e7323ae608c03564ecf226fbac7866780e784fd9fbeb4aace838382cf9c45cf","sha512":"e9ecf18a632bf1206d7229af84c7eb3de7eea5764d1daa3b00309c120d9bb086232560813535cc433779e77678513b8b42d477d77fb5d186d0e00a6b249c34c9","ssdeep":"","tlshash":"54317867d5505ab2046accf6e011f531e93786a303c0ebb9c8ef87750fa55b5c91940b","size":1675,"data":"","first_seen":"2026-09-01T20:26:35.065477Z","last_seen":"2026-09-01T20:54:52.845039Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/fortune-wheel-floating-widget-Demm8p3U.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0182641614b656895d40c4b51d42fbb0","sha1":"cadd9b47674b8a2958e63dfe5ff0998e62fa2a8a","sha256":"b5135f28a75602915da65e706f66cbe3f75056a41e0341b57d8675e71c4b3295","sha512":"9b2f567b81f03900e4498831e1cc24e80e485870370e0011544010d91cf795ede31650cfd1d31e99aec411f670ca27d80c8f372f3678b5113a93fcd2b536c4ac","ssdeep":"192:TVQjDjO9hDJ2tpVT0JculWsX2YR9ysZEJxoO8nefQOWcVHLsy2VdsASzjKVfP:TVQjXO3d2hTalMz1rr2z1X","tlshash":"c6d173319a1046bcd5734a8bbe432311602ccbebe8158ecaa76d679685c78e5437fe0d","size":6299,"data":"","first_seen":"2026-09-01T10:21:14.433444Z","last_seen":"2026-09-01T20:54:52.781897Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"911aa9f9d5168e234b4f7a116aff3305","sha1":"a1f5cb78d943d5ad439ebd74e3ba76ccffa8b638","sha256":"271303905f114ff80501e496c5a73bf4f13f8f8f687531d3eb7c3734b28de83d","sha512":"44c1e7078beff0ef3c1b0d7b33b35d0078228205b7d4d69da22252f2dc670e0602d505ed8aa490f8afe35f2a397f1934867df5a16cff4f2b7fb615a57fdb52c0","ssdeep":"","tlshash":"efd0234444a6b0945ab6007fc76f330f3cb573310644c4507112ce453d2c437ae1655c","size":227,"data":"","first_seen":"2026-09-01T20:54:52.886172Z","last_seen":"2026-09-01T20:54:52.886172Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"1bd637e9a11ba35abebd964595fb0cb8","sha1":"b184a249c13f9d04811457927dc17c1c55ac7696","sha256":"21fe7e8d8d9777f24df0ca7e9d9994f94916c22eca7cfff6b64a142e6051d7de","sha512":"7767e5d77a4699be29a906bdcff2a3093c82a7a8da9c673398ce55b95cd4fc3a8f46a36a4359ebf769168b8ef4d0dc8f1846784cdc0a2951e30164d4797f9b70","ssdeep":"","tlshash":"aea0118af288b0aa228a320a202a0002220b0aca0c0800002b200ac0202a002022aaea","size":75,"data":"","first_seen":"2025-03-19T17:35:39.297904Z","last_seen":"2026-09-01T20:54:52.888673Z","times_seen":1598,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-countdown-B7uO1MDT.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"387afe35b9f980000efa2a339de76298","sha1":"eeea0bb5f6974d41a18cbebebcffb6598861bc5c","sha256":"ed9885cddd2143bcdac3e2fe14a69458caa5d81bded2d7d29466623720b1a62f","sha512":"380aa52f45dd822b7c975c60679775ef868b6cdd4795ef7d25f7c946a957a28e6b612612c414c374aa13917ca1da240e4828f4c43f38ef741b3607c8fd655ecb","ssdeep":"","tlshash":"1021f0febb3ad0b1473985579620432052050b44308399efa24b4a1fcacbed9d7ea45a","size":1112,"data":"","first_seen":"2026-08-26T15:23:24.305197Z","last_seen":"2026-09-02T03:21:21.886203Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/install-CxSOU_QG.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2982195de7243f02bd26ff07a0dbfdb","sha1":"7e72096c9d93a8c8863af1d8e5317f12b4ee89f6","sha256":"d7bbc96f79b93fb79a47663008a6228628b5efdc4009de38e8734212baa07d56","sha512":"3a7e455c051dd04c8301efbd18b091d6066b200d64d734cf1ed8f00cee0986eb996f5190d667c89c56d4e67245a720f06c80c8a9765c9e4c5b5f3da0221c4647","ssdeep":"","tlshash":"b50190fd131806bd88c76bacd72f8e96131a4c5b378558e08b1f973591574e0f68f120","size":753,"data":"","first_seen":"2026-08-28T05:09:58.535723Z","last_seen":"2026-09-01T20:54:52.723178Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/useInfiniteQuery-wzGDmxTe.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"99afae82db19e4fd22770d0245c636b5","sha1":"7e03826a6ffba7799c7d2da35946f7d4565cc798","sha256":"31c0cabb9df746381d943b3f8742b8a664d3e2a5f26d8cfae0ce9fe4324d5208","sha512":"909805693262a8d4a0a9cda474b97182ddcf11b1feef7e7456ce093a937822bada5a7babd84fff7736e80fe550cf0d77bd5b4474bf576452a868ad67a0dc6bb1","ssdeep":"","tlshash":"0d21bb71364a7f07e0a6c24fe30c0305e5105973783ad7bcbc2c8aa6ba25401d38957a","size":1123,"data":"","first_seen":"2026-08-26T15:23:24.358019Z","last_seen":"2026-09-01T20:54:52.660081Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-games-by-category-DknzVsBJ.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0e9fd5761f106aec2a172dc375f8766","sha1":"0aaed558269c0509e0cbfaefc3d148ca53a12c12","sha256":"9e53d16acf2b188b2379e566bee5bf3b421383ca20c368ba5eb6284d727671d2","sha512":"e20eebc2607767473c99c5a62996d7e41d082fc6b933e647180e0866d695538fe5c3c31bbae2a41f68c392cd15546c1f72b516a04509ff46fe8633bf63e6f0ad","ssdeep":"","tlshash":"7f31956e5cd6a1f7c1addcdee42850658130512d36b2cec0919f5e9306476dee01bf1d","size":1565,"data":"","first_seen":"2026-09-01T20:26:35.010867Z","last_seen":"2026-09-01T20:54:52.820464Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"c8f8e7e4c9602cfc3c06547b4ed1a76a","sha1":"e9de8774cc33cb4d72c01796a62807db5d29115e","sha256":"68166b9b695a791bb2c19f10eb1f6425c2b7879a90b026e7d15d96c88cd0aca3","sha512":"8b46894434dcbc36b24728a2daca93a14a719eb178e9975e5263e86977529cb369973ad9eaf3e23265182c23b9b2b78bad1753a5163335a0859038cce76af149","ssdeep":"","tlshash":"7ea0118af288b8aa028a320a202a0002220b0bca0c0800002ba00ac0202a002022aaea","size":75,"data":"","first_seen":"2025-01-29T06:33:24.960174Z","last_seen":"2026-09-01T20:54:52.889624Z","times_seen":3050,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"df790ee3adc73e9be1b07b62ea0074e7","sha1":"c055409cf6f378ce64bb86f2b98fb82102e25740","sha256":"eb6f9121937d5633c4319aa8f5b5e861af1ce0fc63b8a15b7e558291cc954746","sha512":"30c79ca8ffbbda2dee038a8fb46aafedba9e86f0f1998e03b5285bd5b714d11c9ff6c9a29fa6336f54d257d8add1cc0562a2eb074d5caca630b528d079917718","ssdeep":"","tlshash":"01a0228ff2ccb0fa02cfb20a202f0002220f0bca0c0800003b300bc0382b0032a3aaec","size":75,"data":"","first_seen":"2025-01-29T06:33:24.955578Z","last_seen":"2026-09-01T20:54:52.89053Z","times_seen":2997,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/search-input.vue_vue_type_script_setup_true_lang-D6vToUJM.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8825bb8732c2abc83c447dc479bf356e","sha1":"b4ae62383a03a31d96ac2ab430577472ced3b7f8","sha256":"75d9264a105777a3c510710efd4079a3bb627906af3b99d8d1fef50d7ad4b0f1","sha512":"b5266cb94a189611f5fa1bb9dcb4df782743b234895cafdec8c9d5527ee8450b67d3467decc3c382e73be9fedf5def8392a4449b66c132d114141b4a1332c296","ssdeep":"","tlshash":"d90123121c14c2772b600cd7ea73b01b58a4107b17d11de049a4c222a76c8e8dc2fa55","size":671,"data":"","first_seen":"2026-08-28T05:09:58.525182Z","last_seen":"2026-09-01T20:54:52.646778Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-h_aBb3DQ.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"28ba03e7f5378977b335a59fbdc42f7c","sha1":"3a4afdd9b22d485f2aa0302c849f066f4331ff46","sha256":"b7395ba70501af1d63a194e64e27849b3020f2fcdf5bd84025b64e0a70f46902","sha512":"702b0a31d45ee09ef384a8fee2300fa391243d81b6a6f364e3352d9aea6bb295203b3f159e8ffb3a757f3e524f9ca9471cd17ac3ed2fddddb7d994b9cc7463e5","ssdeep":"","tlshash":"e0416147a5411db203bc8ddddc1297d10ebc8b52e514ceddb8769c393290da84426b74","size":2131,"data":"","first_seen":"2026-09-01T10:21:15.131777Z","last_seen":"2026-09-01T20:54:52.792656Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/menu-section-item-tab.vue_vue_type_script_setup_true_lang-V2qdYP2T.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b8bf43914bdf3cacd07f42f33c741b4","sha1":"692a848c8d947dabf4d1008b53399b438bbbaa7a","sha256":"c6a9ec7d6e60a142e34d89cfdccabeab05baf2e7181fa7576dd1bf5edf6abe79","sha512":"b47e2be0dd8ed743f55c7e57d4e5ba295e7b89623bb14e1eff538dbd57f2643cba0c09a7b561016b264db9ab9f3dde203456da0dc89adc61a053589386dacd6b","ssdeep":"192:2JK0TcXQwDLEZvwR4Swfrax08rxFz1wbDtwxsLLrVOm1CfDwJzVewSpkpnpxfwYf:2JKvpDAPS0etiD2KLflz4hBQn87V3M","tlshash":"be52f6979b62ba36673b28d68c1560e8d504166fce891cf1bd7da4350fee9f1e24030a","size":13892,"data":"","first_seen":"2026-08-28T05:09:58.819705Z","last_seen":"2026-09-01T20:54:52.771826Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/experiment.esm-BCOmDQQx.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e028137514a2983006cc5760c2862195","sha1":"af18e30f881293fe0dcef10dc1a1457d03b72385","sha256":"d6f693772fc762a6ba9748c0ea82f77ef0a262bf0c92aec5637d02bb73f937c5","sha512":"9a7f3fe139424d90fe25a1434c6c22919ff3b4f2f47b3a2f53b7a8c67553baf01608a4927b2336d58a98eb83dd57b90dc2b1d6546e8658f72337e30abbb8c7d7","ssdeep":"768:vqjBqWR9Bk4ZyhV8itnJQMCmFRC8dpJKPwzKAom+n8kWoTq4wJmaYEMYiQ9f09SI:iFqa92tKMZUiKWKpns+aoQ9BM9aKVck/","tlshash":"2973e8d9f28ab4354386e4a8d03f1116a73f3918d90c81bcf52ae6d72eb85095237b7d","size":79641,"data":"","first_seen":"2026-08-26T15:23:23.995044Z","last_seen":"2026-09-02T03:21:21.876512Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/tooltip-DfQYKALt.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"688444dc77f14dc2bd12211cd77a10f3","sha1":"60cfe9ee6e8f16d1311ea11ec57664231d806fb9","sha256":"df79d1b4ec0212fa2f88fc3962890e66780ccb56be92db2f00a72a2e61e596c1","sha512":"b4e0cf7a6f4bf0be8499ddf8a5695288182eb5771a719e022917853d79a179d1b96e9aa372eb069ee1d86f5f7ae5f4ff02a74f2521a44f329a4cb6badb4ce996","ssdeep":"768:4p6HyT+UKH5xfMdamsca9UYFtvOsR2hAG2lUkpNVlT/ubnbOKiLZgctkhtivzPxJ:e+xHT7caR9tT6catax0TPyr","tlshash":"49c23ad471a27035536f4a57903b020db3360590320fa4b0b27daa9e3cb6d6257b3bbe","size":27688,"data":"","first_seen":"2026-08-26T23:17:12.205823Z","last_seen":"2026-09-02T03:21:21.904769Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"e426fc58087ee9483915420b5a792398","sha1":"455528825bc45a3c599403171b8e4f0adf79902a","sha256":"296a8742e33f4c30b5d4237aeff866fc830fbd5b3828b7ea843152121ac05a7c","sha512":"5afbd62d77a40982d12cdecf8d81e77afccef103ceb4da8761167d38236cd256a897a44787ce631e9dad5f73df97f764b6db2fe44d9460cb16f351eb646ab504","ssdeep":"","tlshash":"aca0228ff2ccb0fa02cf320a202f2002220f2bca0c0880002b300bc0302b003023aaec","size":74,"data":"","first_seen":"2025-02-05T22:02:34.468285Z","last_seen":"2026-09-01T20:54:52.891315Z","times_seen":363,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/switch-DycKWOZa.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f0e2c4c177ee16ff6b9c14948668684","sha1":"7547c9e7debda50a906fb69fbadc4cd907c5811c","sha256":"ba7bfae5f92c416b2686f232b13a4aca190f0fb6c48950afee972b0447c5342d","sha512":"5d1b74e1ecacb928b2d44a9b1a04db135e4900ac48b5de263850b4bbc24bc9469416f836676471543aafd44438898c7204e08bc349ea2f7977593af2c15c7a43","ssdeep":"48:4dgC2rBUdNJ9GD6eY+Z1J5KTQAyvrfgeL+NxXEzk0/h5/mGpiCGhSQf8ZQ93wqlG:4tuBUdL9GV5zvCEzCCGq6NJVCw4","tlshash":"d3a152777350c071fe322215938cd08de498623a0c1d9eb4f5df912a8be2bf16936a17","size":4635,"data":"","first_seen":"2026-08-26T15:23:24.211006Z","last_seen":"2026-09-01T20:54:52.584084Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/minus-B-yo-KEd.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1727375c6ac968b46aba344b62470557","sha1":"3e060ca633a8d03f1d0c7f94926f137fe4d1bf10","sha256":"1157c67f37befa7935855009396d64cf9b9fe25cf0add666c5d5d61c5be053f3","sha512":"e04cc79100e1d837838be5a344f7b1ba1725229bb94715c94368cb1f188a92d36848a99bbb2f3277743088d1835611f128e43e3bad0f1bf770183e5bc705734e","ssdeep":"","tlshash":"43d02ba901892ff4893ac968c12d18e247554efd234980e4570f563743ab0f4984ff39","size":279,"data":"","first_seen":"2026-08-28T05:09:58.42895Z","last_seen":"2026-09-01T20:54:52.822134Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/pulse-B5opmD8d.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"893e78d190b84828ddb6da4449cddc1f","sha1":"13653145e293c226bb83ab71682151b4e6237e4a","sha256":"77515ac252e0824839a07cc69f4556652cac36714954a4c3d6bf9b75c3b6126e","sha512":"a5a3732290a6702d0b6a4de4e2d047f8f70af04f9be049e02babb59ea3505761302c87803c092bf048509c0363912a32ba9fa65f6704be8e5ce4358deeeae960","ssdeep":"","tlshash":"21412144e79d87e5b20a20cae56cdae0a07c542d57333ea983fd65bd0fd2ac481bd744","size":1928,"data":"","first_seen":"2026-08-26T15:23:24.07128Z","last_seen":"2026-09-01T20:54:52.835015Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-casino-preset-r3mZcdI4.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"470933dbe4d25cde93c1c0d80558f60d","sha1":"414c3bc27fe54c4b88f90ac48d1d55d831ee6ef7","sha256":"186d1e454aad1cb870725c030c2da8b56f143efeed6a60cca8166fbfb2a99a61","sha512":"75ab9e13959d90e681c2d70a75819656123aeae6a2e9cb15575e7b05e4066e2652c7c71fe4164bfd6596990702a0602753495171327daa7ccd51be6164c50300","ssdeep":"","tlshash":"4ed0c2238952c671880ac9faf528d531503286e92bd1eb90c0ed6a315b820c1c05ef03","size":290,"data":"","first_seen":"2026-08-26T15:23:23.905581Z","last_seen":"2026-09-01T20:54:52.803097Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/freemoney-sidebar-banner-DQ_Ju0Q-.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c42ba5a460ad0b9b84e4c1bba0b278f","sha1":"0ed20cac49d942992d7dba0dcf9255076fd85c9b","sha256":"4a896ff0613e6ea811e687f2ee186ce9699345f7fcf04bfd7b224f7b74efd90f","sha512":"191fa7723016366db7e220d49a2419cb90446e7ed1d3a782273875a9575da922eca34553b5cfe378739bb87bfbe759438e957932e03c9dbcc4876a6c9b74ae22","ssdeep":"192:mXzALvvQngDkKrlq2qPngHwyz9MitKEoKn:mXzALvva7Klq2qPgHpaitKEoc","tlshash":"1fe172243830ad38ab66c9ac6e9c5575d0e9fef4ca51de8b90adad3003d5ad2834a345","size":7398,"data":"","first_seen":"2026-09-01T20:26:35.124168Z","last_seen":"2026-09-01T20:54:52.729923Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/bonus-banner-hLtYb_db.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"af92197069887a2c8af2c908f01f081a","sha1":"3df9ffbb00d7a9bcb4129b248ea58cf763fc07b9","sha256":"567ed78bed1b543528fa443b95ab46ad5257af1285657e6b7cc60d618d07afa6","sha512":"b3b6eb93a8f8dab4d8e81193a5b9cec139ca33b1224066027881b38b89b6bb902df654c09cb93b2dde41a4a05a4d4c422b52c6e3355e57820407dd7a816baf71","ssdeep":"384:itqLV5Z7yFWq6ZxyZEJZp5tZlyZcCZD2Z2SZvyBdWr9KTZ9IZM+Zlze874vBwZm6:itqpr+duatOJJyGf","tlshash":"6c43de3065669808d6f3dc3331cd1f233d19602262b65216ca1d0ab89efbd7b63d5b3a","size":55694,"data":"","first_seen":"2026-09-01T20:26:35.10347Z","last_seen":"2026-09-01T20:54:52.860939Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-preset-to-route-casino-Yr3NfScM.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b4b7e1c8971031fe68d4a5355266e9d","sha1":"63b749e3cfdf5000c9536b4339a971ef92df3f2c","sha256":"62d94781c64d60b0037e2e74b98acd65d2d80922a80dbe386f8df66f572eb330","sha512":"37549c49cd17048279fc5a3c8315c5b801cd44ce8114796651e63de450646b5015d3a8ff1a6fbbe6c4f6427d3b49b0fa62516f01ec80c6c83b3e53c55743ffe9","ssdeep":"","tlshash":"85f0782bd588acb145248bece92cb8621433aee422dbe674e0cdc9142b50e467628b09","size":606,"data":"","first_seen":"2026-09-01T20:26:35.082274Z","last_seen":"2026-09-01T20:54:52.810425Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/icon-box-L7dmr9bZ.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5711260df959f0fa3298c237d559538f","sha1":"9d295881cb5df237c89b9486cc5ff7c18d0309d1","sha256":"5e8e3317b218878690428c76d14c78367b94951a2dc23cd22d5fddaa9c8251c9","sha512":"e7761d2c1c67f38978d7245a0b5918056bbf9f00b5e1021fe17026c30704733c18853e4896ec6e1ada8f291f758f737474812fde18a637295cbc841560286af3","ssdeep":"","tlshash":"a6212722dd21e1387365044fc721d98bad5451a11f603cef8b769c395beca1b2304eec","size":1435,"data":"","first_seen":"2026-08-26T15:23:23.974173Z","last_seen":"2026-09-02T03:21:21.894793Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/plus-circle-DGSXgs7l.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5297fe41325b923739db398d5082b07","sha1":"8be33c57eac1067b8abd60936352e55367cb0055","sha256":"8c3670fe20e141b58cb11e9cfd1cc513404e5b74d1d020c85df09e3af2b5dfae","sha512":"e463089a0566ac6a8255c661d56818d289bacfb8e2b4fb571a16d7b9f8f15f9a27d15c9aa02e329e70f03ef47bb53ba0b17d7e9425334f6aacf4e2b06359a6dd","ssdeep":"","tlshash":"69f05c76204888bc412bc97dc0985493077d74fc33016c84ce8d957243e2221d88b56a","size":439,"data":"","first_seen":"2026-08-28T05:09:58.474222Z","last_seen":"2026-09-01T20:54:52.667448Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/phone-input-BO9f-C7h.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3fe4bcfbaac0f4e4bc147073bc125bb","sha1":"c76f839eac6880d308216381805a51ecc93555f5","sha256":"9bdb3f9e176ce0c5a6b70b2ad7b763a7e42585a448cd3330b49098591007c9ac","sha512":"e3b3f212aaea7681d9c5c86d1b13ad63746fd0ac3eee444510ed1f53eba1e95d641e70df6e1874a08af89ae762f207f64042ed7ea64eba772e79fab5def29b09","ssdeep":"3072:TBOe03o4PwjKtwUMWbXcKMYVi5IqwECDP:TBBKyUMWjJMYVi3M","tlshash":"cec375b77a40ab6775b13f18cf06e28f9fcc8c92dc98a08c9ae7d9db1950821607d715","size":129475,"data":"","first_seen":"2026-08-28T05:09:58.603627Z","last_seen":"2026-09-01T20:54:52.796522Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-B6UQ53dP.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4657ef109e65401ccb2d1e1ece69e8fc","sha1":"84a8c3466028f9d8741e1dfc2d12e3b360affcab","sha256":"3f7dc66acccf5785fdba0cfabc14449463547c302f4c8dfaca57c5c2583be578","sha512":"af2df908ed8e9218f1f812e77525b24b7c7037b3a7b14b2aae99b480f057e62e71cf6e206eef4123c265ba64df3c777231bcaea008cbe50a85f0899d784f80a6","ssdeep":"96:jUaTyQUPaTbjPbbXNbu4DF9f8MMNJV01+BIUdt1jNMh6Ps1in2aBb8/r4B:o8gajFasuMMNJV013UdLy6kovb8/MB","tlshash":"8a91a31b96648db901ad8ecdfb55247148f48bd2f134d8d5f26c4dbd16804a8c06bf6e","size":4454,"data":"","first_seen":"2026-09-01T10:21:13.684232Z","last_seen":"2026-09-01T20:54:52.837455Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/support-section-icon-DA6tJ67K.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"501c570a528d32e52762b9b767d844d1","sha1":"b09533cddb9fed17461d426eac4fc4c9b909d6e5","sha256":"62722fcf61006d8bfff04e1619e5aebe7a198b935dea17516364768a354c1152","sha512":"7b480a97240940fb756fdb3082234bb43b8896b3a66abe3ebc024a9c55d84f1276f7eeba39a15b4bbc21fcbb59fd5c318e2d7ae8c0ea2ef120c0f7db9687ecf4","ssdeep":"48:sIBsA6AnbDFDGI1asQGgGVn8cpiQnk1Xh5S/MP/edoL9KrPDKpSHjMPrjQA9ccml:sIBYcbDFS6iQk30owDLDFcmCj4","tlshash":"a7b193447e70f6b4c5232c7b731ab40b482de1464bf2999e9531a6590ffebf5c10228d","size":5325,"data":"","first_seen":"2026-08-26T15:23:24.087262Z","last_seen":"2026-09-01T20:54:52.710703Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/arrow-bottom-DBDtVt1J.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"59e1799f5aefc567887d8de9fa3e1570","sha1":"3ea0acacd72b66352437d1626abf0b8fd61a03d5","sha256":"c2f1125d7ba40f804dd76a0ab4c2df029c1f2bc2ed61d7fb33488b9d9893f59c","sha512":"3a3e42b2b17705d7f600681a2352a3e8c688aeb633a31e934960fc484fca1bc75f0d59240b40685252e84232649e40affc8c3c65229e14b2b332a1e3170cc725","ssdeep":"","tlshash":"58e0617810485df980268b34c12e0cc603147faa3b8940d55a0e5d3b41c32f0b84f535","size":394,"data":"","first_seen":"2026-08-28T05:09:58.370632Z","last_seen":"2026-09-01T20:54:52.630578Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-i18n-sWjWVZEk.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b40e76a434dc9a0c974cdaa1d3bc305","sha1":"bc0e4540b07422306f7a3a643c6157f6047e619e","sha256":"4f73b75f986e6e95a4481161d8061a8a7ddae3c2e51646559554ad1222786719","sha512":"9fc3c7ab4095e92496a136b9bbe3953176bf2c5dc75895238a628973eb0b1ba1712ab6a26f5c59941ecbaed15d7819da8f3351fcde56e2fb3de7f34c94ff574d","ssdeep":"","tlshash":"73d097824080c37023c88cc4d2209020432040c2772aac91b18f10378b9428ec1e8653","size":226,"data":"","first_seen":"2026-08-26T15:23:24.004487Z","last_seen":"2026-09-02T03:21:21.929195Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/tab-DeIxiXcd.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"07690caef403346942c2a3556410bb3c","sha1":"fac953f9048b09be472707747993cd3d9ff49e84","sha256":"363bf38ecd6238a1d38e8beca14865321833ad6805abc226d4d8e58f0437117b","sha512":"66023c5184156d323d4b01b4ce84052b4de664e86c8c9b06f6f5d31c0a484ce272f71dd692e0378f0b52eeda0d8f90d2816e528f5a606b96c053b95dd6405644","ssdeep":"192:cbwmw/2UB2gOAJssNcAwn41uuUqyzi+s9WGYEYglOrlJJmJOi4:ccP/2ZsFw4YuSRz/","tlshash":"d4028814750ce5fa5ad7a67e5f189488c0c8d2bfeda13fec756da13443cf6aa8102603","size":8368,"data":"","first_seen":"2026-08-26T23:17:12.126086Z","last_seen":"2026-09-02T03:21:21.907588Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-Cns1jwyB.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"53cd5d69d8b58bd0552b01299e5b8c0e","sha1":"2e00198265a56b57930edd339879e15a00da7872","sha256":"757968c0855274ce6b0212e6b8af4788631f20924aff9487475cdbe44366f011","sha512":"b927495980d3340b81e6a8e588f4cd10e47689ea8b3740e0e39a107585c66e32c413a9b3604139b2346cb7ea95125f24dfa3e5af411b332f42de2bf76ff83c83","ssdeep":"768:MmsblhJ8Jxr4UTdFEpox8C0/Xvm1cZXmcSc48FhU16I6GVBgwKgTNRXYWN7Y6ZS9:MntrZ2MKyZjjJ","tlshash":"f5f24bc832d1767003faa8f1d42b1151623a971cb409c0ecfa35ade6189dd4696bbfbd","size":37587,"data":"","first_seen":"2026-09-01T20:26:35.125609Z","last_seen":"2026-09-01T20:54:52.753288Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-BFVaf78N.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fecf651d801e94caf5efaa50e7bf1d32","sha1":"91c8b0fa87c419df7a6a5124fc4062fd0e704de8","sha256":"a5627500c03ae89ba7cf86add0850ba29693d6e4df01a9e7c13434ddceb65480","sha512":"06b3c1c174d794bff6a23216387d132adc40e94f164e35a7c37915301418e20c7193c80c32485598accffb52a31cfc78859023c88835e2bae897e33db225300d","ssdeep":"192:3SaTaJ7VhammFoHSg1dE5TfrX38ywv8xaX0LQjqwvHeQ3uwhyMLVzIM:CaTq7q8yIEhfrX3mv8NQjB/3uwhqM","tlshash":"a022d540a099387463fe4e98dda484d046bd4b12b530c8edfe3e0e3eb586954a16bf76","size":10051,"data":"","first_seen":"2026-09-01T20:26:35.069616Z","last_seen":"2026-09-01T20:54:52.801459Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/notification-DxUPrFsg.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f6782f5f4da336f3f8a6a2f1eb63f0a","sha1":"088996a9f0ccb160013f84c85ce7da4394fb534d","sha256":"3769f1bc131223c83789e9de2bb3616278acf3a413d488a7dffed3d90fea317f","sha512":"fb82afdf77b14773c5ee1f92ff004a59e2f30dce5e6d60e7f595594d18cb58a45c4d49cc6e1962a2d294f89dbab041d0b3f7335397b3ffa97cbfd05cbc0669df","ssdeep":"","tlshash":"fb01e3c6413077ec9eb3da5df73868b2075f80fd36554150096fd374c24b564f946a24","size":834,"data":"","first_seen":"2026-08-28T05:09:58.550394Z","last_seen":"2026-09-01T20:54:52.773991Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-BSzd24BC.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea85d026608b3d83bd67603851e32e8b","sha1":"2022935c3f775f8ef2153dcec92b03f93f8c30dc","sha256":"0be8fca00c6bb867727062f9c4b179848cc0465b4378b6b6b897a6b67fbcc10d","sha512":"a1f39d6f6ed1674b729cb094d0ce9b6737ffe2e0006af26491b2c34845c83bcbba66035235779b5399f7654de1f3d3e333329e74cadc0f0019aa144577fe7454","ssdeep":"","tlshash":"b5314052884d5cbe117c4cf8fc1971a21aa847dab450e88efc7c0e7923929c4911ffb2","size":1555,"data":"","first_seen":"2026-09-01T20:26:35.147245Z","last_seen":"2026-09-01T20:54:52.828468Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/segment-control-DbwjGASW.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ebc2bb4b5533b7dd6cfa1feb0eb21c2f","sha1":"540a9957e8918193a7317766f22a6672f0c1f87d","sha256":"8c9c6208e6f2dcee42118db66dc21662ff74e281c03e0c6035e56d6eb5379cc9","sha512":"67ce0167608b78b6279cc4842f1e406e7577f1ce1248c576b0d474389d37491eacc18962fdd20a54b1c83ada4af8eed1ca6488504b83c080b28aba522fc0a29a","ssdeep":"192:HqqH6o8lyfwz1q1oeHMKtv8WQl5vJxtPBtwqvUsu9qyzc:Hqo6fswzioJSvCl5RxtPB66uxc","tlshash":"710210a569645e7b57b7ca1ef71cc8949438ebb2ea1503caf17c7b2803c2f60600bb05","size":8476,"data":"","first_seen":"2026-08-28T05:09:58.833256Z","last_seen":"2026-09-02T03:21:21.924613Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/web-vitals-BshcK_5D.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"70e63362378a8ff8d416f5735fc0e65c","sha1":"7915bdbd4386d244e6ad0c6324897843ce2ebe67","sha256":"8c02ee6af6fd008410adcb29d93aa845d4aa638f0ee0e409c32ef65fd480d233","sha512":"678ae8687ade880b7660fa4e0359011051b49049bda43a3dd62249c13f82da47bc9fced6e5835a48aa4d2f32a7f232959bd1c054bc29c82fdc300b2b474f6a7a","ssdeep":"96:OS5uA0HKyCDY8iVMO7MSpyPyhlrU+Oke0nEZM7jS+S1Ip+f+HKtNLK04pa5Nx0WA:OnDKyCDBiVMZSAPy3U10EZM7jS+Sqp+M","tlshash":"d1c1c7f29b45113912ea87ebf0706182aa295ad1714780ccb23d6fd7181b8c756eff78","size":6050,"data":"","first_seen":"2026-08-26T15:23:24.125094Z","last_seen":"2026-09-02T03:21:21.92226Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-cdp-popover-BN5DH5rt.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"29e2cac8f716628706b5a68dcd78f566","sha1":"3061faad2255a2a4412508f995491a8618e4cd57","sha256":"3d9f1525bcd363d9121c9f374d90dffe36b0af06c8d41be8b232aeb2032a4b63","sha512":"1ad921c6c6d54d6f4e78667dd4424d4a22f09cbc8aefb8daf13759bf1294156f0cb40d48d25734aeedeaad654a0d78836cea6ae8a579de40396a8f83e9e299df","ssdeep":"","tlshash":"56f09ef9f894a13087ec5ed5337c492624b65782baa6cec490de56114321840d3bbd07","size":485,"data":"","first_seen":"2026-08-26T15:23:23.948199Z","last_seen":"2026-09-01T20:54:52.806394Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/language-picker-ByjyweIu.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6708cb2a23a61b2e3412cf23d1d5b8a","sha1":"de7a12b682e5dfd039e0b6def5e5f4f35a20d31e","sha256":"57e540811f5bbe20978de9644480ee2c76e30650e6ef07f7df074e834edbecbc","sha512":"c13f81517f6b1f8fa84df8f32434f5182aa31d39554ba0646141e3df143bd5fa88fbf79d9e74eccb9b418b56e2234e31e9b88878f084c92b96032d4820c1eea5","ssdeep":"192:v27KZ6zwkZf1zCgEwaxiHg4XCP+5QEwd2zhcxiwkEMG7r0FEAcD8RTY6D7FSXwuq:v2vskra4AJ+ud2t8kEMXWUSAuJOwIP","tlshash":"9b321948ba11e638b6735e093794788cc0286f6a8a99bdfadb57502503cb7fdd1c7b04","size":11972,"data":"","first_seen":"2026-08-28T05:09:58.632171Z","last_seen":"2026-09-01T20:54:52.717126Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-2ppxX2U5.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8233aeb19e69fb95fe88535926184565","sha1":"239e3a9fe9848df8f1739699b5ad171964ffef02","sha256":"03039268f71d89293a1167d48a3136cea7121d3bff1fffb17e4f93295c7d3a94","sha512":"a7113966c07b2789761ff0d030aa92b7f990a91b56b51044a407310f56b6a0452cda459c436476335106761e2d640a344c98c99725065c1b8f0a3242f76a9da5","ssdeep":"","tlshash":"b67181060d480eb603bc4ddead2472d288e48b036101d4acff31acb932a5ca9503bff2","size":3751,"data":"","first_seen":"2026-09-01T20:26:35.136676Z","last_seen":"2026-09-01T20:54:52.649002Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-DaKqfvV4.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4efc395944ecbe6161b0d6ce38042c32","sha1":"753ff85f2167650083948f657c708c0e56bf2b20","sha256":"0a26578d589368438a11e4ca9ba2bbcfc8480aaf5432f8a639481fd234ffebfc","sha512":"1fcb7b42049879fdb0991c0cd8158f461e49c3dbaf949acc8d53b0bb4dde3cf8a04da1c843a2b1565c9eecd59911f4d06773a9ceefe03b2a907eae7a03dd3955","ssdeep":"768:2l1CbZ2uBmE+omMIa41eFAuEMXVCR6r2QTm2+0rB3RCIlLWQM5P6kTXCYmSdmY8G:wSsXoCR4eAlGNhgpAYG3k6r4CRlAoh","tlshash":"52c31870fb51a4bce5374c06fbed1088706c2b16a502c9ecd6a9512a0ac7df713e1bad","size":129593,"data":"","first_seen":"2026-09-01T10:21:11.943829Z","last_seen":"2026-09-01T20:54:52.659056Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-B30_LksK.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"69e21ee39ff634dd65405945a0bf81b8","sha1":"7d98018fd898493fa33789a10baaeb4ecd6c8b84","sha256":"363cd7abf610160b04b6afbef5fd58ad126510325fe2e18a501ea4c5ad2b3a8b","sha512":"d9af453592c68588dee061e2bc378e5487b6bb463597d9eaca38084bcdca3e08af2a008dd70ecfda3364208000f1acc2f39fa6e359f62237b077faaaf83a8789","ssdeep":"","tlshash":"7301284da168a77d94add5eea761c493c5fc20c2fe31c48087f90d284b900ca53e6a4d","size":776,"data":"","first_seen":"2026-08-28T05:09:58.753556Z","last_seen":"2026-09-01T20:54:52.76658Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/clear-redirect-params-DUWjXPr3.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e3f906fcd2254d7c61c34c8082a99cf","sha1":"3cbc92a908c4a1c25ccc41693a1c68db9593c123","sha256":"a5b59c1f79610ac9b4534e67a7c00d85f7a7bfc0b7390929122ecc989a7bb541","sha512":"38e53cf54e17ec88606a391d76ee025c08e727e44744d6a961f3e02c06e130471ebd8db8c8ec473abd66593c0b0053f845fcb77414c815dfd7d1462208a39043","ssdeep":"","tlshash":"ab41be1ceca9fda105f044dd7070f665263dd2c0331aebe5b82522e1e53bd9a5732a49","size":2127,"data":"","first_seen":"2026-09-01T20:26:35.023414Z","last_seen":"2026-09-02T03:21:21.908123Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/refresh-CBRSj6--.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c89a0439900e6c40a057e62cb154d5bb","sha1":"ad80793248f354d06396c809617cd73199a45ba2","sha256":"57134802f0a891a0761c460b05ecf1fdd1b21aaaca257ec3c451b3aef864f692","sha512":"5ff4f7d2993e5495adb86a3d7a34dd1c9bd4e427d84600a72c6a837c1e24968a73548ec4d8e22038b47b7698e297d014fadb67e12b29b70ebd1cda577f2fc405","ssdeep":"","tlshash":"26f07dfe274cb2bc859b48584a246cc25f1e65f9b78f56d28e1fc273c272250d577024","size":636,"data":"","first_seen":"2026-08-28T05:09:58.451688Z","last_seen":"2026-09-01T20:54:52.585114Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/arrow-top-BRP9gQTA.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8dcb8494bf3f5279a1afdfcc716f7c0e","sha1":"b7845580a3b5ed8586691c774641d1a5426a2074","sha256":"a4330596e977dd57cc46b458b5b1e98d75ccdcc86974ff8696aa60e4b2cc23e9","sha512":"001f5962e7bfa5ab54dea417fe9aae72cb68821e0f4dd66ea1d900744723decac066c99055e704114fb38de050e677ce5169edb4d412543b6dbdd8b196528821","ssdeep":"","tlshash":"d4e0d1bd015896f9442b4a78c23e0c95470d6ffa37c944d05a1e693a86931e4fc4f539","size":393,"data":"","first_seen":"2026-08-28T05:09:58.582675Z","last_seen":"2026-09-01T20:54:52.797397Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/modal-app-install-DO7dmfjm.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f97d8df08d1074ae281c5da4e99418cb","sha1":"c8b926e69593082e35428a76c75ad651c63a711c","sha256":"b1bdd8cb58705dbe5e9fd423b3b96dbb5249b5fbc09771f18049d2be3c668a59","sha512":"32d1896579ab03f0cd945aa565c64f223142ebe909e6040deae7b311db5dbb9ee37fd86d931ad28aa8ec691414b95eba0140b8172e8898c7d4f7a5eba9969d49","ssdeep":"192:JEAWwcZKterLunz8aPRFDZNgfmqNBfVthZlw7kgX5x7kgpHqRP:JEAWBMe1aPJNg5jw715xRwP","tlshash":"852295d86e71e678ba37964e775f2c2861042a1a8c524ef9f0f7052e23c7da183c6747","size":10776,"data":"","first_seen":"2026-09-01T10:21:13.051497Z","last_seen":"2026-09-01T20:54:52.631487Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/error-logger-E9cg7Bq5.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfa9191d2f1c038f91c9db9eb2964ce2","sha1":"b658f2df91ab610bc23868971ed52b15e116d3ab","sha256":"e1e52cbcd469981776c763d53ab65bdd3d7793282b09f9cc6dcf80d234169914","sha512":"4fa05e6914b6c881fdf04e991d863c55c4213164eae675a30019fc0134f9928a5d82558b003d5075d0286a3902336f255deec54cba8b1328a5acd13634287150","ssdeep":"","tlshash":"32f05c2dcb75cce15cef14d4b7317c1756965054e9924dc4b52f859703430e7c48b68b","size":459,"data":"","first_seen":"2026-09-01T20:26:35.077073Z","last_seen":"2026-09-01T20:54:52.726584Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/static/mf/shared/vue/3.5.35/vue.esm-browser.prod.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c86381be2a3957da6d933561667226c","sha1":"0383cae773e312ffd985150976976aaa0ad3ef5c","sha256":"dbc19b4671e022561a5cd2b8f73ba4f2273dac362a3277ae7b5e7ea7727d1cff","sha512":"478f65d525268fa54df45e232be444205c32091df49e70f989e3e08c38580448dc87762a6dbf6b4c1051fce3daf8f03b44a351477c3da270d893e9a4076b99e4","ssdeep":"3072:an68kURFTIfPKK3+ZE1n/cH396vX2eUtCS8K0bCy:y68kQHQ1Ut6/yTC","tlshash":"36f339fa3342b13393ed51e640bb4002f3aa64692c0d046cf675a9df262495961fffb6","size":169050,"data":"","first_seen":"2026-06-07T19:44:56.565864Z","last_seen":"2026-09-02T23:44:25.617051Z","times_seen":906,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/cdp-modal-DMEQiBsD.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"755e792f5381994cfb82910af3b165d5","sha1":"a66220a259e454cc77e1cd9d7de4102d970f56be","sha256":"e95fd24cbdfb4ffe136fbdd73e01de273b938f51dcc200236d0143174de76747","sha512":"cefa99b34d851a9eb65f3028c913d6de2bd0b4ebeb1f5809bb367777609f51b0a7689f1ef5c598755d9a03254809e0c7c09a2a51a4d4c46bfcf3842f8618e8c6","ssdeep":"96:vFhH0w82r2K2IpitFj9PATK3mUu+kxJYc6/YJuyQZ5YYAAwsQmbjOmmm/+2P:vjH0wBibIpitFJYTKgzx2V/YA1BCu+2P","tlshash":"0691b4897ffcf079182f8896b02f591ae318799855a3ae92d4f4096c2bc0cf79894306","size":4522,"data":"","first_seen":"2026-08-28T05:09:58.650806Z","last_seen":"2026-09-01T20:54:52.640484Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-casino-game-analytics-BWbU5fzG.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"12813479a88c2ee20c42def7dd7f633b","sha1":"fb1330bd768674d5e1e5a608b45647e5c9ad24f7","sha256":"c96d0f333ff9dffbaadbdc1de6bc8fe458a6f3899077ae7000ee0ff82060777a","sha512":"0c76510377e2e773ba4430c62502f5cec3547b629244ef82c3840ce875d26ef9c09f4ebe46e0db01783d8ae28365d3e905bba2fd2b52420451419823525cd940","ssdeep":"","tlshash":"dff07dffc0dfc8f1081a64fff2282d995230079f3241ad955aae8f346f52549128d605","size":649,"data":"","first_seen":"2026-08-28T05:09:58.430684Z","last_seen":"2026-09-01T20:54:52.632409Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/game-card.vue_vue_type_script_setup_true_lang-dHhzIAir.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"056b5551578cfd08e047c7a396ca111b","sha1":"d972a622bc00a4e17e503d9f466a4a9eddc09bc4","sha256":"7ccb83687761f55be1e00fe275f9891cebe46a4092747dbb7d5e898d72bcbecd","sha512":"22324960114fa6ea444661088de9d24aa2464210af0f94742001fe2c406ac3f8cb4f1d3ffa1e7edb4a3e6aa3f497593ab1fcbe6cd8dba565e26e6425225133f5","ssdeep":"96:j/WDpwbvN0n5duPyN0fj8VdSA7nsrTscP:7WDpwbv6n5duPff8dB7sEcP","tlshash":"098174155e154af8047f4c034a3aba8450b84727d924e8b999a86d3ebfc3dfc817869c","size":4097,"data":"","first_seen":"2026-08-28T05:09:58.823212Z","last_seen":"2026-09-01T20:54:52.719748Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/social-button-BjcOjugV.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f63c104ac776f20f268d051ca9ea307","sha1":"ecd5396d14aa750868662303357cc8c42e6ace79","sha256":"0a22a3c64dc5fbb26619f4ee18cedd83b2f1b498767cdfbc017933459f0d5e19","sha512":"ba1c4550581eeaab7fb5b4d2e19e51e3c4846010a6e4757054912dea666c5cfab064b83bdfca410f97ac22bbaa1b25c0e865f73673899c3cf46b9a5e3d418a86","ssdeep":"768:Nd7eu4mYu4TrzjgYq5obZOQdusTXF3ZaJ3Za0Pmo0z:jH4m54TEJ5obH/XFpYp6","tlshash":"e533a5bcb320826d65078ba5cf245185074ff5bd7d560aa0272ddf38a6cbebdea47900","size":53636,"data":"","first_seen":"2026-09-01T20:26:35.143174Z","last_seen":"2026-09-02T03:21:21.912646Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/define-widget-BTP9gEN-.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1c4b9d97ac1ec9462d73eb31f3c8954","sha1":"593f1e0341d7dbceb2d20022184725c54a897dd5","sha256":"dba4ea2800e1c42f2a70f0ac97fd77439d742ade4e6865e81b763b13adfac466","sha512":"8d709631c85919c37001277bc79e89184006967c9014f9bc9f6cc72e0daf61976427b68eb79d4c3ab87bf241d15f230c91ff80d75ddd5a695cd9cc0a9f3f0428","ssdeep":"","tlshash":"81d097216414a0bc4080ba62af285c4a51c2feab5c84a094120688e0cfca0594e2149e","size":229,"data":"","first_seen":"2026-08-26T15:23:24.352655Z","last_seen":"2026-09-02T23:44:25.542849Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/gift-BnKIc5zy.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c06580958d8214ba03ad507a08606be","sha1":"4626f35225a17f6665c58f49754d378957d10f33","sha256":"71b53897c386adbc69f3a282ea1e1247671750aa9509865f25f067b0f6b7ec26","sha512":"cb79e6a486603a7b7fc8e008a5741a2bda69d22122a0eb3764b5115ddc553e1071f6d76228854dabb4f8332bb288116cb31cecb2d36b750a0eb597094a0e1337","ssdeep":"","tlshash":"3e2135e02360d6ac1a57e75acf38bee4526f159a3395c5c14e8ed7b901d39b0f806800","size":1248,"data":"","first_seen":"2026-08-28T05:09:58.681588Z","last_seen":"2026-09-01T20:54:52.687207Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/main-W3tAz5ZB.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d96ea8d1c7dec1f31f75e507a2bbb8a8","sha1":"97388b10d9104d1cddacce2c04e73cd9d40d0e0a","sha256":"2e9331bbe14a6cc5a7af079839fe2bcfa2e950314c4edc102c3eaccbd85d8af0","sha512":"d3f141e1bd10394c7d1f3777af57d1a457ac51e42f42d16a3352e2521cb8831ba8d702052094e688d33a8f12fcf15f35d62977dc2306edaf87bba1c266f954fb","ssdeep":"1536:tcVNQ4BM+kk16KPltLbh7UwyY1TfeEkkF4hWscREesFieCDsduatOJJ0:t2/HLN7UwyY1TfeEkkGIHGesFie60","tlshash":"04f31930219a6469c1f3cce3b1dd2a133d245565b05ac012e62d1de85efbc67a3e6f3a","size":166045,"data":"","first_seen":"2026-09-01T20:26:35.016523Z","last_seen":"2026-09-01T20:54:52.604681Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/skeleton-c8_FFKl0.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4232aeba152f284999755e31f4b76614","sha1":"12e0b95d9c17b511fe09fd0743b54ac8d7e2c5ac","sha256":"449af805f504103c3e63392c1676bdf4c02cbfa7e0be4c9ec4229ffbbb1c6738","sha512":"e722174a2ab72c2a209d10ba0a1dc3fafe894324a4fbb4f63feba7337f8f9b9def60cc8beca229be5ec153f5e5fa299c78895ce91d45fec7321fe833990e0bbb","ssdeep":"","tlshash":"e611e314afa480f461975057b23ce6e0d86e54b35711e575427efcf8278499c412ba84","size":864,"data":"","first_seen":"2026-08-26T15:23:23.909645Z","last_seen":"2026-09-02T03:21:21.904141Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/form-group-label-CuJCOnOy.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7e9c2f8499eb8227cffdc89a2a3aba1","sha1":"602c17136fe6f6868e67d63480fc78280a900555","sha256":"8a8be80c77c9494a4c1f1d26de101b3fb44deff4cdda55c5f6d73050c0cd4f0f","sha512":"d934f4bb3a69fdf099f899b383ac811979061b933a7e030c381fc51d9f7ab41e4c275b8305f3e1eea4779b649ecc94d64bc27c9b99e51a586485bef6df853b02","ssdeep":"","tlshash":"4b114291fab1d4f49a7f1c6b7e3ca1a49048a476171798d4c32e8d9c46d9ce24245f82","size":1046,"data":"","first_seen":"2026-08-26T15:23:24.085654Z","last_seen":"2026-09-01T20:54:52.800611Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/language-icon-D-uDdp3n.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"778e2fca9c2ff27f724c21731a99ea0e","sha1":"39a20433104dfc8d35e1b4ff7156863aec0689c6","sha256":"dd46982a46ac01462d696a52ccdefe8372924984d6dab49310fdb6d7ae9737a4","sha512":"8f6a5f48e3f4a0caa7764f805292a0006071d10cdeb2de6fc162390d94df54094033f83331320302ebd8119561a7a5fdd0f22027b65f212b835230d210511a61","ssdeep":"","tlshash":"eb31df1ba63251a5731b0846f0e0f975a06100abef22bf59c7ed4d387ae543c546629d","size":1540,"data":"","first_seen":"2026-08-26T15:23:24.376385Z","last_seen":"2026-09-01T20:54:52.79433Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/banner-support.vue_vue_type_script_setup_true_lang-B0i5x-uk.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"403a54789c097a51220c13b629d67292","sha1":"6349c383248545c0c43d67fc616014b79d2abdd1","sha256":"3fe2ec4986119ab9de817387d84762b0eef8c23357cec5f4791d20ef038c2f0f","sha512":"16aabc3a734e49e393dfbd91a2e28a59ace9523a826095cdb282697fd171e569ef1310e010fc2f5ccfc30e2a6ddb74277e4d998d5cba29462236e432210d1425","ssdeep":"192:OfHuwhnFujtINAwCyU7fU/3ixwkJuCqyzGrDDK47AZ5JuUqyzr9U+rEW6d:OPnhnFUt0ZCyU7cP/GuYGrL8BuSrTrO","tlshash":"fa329571fe70aa7cf7379c4aff1f0c58916cd525ea4aabe9d048635c03caab24155b02","size":11752,"data":"","first_seen":"2026-08-28T05:09:58.867751Z","last_seen":"2026-09-01T20:54:52.802234Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/static/mf/shared/vue-router/5.1.0/vue-router.esm-browser.prod.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"df50ca36938ecc25eb4f11a576a5d889","sha1":"b8fd59a3a7d827bfe1dea289ae6ad6c07326603a","sha256":"757bfa60527968228f08a8f3515ef7f9181825cee5b59445403173b499801781","sha512":"e018ecb52bfee26553d00403ee36f8287665e2223dd08ba8ef01f263a7e0fcfdeb707ecec2e794ef1ac742d50e883ccf38b49dbd2274da1ab075495c6cc6b750","ssdeep":"768:L9Gw/vaCCnJKUNklh5F1etkPqCX3pw21O2CJ:ECzUN2h5Del2CJ","tlshash":"62b209fa3385b07753ee43a6907f1446f27a58c6680e0468b154e9973c32da8c2ebf75","size":25202,"data":"","first_seen":"2026-06-15T08:07:15.951804Z","last_seen":"2026-09-02T23:44:25.627528Z","times_seen":908,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-writing-direction-D2pP13p1.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"270a50344ad7c336659aa0b452737741","sha1":"c5641cb64cc2679b7181f0c9329a1ee146614fc8","sha256":"6b4ce287394dda3309a32d434e8458296626ab0ad110546b8c79359d7077f65a","sha512":"e4684937a0301c3840bb35e573dfb233d2c9decb3a4b1b47fd70f796f549e1cbaca1f34c51ccbf8324d4bf377a824d38531ace89c8f4081acbc16152332df7be","ssdeep":"","tlshash":"13e068a2748052706b194d8dd528503481026f697a30aae1818a11a70637e84c9bfc66","size":380,"data":"","first_seen":"2026-08-26T15:23:24.159639Z","last_seen":"2026-09-01T20:54:52.788957Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/user-DW9BYKXR.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"25d3ecf487ac3be73149a3b24c2b13e8","sha1":"fde9be4a3edb528c196d983daee02d75630b3f07","sha256":"6f39329d351b1875db7a270ed5b034086eed14aab3147f0bf3c648818b2861e6","sha512":"b5d468fa39234a9113fd5ffe2aab6b1b5839a70cd846c86fe9c407898ebf6add9bdf0b582b25229f84c4da51487c6be5d3dbedc1a8c8e1bb1c0c5ebbe5c80cb6","ssdeep":"","tlshash":"93f059e80191a8dcc5a94d7eca3e18960b59b8ac374584c4d73ee9f78aa40f0d0db226","size":521,"data":"","first_seen":"2026-08-28T05:09:58.848867Z","last_seen":"2026-09-01T20:54:52.670926Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/progress-bar-C5vEPBJU.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"09f647e25a47eba18355cd3ed0b3e3c3","sha1":"b46117afa53d7fbf9f1e6837717b250e742d4e78","sha256":"58816e287b6bffb522dce977a266d767ef74373c8a2f3279e43818674c6d1876","sha512":"6dcd6de00e59fc251ea8c1c0b522f347a4ca3634c5e15869943ac58cca8cc660887b303eae66ea88df46ef049b59954cf85b84a5a3b2e2dfe0935d6a43bcef44","ssdeep":"","tlshash":"6f611f24cc245138b89a581807d4804663546d1ac63fee98bf7cd5a8d3d2fe71d8bfe1","size":3308,"data":"","first_seen":"2026-08-26T15:23:24.065535Z","last_seen":"2026-09-01T20:54:52.799049Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/language-picker-BkRm3gTG.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e32097da7d006296b9f57da66fdf7e1","sha1":"6bc78fff79770c7b0721d140093cc6a6f5f6fcbf","sha256":"dd245e6783cb02d705284114e111239a807db7f0f40c17a78d3a5b26b20a9d1d","sha512":"7b790b095104facfa1540d9f8bbdfad56357e27ce2946d3713353991f4503ebbfeab07e467c78f3042abb4271893cc1618dc040b9eebef31127626f5f9ac1850","ssdeep":"","tlshash":"f3513417dd1489b206aaccf6f027e2b1857756a393c4cbb5d1ef033a8b982bdc456407","size":2953,"data":"","first_seen":"2026-09-01T20:26:35.041886Z","last_seen":"2026-09-01T20:54:52.829252Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-game-session-CUmBHhnT.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb860b168c03fcba275f86259258d705","sha1":"29f59cf761e56e67a216fd7537ad4b1bfcc7516a","sha256":"3271e3c7110278bf11f8b87631a134c229864261a3cb8552be6d0cb670ecd77d","sha512":"62e6dccbbfef4a0287ccb620b1a0c0f9aac722b30f11f196f9e4e284e0878aaef4d3831dfe94748c7732c80f455fe661ab30bc44d238c9ce04804a4cca42cfc6","ssdeep":"192:tSJNM1J4aykawZR0PAw8AXOuRR4xrSAdh4lK9dkTRYNQ:tuNJay/ywAwzXOuQzOUrkTGy","tlshash":"72e109a79221813e157fd6c5bc4c35e67c910ac2b09b88c1bedc0f1a66476ce436bb9d","size":7058,"data":"","first_seen":"2026-08-26T15:23:24.276785Z","last_seen":"2026-09-01T20:54:52.759452Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/accordion-sahtbj_q.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"82145bc270e6242c33362f6984e96368","sha1":"d4e41c99634899df2a313d9ec26a85a8a20717e9","sha256":"2aac0e919ce3974204923d444dc26c20e4e4d0756fa9517463700ebb9c298e37","sha512":"33a12b9742c647f3e88a8ae74d3521c88fccf56982517aa162f474981b5b0a3104047cdf9f8a1fc14979371c47ef6ba83f86567125ba88413c924efa90fde8f0","ssdeep":"192:26QDUBXfXYDvUWw6RlvDrIdcborDtBdurU9yzMOl:26Q4VfXYbUWlRJrI2orDRuHMOl","tlshash":"f2d171707e8885746f23ec25b7982fbd80249ae5d84974edf123852823caff10e85b4c","size":6442,"data":"","first_seen":"2026-09-01T10:21:13.824693Z","last_seen":"2026-09-01T20:54:52.765082Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"065073a792f7c3a7cc36de754b3ab0ad","sha1":"243b53847a7754c3945a368dc284d536018f7e41","sha256":"593502b94ae95786798cfb0ee883ced92f6438d1e05faaa20d2e19abf7a9b367","sha512":"749a441498cbe80e0fa1f0e851c3d22f34cca0463ef11037d71cb03f3c3113fb31de882ddf81aaddf6340fb5f62bd006296b95db05d903d0e8b0c6fbc10f8107","ssdeep":"","tlshash":"514196327e46d8b409de289dda2f234afcb81a1c8911a0809694fe913cb9f33956355f","size":2347,"data":"","first_seen":"2026-09-01T20:54:52.895378Z","last_seen":"2026-09-01T20:54:52.895378Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/lock-CgFTFImv.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"afe70efe706c03c4cf4a1c21bfc1c47a","sha1":"79215426bac5f963e33112260fa25f6fafc06cd2","sha256":"fed8f304a6406af0e086f4273bf869b2a7f830133bbbccefa95d9e3da58a019a","sha512":"bdc6ab998dff86a5d8ed785841cb5120a2abdf9f5a060758ff210c814e701e9b082bb6a7b105b54eca4f3697cc4707be50906e4f0077e7287acad45f7bb54134","ssdeep":"","tlshash":"132100e65328639c886fe83d8a3fed89430e94be3a2a41d54e1ec374909e060e507874","size":1113,"data":"","first_seen":"2026-08-28T05:09:58.376577Z","last_seen":"2026-09-01T20:54:52.791249Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-BipuiGV-.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"33c2a77f562f1f25a16b6f632e2b458a","sha1":"3018323a003b9827de98cc41a7025291b7d2130a","sha256":"95f8e5ac8b732ad905e79611fe8631d8f7ba8fbb5d8399174b192c87459c43d1","sha512":"664584851f7f85252ab0b8ba194b0e33069164948450dce9c061bb83ad7e6b440b112b3f7a0e88ddba0a2dbeab413db9cdf64d5a1ca3d262467a3f7f9a836807","ssdeep":"","tlshash":"54414195e6548df142ac4cf8aca567da16e48b87b138c89cfd798cbc65a0e00501ef7e","size":2365,"data":"","first_seen":"2026-09-01T10:21:14.464746Z","last_seen":"2026-09-01T20:54:52.624677Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/freemoney-main-banner-C7rXOgpj.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"451bf1fe5e055f3cd373cd13638f27d5","sha1":"8daf60b207da372558a4f3ccfda1aae5f062a9e0","sha256":"6e499fefc61695d605c92ab38db2eafcc73939ef9ce2f8f36acc6ffa3f2a399e","sha512":"f69b13df3d8ad282e4a56d37ff87516f72aa7bc9bb8455add4469efc48e55f4ffe7aad418f3099862006fee07d7bab48937416105ed3acc182e0bf998e8bb47c","ssdeep":"96:Fxe1SqtPL8nllYfYEYYY+0zPhb02u5RAFjFExCWuzM/TqnhLbJ6lGH:FxeAq9L8lNzxnuPfCWu6Tqnhn3","tlshash":"4b1254537a7498b861364cedad2d227ed14e3c35db05dfe9406e2c740bda6611336b0d","size":9679,"data":"","first_seen":"2026-09-01T20:26:35.045605Z","last_seen":"2026-09-01T20:54:52.754048Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/telegram-white-1YxV1soQ.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b9a4888086ebb6acb52dd99bc05eb71","sha1":"60aa3d009219fce0997d8970d485728923b325b4","sha256":"cd8b7138b30779d885d6f2a380103400670e6dad034bcd668ed19802aa84da09","sha512":"c1136d96ecda307acc4e712ce13cccc5fc243fa82e1e2e666938e6e62d678efc53985e66b24a816b87d3867aad38470bf2c022c2abb4f10c707baf79bf06a9dd","ssdeep":"","tlshash":"56f06855131456fc02a7ade6cf780e405b0965ac7b4d90c4925fc73173c18d8ccc7c14","size":639,"data":"","first_seen":"2026-08-28T05:09:58.552635Z","last_seen":"2026-09-01T20:54:52.650063Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-DnBibYSk.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"fea356ad1f099eaff7db5ed74d7a7f78","sha1":"89cd8f5c5b7a5dc776a54d2cb31b2af53438974f","sha256":"ff5161666f6a5901abd06ae1a65b89ab85c50de034f552c97fde3ed5400b3926","sha512":"2642bdf0d3fdad4181fcbbdd3da8d81a80f2b8de51e1ddc0612acca6c6c54c0cdd675bd3f854c04c1fa270c59c234a2c57759b0541d5786fc9d0fbd0ba9e200b","ssdeep":"768:yFXmGuvn67MGwb/yH81S6/wyro3PlepRpieIf/P9YNzdT/8CtmvPgRD52iJ9zyvx:v6MSh8Ax","tlshash":"8413d9c4b251506683d2a1a380b50203f32995547409859cbb2ceeffad7eeca7277f76","size":41655,"data":"","first_seen":"2026-06-08T06:00:00.556456Z","last_seen":"2026-09-02T23:44:25.285887Z","times_seen":699,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0bc94ffb326504ea8d6506d067aabfb","sha1":"e34dafbfb3df1191fdc4932b1d2ea3c70b16c9b7","sha256":"9282004e12a5b9e80bafd35ecffd48c92ac0b1d9d2846515d2f8324efee92925","sha512":"914888f53046d5a44117f762d515af6b9da0639e8cbfe428929a06ef1dc09184e621aefa333bcbf9641a2d158c3fbcd42f20d9018384767e51f2a1486200b3d9","ssdeep":"","tlshash":"6dd0a7855a95a06c6dd200ddc16f734a297a63100f458022a512ca493c2de37662379c","size":237,"data":"","first_seen":"2026-05-29T17:46:45.355352Z","last_seen":"2026-09-01T20:54:52.897628Z","times_seen":668,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"b217379876a3b1aff0d65aa0c07b6390","sha1":"824096af5623f34466e4f2e7f343e9269966bf43","sha256":"f51a4fc02c31d99e6eb572b1f8a5af4de3605ef22585b164f3235615f4656319","sha512":"3184bf8cf6e2dd212f3ac7b1d9636fd376664e8d21c2fdfb2ea9ea4e3c673cc7ca12c08138bc57cb4af61dc23ec71de2b3eb669dcf80a8200b8bdceb78dd7789","ssdeep":"","tlshash":"2ea0228ff2ceb8fa02cf320b20af0002220f2bca0c0880002b300bc0302b003023aaec","size":74,"data":"","first_seen":"2025-02-05T22:02:34.473415Z","last_seen":"2026-09-01T20:54:52.898508Z","times_seen":155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/static/mf/shared/vue/3.5.35/vue-guarded.esm-browser.prod.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"400c04beb2994088bcad3fa58c77fc51","sha1":"5f99f5802285dfb1222bc76d124b1b83fa682468","sha256":"78e73e11fe3ebf5d78b9fbaebce7ecd858f3931fce7047d55f8136c9e01aafd3","sha512":"073720fc135c6241a03b078643ea82c3a3bc752c2878e0bb8d402b5845d3ca995aadf44e49e52f05967b05873bebcf1802d13a6a7369be1b829aab291d00eb4d","ssdeep":"","tlshash":"9571eeaf60f724710526d03e97cbe41574b94633664dd8e8b59e42181fee128c6e2b8f","size":3574,"data":"","first_seen":"2026-05-24T06:38:59.55628Z","last_seen":"2026-09-02T23:44:25.626824Z","times_seen":1127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/countdown-Fe8ATHd4.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e3f47c6124cad68c8460190d0b2fb25","sha1":"178eac85c197fce7686f5978799f6354aa14df1c","sha256":"a9f883e0cb644d80d3e29fda244c3897ed9e55e5ac5e8866cee097e53ee3b661","sha512":"7a631996dcb6998e2570250761065e3dddebba878be889c309386be13c3fdc3f9fce6d05d1246f3788ccc8fd2c0aef9a5e67880a8bc854c68f29a7317096369f","ssdeep":"48:X+PwepMsA6YAmMfkNaKTUhk2FsXKkQxZuhcJnMac5MeRIx4BK9cPIK96MZ31K9Wx:XwpMt6/mcEt72gKBza3geMtyzjRUn4","tlshash":"08b1e2d0e9b0f93b6cb3d9a6735a736c89859c27c9168ad8c19d190c1af7de30bc5701","size":5595,"data":"","first_seen":"2026-08-26T15:23:24.060959Z","last_seen":"2026-09-01T20:54:52.777732Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-active-raffles-D2BKdB0R.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ac87fc2b2d6c48127dd94aab776d562","sha1":"707f7aed05e7061586984247dece1922597f0bf6","sha256":"d53195d161c302e2429a454919603eaad3520a7349ba5b241ec0bc3b87b4bc67","sha512":"c5d66978176b631085068162199949b6904b9fd10a7731c8a9890771e1cc3db0147ad6649ebd4af82842638de856be4e71ed3bed4c405b75f23c686816ce5b59","ssdeep":"192:k3d4h9icm+emKW4D7+l65jIdqj2WEkUnVqPDtNNiztQh2jy64:eq98njMnVqrtNNiztw2jyJ","tlshash":"8bd1978a1190fd35f712c0c89e75317de82c1d3eedb283d16522284691b29e1bf0db7a","size":6204,"data":"","first_seen":"2026-08-26T15:23:23.86627Z","last_seen":"2026-09-01T20:54:52.651052Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/main-C9POaWo-.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b42db0a98ba6a4aeea1da646e52c05c0","sha1":"1b824874a403f6d229018c9fa69ed247d874e837","sha256":"705697c798b81d9c107386884c77e483f49e6f75c67162085cd96e73da7bf536","sha512":"b93f78a994206e54a06641ac1df4d9ead56916f766a4d32503fc81d71499ae8b8923558904469fa2f18c3a7da393a3ef76fc1fbb848cdf773d5713b0fda933b3","ssdeep":"","tlshash":"22012d98b0a8937884ede5edc752c493c0f421c2f665c890c7f50d2846a00c753abe4e","size":744,"data":"","first_seen":"2026-08-28T05:09:58.443779Z","last_seen":"2026-09-01T20:54:52.738227Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/process-billing-schema-BzxpfwX5.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"11a0e0f9e56785016fa2d6c16458971e","sha1":"dbefc89a977dff9d38d39ae476fa29bcb3d266f5","sha256":"f6d804bbed164b34765654a38f49f5c32f3f08f7354b2d25a7f45a1f3b34637b","sha512":"f19a5d497d47376ef65d66a0816c62d6990df96abf80c6ecaa729a4a59b1b3f9b61268d64031026904b2b8dd2e22cf192b8c76beb7ec2b6fe608f12e1b0a20cb","ssdeep":"","tlshash":"4211121ab595c6fc463d18cc93205423c4b503e2f320e0d0d26c1da99fa8dd644dee2a","size":856,"data":"","first_seen":"2026-09-01T10:21:15.137475Z","last_seen":"2026-09-01T20:54:52.900388Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"adae5fd446538af06d80b0258277df1a","sha1":"f7bfa0555a9093fdc533016e6c6541d5dcf504bc","sha256":"2fd8d388e84e740f4ae2e6c79a10249fd9f5217ecca92511d1bbc832b3f2a4ce","sha512":"1d2453b70f04d4e0a5a6373b99c01cf6be56b90686dc8bf216ee064772b9613437a50ec2828fe431944ca61ce93004567890912410ebec1569698aefe288df1b","ssdeep":"","tlshash":"6ba0118af288b0ea028a320a202a0002220b0aca0c0800002b200bc0202a002022aaea","size":75,"data":"","first_seen":"2025-03-19T17:35:39.300783Z","last_seen":"2026-09-01T20:54:52.901307Z","times_seen":1152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-oauth-finish-BJwEzY86.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f630aae50fcdd4cdcb23aad198fa0350","sha1":"e3001b3c752bdfd9ead3957bb3d0a09f7d3ac436","sha256":"0c64888aeb502240d14e4ff32e525714f09cffa94301f49ebe3273d7d23ba14e","sha512":"b56d84e6e9e43d0a7ace71f7e44de5a2a37d72d169b7b0f6633831fa2ef0da02ce6734f3cc9e625ec437ff3df6a79b34841ac8307cf202398dd20c898f7a5d9a","ssdeep":"384:sdXijiXxMxuasgAMzU8r4m9PIUkw+FPIkS5Akm1Sz0CBbP1pY1x95kQxMAEm7iH6:iyjixMxBsHMzU8r4m9Psw+FPIkS5Akm/","tlshash":"32a21a92e1b365f58ef344c4da293270e2280d14b80ddae0f5ad9e1b146be06957ff2d","size":21319,"data":"","first_seen":"2026-08-28T05:09:58.660395Z","last_seen":"2026-09-02T03:21:21.932317Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-body-scroll-lock-Kv5cWDft.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ba1b329ec139ef99f4888fbbf490b24","sha1":"6cfbbe90d9f574c6f093afcc16baad906b611214","sha256":"df04c21ae4370872290c02e18a4305a7f5a8f69939feb9c59f30b39bdb056f45","sha512":"1c700901b6643b55a3747f88eade2045eabc19eb77dced1ab02f20830ade651f519b48ecf1c29dae36b240072808a725bf77a34172a69e4131c1627bd01c3325","ssdeep":"","tlshash":"ef1102b67640b23043eb99cab193cf90a5306240264db4d4506f88496efaea321c7f67","size":1006,"data":"","first_seen":"2026-08-26T15:23:24.098059Z","last_seen":"2026-09-02T03:21:21.89556Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/content-load-error-Ck9uZ66Y.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c62764120e840fa748e26a5740469c68","sha1":"cb24b1accab99adafed4f814ff7e785aef701af3","sha256":"0845d3041f76f3e9ab72d4bade614e51556c9d3b86916314a41061370980dcb4","sha512":"b4514cfc8f64079b521b5e4fade6fc534bccde05def471b126a3d1d9d13be1236dd8d90fafd42740c65171b0732f2789bd7f6fdcb77dd63489069b5101a81a54","ssdeep":"","tlshash":"62517565ef64d138f7775c8e2b297008d058c1abc527e4f8d1a5831c9ac6bea07a4f0a","size":3160,"data":"","first_seen":"2026-08-28T05:09:58.63059Z","last_seen":"2026-09-01T20:54:52.683922Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/avatar-DvuRI4_o.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"04f3de1f6b7d8fcf7769566c3ea65779","sha1":"6ac1ebf7b4fa98e2181e529542fa5d95f1e97e3a","sha256":"287522507ea8f0a008420aa712e2bd61fb663b0c45a7e3021ae86c14b912170e","sha512":"90917a531c22e621a5c46c828c1298e4235672f17a8643a0eaaf3c40746015b7de6b415b07f1dbeac1bf3a2841aa98384fc734e01b5fbe2d5e33b197f2f22274","ssdeep":"","tlshash":"c55140138d154674aa1a9881ce28fbc4908d5cb6e7213551febb8e774fc4af7305a182","size":3087,"data":"","first_seen":"2026-08-28T05:09:58.724538Z","last_seen":"2026-09-01T20:54:52.833341Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/vip-badge.vue_vue_type_script_setup_true_lang-3qKTxSx4.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"39bd5e6ee82892cce577613c0cc30b88","sha1":"956325be442ade4751621679a2d4ca29e195c2fc","sha256":"f031987c81a0586a3140cebfd66dfbdf1355a2edd1db616f7e7691585addb21a","sha512":"256e2900e4369679a581a31ab38be722d8ec2c59b29d2736a81bcadfe4624ab19d562a48c70f9173a8dc1e9b62389d74aaaadfe6b460e6d7452e9df2ac974e7e","ssdeep":"","tlshash":"40612454f7b0d2d5450b9bf9fe3b64a0117d38ba9bc09d90b3d27828dd9c0de58058d5","size":3390,"data":"","first_seen":"2026-06-15T08:07:15.700377Z","last_seen":"2026-09-02T23:44:25.123868Z","times_seen":823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/game-utils-CAbqOn9a.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e047b1ea65fd1a6fcde175d025a512b","sha1":"5b18c36f4d8f95fd6210bd408cf98595d654df12","sha256":"a727d707e417f1f81a70c0644927d442a98006f6992d341658f9e51988122b0a","sha512":"c0f1d7770a6bef28f6ecca4c82711e29238098ff4ce140e88c2f9063d8ddfa70c16b53a6a453cafd01ec314fd7fedb20a750eeef88c0332a76b22d8d95e9b1bd","ssdeep":"","tlshash":"a701d5e9625998b842b146dff53e70b8b88132583803f0c5143ddd3699f6fc3515ee65","size":782,"data":"","first_seen":"2026-06-09T11:00:46.170784Z","last_seen":"2026-09-02T23:44:25.204196Z","times_seen":625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/page-loading-DqoxeeyD.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1de42a00b3a1806231473efb303e4f5","sha1":"cbd29c1232629255ff425fd42573e059ed579eac","sha256":"9f8a6f487b89771f9699a81c8022768c0a21aa32f8d7e34f1ffcddbd99c57c99","sha512":"5a4dbff8a00e8c25b7e5871dc53428a1f0a69393a260f8cf9e8a4fba9e958a2dce8df69b9cfdc1f65090a7fe411de986c92206affe2e6c4d5ab6c4fdc43c5e14","ssdeep":"","tlshash":"ee51ea05ae02c4b85f6b9443961cd890958a73a3d77268f332fd4d2d03f0c648f6746a","size":2970,"data":"","first_seen":"2026-08-26T15:23:24.321103Z","last_seen":"2026-09-02T03:21:21.925497Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/handle-affiliate-Dach5UOx.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bfb96fec11fc2f35115cc3cb8dce614a","sha1":"086d9d2b39b86c19258f235e05a55ce384d7da41","sha256":"95176073b32d1b6e56c314e7551e0bf410dcd33a660896a33927657186b36f16","sha512":"ebdc06978998956d06b95552fa7c79134d8acfe679d3bfcafc96b0f60574909c2019e6e6f8ce0d66a6f1f5acd7eb92bce4d9eebad80c1525e48ca40d2c450cfd","ssdeep":"","tlshash":"d001258921b789be0b793ee064553765b4b244cc787a86c5305d27026313e4bcc3f549","size":774,"data":"","first_seen":"2026-08-26T15:23:24.073752Z","last_seen":"2026-09-02T03:21:21.873209Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/arrows-scroll-view-9KuFXeJe.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"24a0cf770428ad2df3c1727d0c656247","sha1":"e6a4c84906aa0178fa3c809554c9565c58077033","sha256":"fbf5c90b3e3238ec1fb83fac213ca4811f189829a4fbf64d509ed662acdeb295","sha512":"214a6f4b8abfc514abadd0343a92963279ab68a700a3ce9dc0448075a9b3bfa2bb4a1d13cec5790fdf123fe08aa2283f94df01e89b760c49125b83d96b488227","ssdeep":"96:PPf+IKxbgH4TO5PxPpxEIm1OPFWaOxDYh/DND5/Dm:Xfb4i3AIzPgaOx8RR5a","tlshash":"bcc1da76accee0a866cf8239d915471b11d90dbb57143946d8bbaeba07d0fb8013d30c","size":5936,"data":"","first_seen":"2026-08-28T05:09:58.84424Z","last_seen":"2026-09-01T20:54:52.748801Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-BqmZ9M9k.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b53624e30e643ba429e139df3f1ab931","sha1":"92a8dcaeedec103100154537b1fa78236622027b","sha256":"206c1ae63f6ee992ed427da3cde9a6db905977772fd8708f13b0a69d79c5c204","sha512":"35372f0131f9379dee4cda39bb319284807307848c1a2b305d05a044bfdca860424471148b1e17957a55eba0ea6ace9f726d6936551c7c1cb78182cf47a751b4","ssdeep":"","tlshash":"20c02b2b00358d3c0023086d7380c510bb3c84700730fa90d09a171122d80d1030d502","size":131,"data":"","first_seen":"2026-08-26T15:23:24.248801Z","last_seen":"2026-09-01T20:54:52.633383Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/custom-html-DjLXZtQZ.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"db61ee4bab4807ce14b57e5e010e8fa8","sha1":"c9c30b7fec25651bd283f681fbffc297064327f1","sha256":"eedead98f275597080c0a9288faab99e3978d511413863014786e53232819e9b","sha512":"b0ba39b7195aed8dc719a4dcc9ad3501838316ac6ae4accc90a6f48ab38efad3d3855cd2bbc0f79aa7caab2770dde2799edbb4471fa02ff41d13c73da8eee375","ssdeep":"768:ACAgiLrKdj8GMbalUqDrqYW2FTayyHAjyPS2ckAGEoRjZwUVVa2lDRDEvJ0k9Xgb:nv8p9Y4t7ZwU/F4A","tlshash":"f1c229787999a9b24fef40d9507b6a09a1bc051e714cd490e6cdccb61cfaa091067f3f","size":27602,"data":"","first_seen":"2026-08-26T23:17:11.928225Z","last_seen":"2026-09-02T03:21:21.920886Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-BfvH0C8e.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d95fb1fa755ceb09951e29b2c44fc8db","sha1":"dbace59b89fb8cf5779bf433c98634f1e15f251e","sha256":"a73f343c73657b1d5c92c41a1681f24d5bfc9d45c04ee1bf3097f46e8488908c","sha512":"f6c39fce4da3a55bb854061261b14f14f24724b25f17412c9df19106b060d4fc75a63dffa4e3789e5411b9a7fa016d5df7b290251fcc1a91909a233504db3152","ssdeep":"96:j6VINQF3XqPafVPdS5jLRVtelIJ0/ytYPjZFADOaSJ6yd+GYj80bBZvbEBDHFEvt:mGE3Eafl05jLRjelk0/9rZFADOaSJ6yU","tlshash":"1ac1d445798d19700bec0ea5fd3619d081e51bb1e104c48cf9bf4f7e2281da08aaaf78","size":5598,"data":"","first_seen":"2026-09-01T20:26:35.121412Z","last_seen":"2026-09-01T20:54:52.5753Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-banners-carousel-CImHxFum.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8789ab5b3e5eb600750fd81b6b5e0f44","sha1":"187fc33c885073c47001b4b45be5f1afd612fe1e","sha256":"8a4bdb6cbf87c35bd1c64427b6ff1816d4b4bd4f90fec75b86c62edcf9a61eac","sha512":"f368acf279ba2cdde23c0be5a26773335dd4bc1367f2bc592a3ee383c44af5a4362265017169a15aa5b8557ed203fff33a96e418b2fe7d533ecff54728635f25","ssdeep":"384:raGByiI6+YRseP66Cpi4d5iCazVbCTo8FmgxXNyK1XinjuT//fJ:rautI6+YRsC6PsvxzJCTo3gxXNz1Sn6l","tlshash":"bfa21bb92e10203997bb85dcf3a64498a10d3821e542ebe4e5ed6d2406efed41237b3d","size":21426,"data":"","first_seen":"2026-08-28T05:09:58.58449Z","last_seen":"2026-09-01T20:54:52.67676Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-CpOnMf3S.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad02643f0a9315164937a83b07e95986","sha1":"b309d5dbe33e9c778f929b6797b2b369a9f3c23e","sha256":"d4ff77d05119f097354633b35498a57d1a2191b0db22ea8a21ea77c48cab6e05","sha512":"9a9fe7c94820e1b46afcafc3f649c426b0ef15dabee75cea036307719061af58b356426cb33ec544f17587d191aa104d0756ce5111a0ea30aad9c366f58927b5","ssdeep":"48:jOQO6eiqxef/PaIrfFa5+zKX5pIzPO8XdXMdYNno2Oe3UJPrxnfuOQwKks0uNvO1:jiYf/Pa4fXKPyPO8FNsPDHmpN3spay","tlshash":"4491b54769496d7a02bc0d88dc2c60e296f44b92f515c6ccfa7e0eb93690c59406bffb","size":4281,"data":"","first_seen":"2026-08-28T05:09:58.414638Z","last_seen":"2026-09-01T20:54:52.685856Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/more-vertical-VhUVzGPj.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a302b1125e3dcf70b348c4c8aeb4ee94","sha1":"f7c8a09c011ef2328685d8ccd9c7fc8f86d820a2","sha256":"9393881d9e7f02549f1a53a97a1d7b581fc0f84d89a99adf1fba4a59724ff96e","sha512":"f73df2db698bc75ef6b05b42a3f8da0513923eb10a480b345c9d75616ac5ce0cad27f9773e0415c52b5a95452310ddc4b3835e5ac65cdbbb23667ea0df5af241","ssdeep":"","tlshash":"d351b9f8435d29bc91678b14cb199850020a65b7b68f41a0df0fe13b82835e8ff4753d","size":2546,"data":"","first_seen":"2026-08-28T05:09:58.79107Z","last_seen":"2026-09-01T20:54:52.818816Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/sidebar-dynamic-section-g7ZozRvx.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"eddc72a88ce4d54fb11059c2304241c0","sha1":"798d366522ff4b0d87d3b830a120530c417d1558","sha256":"3f6e59c5b742476e5096d0247101dc4d73d848231529d73e37d818e628893abc","sha512":"d6ec1eb065644800b097cd37c285d5c846fe8ea237c2e159bd869567a19253a8e0fdf9cc8d41329b4c064443ccfe3769284a8a9c8668f8f68bb6ccceb925d270","ssdeep":"192:QMamXYLtwEoyXD/0dOl7XfF3T8XkqAexfypLeCuovowtwrqW:QMtoLtxD/1FsZktwz","tlshash":"4612b61ae005483b4da3baf5dcc540ece11903e9e3d646e179ef89351b2f8e8d275217","size":9845,"data":"","first_seen":"2026-09-01T20:26:35.141605Z","last_seen":"2026-09-01T20:54:52.754811Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/game-history-section-lobby.vue_vue_type_script_setup_true_lang-Duuzd53i.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"99c7878f3ba1ee245a76540449cdf0c9","sha1":"88bea6a6857e99d0b6ae15fe381d9743ddab42b1","sha256":"d219670f5ef3c43adbfeb48c60c499d4014472c6241ad54d90322118a2d1337b","sha512":"62ae1039baec86efba1176ca246efbd7457ae6eb62af1aa1959340dbb1016dc0531f691967c8757094cc0b0cedd93a5ea6bb6e0243a527db724611ae5fce959c","ssdeep":"","tlshash":"e051a89aeb384cf65d539eec495020246718426acb61aed0d4ffcfb117f94c8d46e509","size":2915,"data":"","first_seen":"2026-09-01T20:26:35.127767Z","last_seen":"2026-09-01T20:54:52.69771Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-recaptcha-C1-k4II9.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fc518860b1f10743724eceefb51f9a0","sha1":"62ed751980c30a6e7ef8b49d81b8644ff50498fc","sha256":"dfa4abcd31678707b89c25f2bbaf0b3c3761209dc2e461e2cad628d8982a84c3","sha512":"2d371b4d453d7cff283813fdcfb4eaceabf5ac793b232bbfc5252ac270f50f2b1b5771afa771a62d713343a733f8ac744d36664221f464a1a3bc18f30ab2b9f9","ssdeep":"","tlshash":"4041971182519bfa0d195942f13a63c8f7a0025af014588835ac4e76b28fdc3c78ffed","size":2427,"data":"","first_seen":"2026-08-21T18:26:18.570301Z","last_seen":"2026-09-02T23:44:25.2884Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-7-N9PB7K.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8b95577e2e316786da4cbd601946c24","sha1":"68ebc75863489d87c551f1e2835f4c78b2866905","sha256":"9fec2414e25877268d2e2554392dfdfc2f342c09e5b7bdf39a88b648e742e406","sha512":"7f1615c3eaae2074e040bf47b07ca3f1d9d3d0b06ee6da5d5606fb977742b5a640c03dcd8f43d33a8fb841cadd07fc9b5b1fe2c65209bf9236690137645f6030","ssdeep":"96:jrVJRBzkAatK8HPa/mrPz0TrIwzNAjFAO+IEQJHsN7e3nuAK:vVHBgJTvaub4PTI+NssN8u5","tlshash":"be91a51265945cbd12ad0d9ded162bc589e20792e140c4eebfba4cbe21a1c90902fff7","size":4453,"data":"","first_seen":"2026-09-01T10:21:14.66221Z","last_seen":"2026-09-01T20:54:52.647749Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/arrows-BdKBWscS.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"32c2a4d835a5573c975514e932845407","sha1":"d277f53309469a3236d4c1f3a9e39df37b08a8bd","sha256":"6b23c2ce9c99d5c049adaa90ced14ddddc82beb9a9ce516a6b9122dd0af72a21","sha512":"913796d0dd68fbff01f56e3fa7c194f822478786e686afc84622a6a08b9ccc08f6b8e3c1369a9af750bcca1af8c8acd7860c4037b3882e40c75057593f82523f","ssdeep":"","tlshash":"fb31871b6dbb5d7159574009d63ed263661d037feb1634d052df0c3c0bae9b14006d94","size":1528,"data":"","first_seen":"2026-09-01T10:21:13.343971Z","last_seen":"2026-09-01T20:54:52.702052Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/title-placeholder-BTEx-YBL.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f71ccbe1e96dd3302522cd969bcae18f","sha1":"0c1fac7fad7361190078af0085d3fc55aae04464","sha256":"a415715ed177ceec04fc28a05b272c2583c09bd592a8ac70b33913ff3773e7c7","sha512":"797f1c0e01beb29e5b53c696388cd781e864291ed0fc2ec410b479122f4242688b227ee9868d3ac2ed87dc74abb0935e9862b462d3822dc8a210645cff108fa7","ssdeep":"","tlshash":"b221531cc928c7b81422d01b577cce89793c302b9bd138f445649e3a1fe8de2c172180","size":1387,"data":"","first_seen":"2026-08-26T15:23:24.3848Z","last_seen":"2026-09-01T20:54:52.712893Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"b01c9d9b3c9cd49d4f1a79926e27b043","sha1":"e3811cfff7116c0cb2f4a960acedbddcb3c5df59","sha256":"7e8cdb7f7d2e310134e4e82ea625d7270865a28a3541183956ea1896f95a8293","sha512":"6598e67bf845c34225a42b037cd094c8ccf3f7d5160f44cba33f7c0d2f1bc0efeded874de062097474a1e64001ccfdc875f02eda8c859ca1fcbe4196bb7ad425","ssdeep":"","tlshash":"6ca0228ff2ccb0fa02cf320a202f0002230f0bca0c0800002b300bc2302b003023aaee","size":75,"data":"","first_seen":"2025-01-28T09:42:26.515813Z","last_seen":"2026-09-01T20:54:52.902297Z","times_seen":1758,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/button-DBMjOvRF.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c678e3ff2dd22d1e7cc17d14391b8af","sha1":"976cf468e2c46d9ec071dcfea76f0762557fad6a","sha256":"5d51e3874e0fbb5ecd2ba9e1fed2633274be88c3ee50548cc10b5798f1b71e11","sha512":"aab145dafc07a1d569f194dd818e7dfc6c23c5e32586a967ffb30c36a8f12593531e07ca765b611ed811b29b6685ace1f9d4162ea38512e95b3ff79b5682eb57","ssdeep":"192:vQ2U+dUABylBWJSjEhMlSWu9qyzSUt55Q4:vhJ90lB1jEhMlbuxSUt55t","tlshash":"ca5285aee600f53dbf93960d531da0ec930ceae5a5115fe4f06458286bc2be162d7306","size":13428,"data":"","first_seen":"2026-08-28T05:09:58.807854Z","last_seen":"2026-09-02T03:21:21.902918Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/checkbox-D9zMaGaO.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"14c9fa136ad8ace418bc68a850fd67c1","sha1":"aed55963420d9f714f1c20abd8cd52b8deff7eec","sha256":"d8112af36e1d4d151f07ecaec7c746f5850a573a0864bf39e9778b1bd4096391","sha512":"1cc58264466e8f31b8245a22540e3314976159bd48a292a9d837e67f1460d8a3ecf8bf8f5155532505ce334d946e2d13777acb3f8bb917295de22b6a79b591b5","ssdeep":"48:+K+JPSZLg1m4OBjsXYl9l9KTCgqIyssPvN5c5rD+NrbvIbvBzerxsexeGhSDner1:zISZLg1mjFsXY1nUu/Egx+GDK8VzQFY","tlshash":"60b1217aad11a47a6d37753a673cb24b4539201a8f221e7dd3d4c0394ade9da730ba0c","size":5181,"data":"","first_seen":"2026-08-28T05:09:58.360548Z","last_seen":"2026-09-01T20:54:52.836657Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/support-BQYtwoAE.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3091ad03e13288083e4cc2959d5c536f","sha1":"180577b6ca87695f6455ae4e52ea739d00de9a30","sha256":"4724288d951bb767062a892e30490d271fee9a9891212dfcc4e480d540900398","sha512":"b3951c6df41597caf4a0eabd11dded10e30062038268e3b05ebbb055120c61ec315f4a2d4026243fd25c36a18d29205b1733522ec9bfc0db7ac3d74b057f3073","ssdeep":"","tlshash":"940197ef525c16fc0927ca258e36f9501f1d60aa334682d2464f9fb243824e0e85ba10","size":705,"data":"","first_seen":"2026-08-28T05:09:58.839426Z","last_seen":"2026-09-01T20:54:52.746568Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/logger-M1XavGiO.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"55dee51c6f6a9a664a8da599d90eda00","sha1":"ea911101593d9e95b06ffc9ad9781c715f286bce","sha256":"d521cb15322634d83c21f398711fb4763446cc74ebc44a35a554a7f8859fa460","sha512":"c12129c1903706e69dfa9e2cfb8f53fc23ef18ba7e3f456340a26da9b765e1fd512be5d2c7027d97c48758a9157b77908e33505a6e2a30bdf2d2326c18bb2f62","ssdeep":"6144:rCWqV4JnPivyA+MXjNqJ0MAgDzqtnAGJK5NeMwHGJJ:rCNBwJAEqQ5sMJ","tlshash":"8a44f6c471c6b16243a355e8903f0109f63e2964784cc498f26eddda3c76c8a967bf7a","size":261441,"data":"","first_seen":"2026-08-26T15:23:24.056535Z","last_seen":"2026-09-02T03:21:21.90656Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/flag-C10gW2Eq.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7327d6e3014ffab07469915192db9171","sha1":"ff3adf284127b72389f28e759f8dbf1faa0b18bb","sha256":"a2e4637d1dacb3114a6bdace04e044b10780574dda6b2860477b21aca5d3eac4","sha512":"a0fc6ef2685def319f4e33320d54d36d2d484705f47004ef03f31de8a4a3c1d391a1bbb737625fc827a5e3eacc6807bb251fef96db78769eb3a8a42cbe93defc","ssdeep":"","tlshash":"3e21415a1e5781b8266f44dee933d1e4b9cc106a6765d4e082adac3ceb50fed4019a84","size":1197,"data":"","first_seen":"2026-08-26T15:23:23.92869Z","last_seen":"2026-09-01T20:54:52.770306Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/autoplay-C5bRuECE.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc3c93cee343dc62692cbcb17d60ba9e","sha1":"a7be30cf27e9ffc7b4e849779256e38c08c9db97","sha256":"b96c857090cbd45fe9a0423fcdaddfaac4a97e7d21e2a26af62368d54f3a04ac","sha512":"f9c50a99dd4b4c20dd2ec44a75d319e8278901695011fddabb00617679b455692f862913d60f1201f56c73f947e8088bb8452e623d4f5b42051e8815a6c59177","ssdeep":"","tlshash":"1b81418b2241763a6eee874692f444185b301416701d3becb4fe8e386f5e887527ab71","size":4015,"data":"","first_seen":"2026-06-24T21:24:28.632711Z","last_seen":"2026-09-02T23:44:25.226777Z","times_seen":521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c42a3f5ff700ded9f85c844288dce0a","sha1":"f0eebc142cb6f95a4d2637c4247eab7213badbb8","sha256":"22288f8d9e361dd3accd41ee8fde943195344f3d53b29f66b4c4387f4aa39997","sha512":"f8ba56a01571aaf8a7d5d0016bfe26a34c651b7d5aa02a2374a41923ba5ece05674236b3e27e658717159cc08564f4fd8d6e1b381530b2ff9df710a1072f259b","ssdeep":"","tlshash":"094196327e57d8b809de28adc62f334afcb81a1c8551a080a654fe913cb9f33956355f","size":2341,"data":"","first_seen":"2026-09-01T20:54:52.903263Z","last_seen":"2026-09-01T20:54:52.903263Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-4JWgXt0K.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5aeb6a2459e1e085c39d9e2be82ae86","sha1":"373cfa78263e85cd71a2925c3580f2f8bd0da611","sha256":"b53555a2c06529c63f6f97a81c34cb9b0084a9ad5c6fdb5e4e112b21915e9d96","sha512":"cc141ed936441a7f75635bb6294fdbd3a54dcc6bdcd74e4bb0d2e40213f6b680ff7d2529f0f4c06d60c669c474ec822fc1d2eb20fe8a565d7c2f8e5e95945086","ssdeep":"768:fotWi19tGkIRHz+dm+5pRz8nVUJYZxmEevK/ynK+mSkCwO1Nf7eswQcEejaPWZbX:fqYDqzTeAAjxF1/P","tlshash":"52533b41bf50a178173b1c68ecea055012b95f197407c5e9bebe2d2a22caed4c1b7f36","size":61916,"data":"","first_seen":"2026-09-01T20:26:35.129072Z","last_seen":"2026-09-01T20:54:52.696316Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-table-controller-DTBTrNZi.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9525ed0c4d4922e799cb4cb5d10e2d32","sha1":"41dc4d4564916890360f130ad35bea7f6486c4a1","sha256":"c35719279cb1f10ecb252962ab224e8862edac934223c8cf40051464b342c093","sha512":"a50189cc56f17c1ef826f32e4de8acad4de8e45ee37777c6dc78b9db65fa49b51a5e82ba970bf8e9c3029d994230f1132804f31fb673110901abcf6c87516337","ssdeep":"","tlshash":"4b1104057b159c7881decf8da86056e9e15a119ff62341f86126dc780491fc5351ac7a","size":962,"data":"","first_seen":"2026-04-24T05:21:35.06993Z","last_seen":"2026-09-02T23:44:25.302294Z","times_seen":640,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/swiper-vue-DmDUDxw-.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f850d9e2bfe26f29701bc847981bfe56","sha1":"fc5b16fb4029d6cd3b3c78374d083a7e406d2068","sha256":"38d6cb730d8cdda9e8c0da965068cf06913520a69afcbb6c6454e7bb5a871bf0","sha512":"6cd54761be8ccbda27e4576686395327c6b667cc5d768158e7e78cfde04f93f44bfe2b35b6a22aac941b5e042e8dbe410423189779244952fb2aa2b260116d94","ssdeep":"384:/yk/9ylA6wSIuEf3XSuv2oYb/YVNQECntIQpfvkcYDxhqhE5gBtdVp5k+mkd3uJt:qkVylA6wSIuc3XSuv2x4Cntb9YDzqhE7","tlshash":"e082969db218e56306f78d57c237831024649adde811f8d0a5ca7bba814fe98130fbb9","size":19070,"data":"","first_seen":"2026-06-24T21:34:31.166435Z","last_seen":"2026-09-02T23:44:25.36368Z","times_seen":514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/email-input-D2wP3Lq-.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7004c1fbd9ff23bea2ebe709b7f5c04","sha1":"331f074351fe38c23b33092fbd42138904df6dee","sha256":"3f8cc199226982fad208a0d31b7debd2a2d7e684c0bb5b766a88598a0d385416","sha512":"4acaf64902428a7c656e48f72d81918dcc0b82e1212bfc39fbebdba532220cb6eadfb77f5f6e05298eb21b6182710a12f9d156b68ab1e7da3f18834de6618504","ssdeep":"384:uIAOiu60UqrFC1DbsWqjfD5RrL/Mhd2zpJZ/rwJHthRpej5uC:uISu605rAxbcjflRrLMdGfZ/rwJzRpeN","tlshash":"9b42d950b5d4adf152d208dc283f7418e87aad342159f0e0f3af9de12fa4b4191b6e4d","size":12619,"data":"","first_seen":"2026-08-28T05:09:58.563973Z","last_seen":"2026-09-01T20:54:52.703924Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/setup-window-open-interceptor-BOxXEdUi.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c19e2df9aa65fa322866c1adc60c9fe","sha1":"e1bfd60b4daf05be2cd4e42a88736f8d4c2977f0","sha256":"808915bb81ccbbd428ecb126f9299d1ea7cc594b50be0da3ad490bec8d16e889","sha512":"07460cdab3fbb2fca6cba4f3bcf53748fa28711bd82e47053726c468137343aee1d625f78d73fd3452603c27ccb1c4021ca66a4ffd0be153ba737646c9cf8ae2","ssdeep":"","tlshash":"3441d6acb5b5a23c013859d8f4b492718408abb9b976d8d0f2de0f2c62cfdc38122f15","size":2077,"data":"","first_seen":"2026-09-01T20:26:35.068131Z","last_seen":"2026-09-02T03:21:21.896897Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"9239d6d263e46704dd91deb58946e610","sha1":"e918add697fb147458f262ff5e43e461e3d4dcb4","sha256":"fca4f70ac400512a5ab9c778bd702211093747fed7caa8650e8ce29f6b1fa054","sha512":"6814075b7336ac399000d37f824291f95621705103465269e3a69058dee0ab87dc0afc34375f2a139357e81a88a7dbaccaa6f2296eceaf815fd6fd8ab7f00042","ssdeep":"","tlshash":"9ba0118bf2c8b0aa028a3a0a202a0002220b2aca0c0800002b300ac0a02a002023aae8","size":74,"data":"","first_seen":"2026-05-26T00:10:17.867144Z","last_seen":"2026-09-01T20:54:52.906092Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/error-captured.vue_vue_type_script_setup_true_lang-CAKKD8xl.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d175c336047130f86c8bfbba635e8b9","sha1":"e5548a2e85d42dd0d4ba9c14c6e0294b48bbb15f","sha256":"3a856db98850bc4dea6e41a05dbad825c8aa0b95d43d329566c0f36b861a1a09","sha512":"bc2887cc063e9ffd873da455eddd366f4ef4c93efdbad0e31b1ac6059004adbd295061f6eefe194357cc71cabb21bd6ca2750c21a0e847e21ccf387e82871ee7","ssdeep":"","tlshash":"e1d023187d97d5764d50068d5d36593088ccfdea1637d4c25141149b370c441ce1765c","size":228,"data":"","first_seen":"2026-05-24T17:55:17.39424Z","last_seen":"2026-09-02T23:44:25.357958Z","times_seen":454,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-category-preset-mapping-BCrfY3xl.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2d9a3b05bf93ee2cc3755c7404f0ce3","sha1":"1f4d471a316b119c2d59604162903b71eaad692f","sha256":"869beb6b31ca4a298f456f446028e5b96dcbf07eaf26921e6136215e791ce833","sha512":"b0eb6412211b5948eb8a90e36e9023af9c400952ec3635ce1ad45898ce6fa8cd986d9c1fcf1c8eb136c1a589fca4e35cbc981fe444bc2550441b8c1a1eb01269","ssdeep":"192:luPo4xMz08vpBrstTpbz+xjS4/JKXf6wG0ZTUydSU40Li5bCLW:4PTeBQahJGiwG0FUyVV6","tlshash":"3112f789f91218f608776cdab524b840a620427bd7911ed0d2ffcd350bcaeb5a1ed74a","size":9461,"data":"","first_seen":"2026-09-01T20:26:35.025022Z","last_seen":"2026-09-01T20:54:52.611776Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-548949LWLW\u0026cx=c\u0026gtm=4e68v1h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"81f550f1b1bceaed2e4a5a41dd6d70d6","sha1":"068d0fa09feb3548beacb1e78d8bf756e790a393","sha256":"ce34b2241f0abd6835f523a7b43ddcafc351b5fc6afe2bc7800983ba85f0bd62","sha512":"fc47deb290f35be24b56d8dfffea48bc8a163a54fd4d5b53ed7bb3dffbae9134f113b8e5ef6e49e02728d6fe86ced712f8b82b4a82b461b0b6a393d64365dcba","ssdeep":"6144:7Nld0NBIWgm+LpwhukcrsA/2EgD3YjQI+fVm/u6XCmtBJD:giWp+akQIomHPvd","tlshash":"d9a41acdb3c674229392f578903f018bb27a69a2b44cc899f28adcd42d3465a5177f7c","size":467053,"data":"","first_seen":"2026-09-01T20:40:30.299817Z","last_seen":"2026-09-01T20:54:52.775428Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-DRg7FJAv.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef83be97c8d8cded7efb9d0b2f7edf0e","sha1":"4c9c284a7eeca8d6fc91b64046a2be5d02ec63a9","sha256":"4f9568000853130a37e55ce7c0692dfac5b2dfc11ed8a4b034188d0f87aacc60","sha512":"d11d3b854b3eb8d49cab81246c3eaec2ef19ef855fa8ec0a5424051c96c66c759f5481cee48c41e1a8e0b9a1869334994f79cd6750af651f1c79a5274e203fd7","ssdeep":"","tlshash":"e2c02b3118ad2ced3cc105ccf105407d4e0a25cf619061c2ee8ed303d8d7014643e820","size":149,"data":"","first_seen":"2026-02-13T00:10:19.580155Z","last_seen":"2026-09-02T23:44:25.244707Z","times_seen":1020,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/modal-banner-DyTgCUqF.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f5418437f2ea6b9e96a1a17354b3c1d","sha1":"0afbd023c8f12e3247c15f8406c93b6bc04cb6f7","sha256":"f215a9982fdd942d780488c0c3bc43e7e2143605b7b04b74a084c58e38a93716","sha512":"5a935d614435f83746545d75769cb9c2f764f16e9df8c7823ddff285d36f84a90dbf72e4a1b4966e7a3fc4325ba914ec9c4f332501ccbbb2f85876c8b01b28b9","ssdeep":"","tlshash":"3c711049ae24f07ced3d9c9b336ba41cf04da42a8d569bf9d5f2471e46caeb20340b15","size":3685,"data":"","first_seen":"2026-08-26T15:23:23.894084Z","last_seen":"2026-09-01T20:54:52.74734Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-token-sale-server-events-BqQV5a_c.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"581821d2f27376fcc45f6b8b7dfca2f7","sha1":"8627ffad7caeb508fe91f51466cbcd9e436204bd","sha256":"d5a33516c5819d6668a24f93c9e77548038471cbdc872423c236059c3db6293b","sha512":"a4c3501197c5920f5103e9b4ec73b330ee81d7006a07ccf3605aaa942dd0649abbd68e8613f69d95f92cf0eba14f23859f9c2ae92dadbab4679316d992604775","ssdeep":"","tlshash":"8251528fcc95f2352da4eb3b85b0cabe68d569123c6d814291174e4dde488dd7ade808","size":2756,"data":"","first_seen":"2026-08-26T23:17:12.044417Z","last_seen":"2026-09-01T20:54:52.732236Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-game-favorite-DN_6nPgN.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5093806658381a6fd30b6518de80e8e8","sha1":"5e0a725dccbf2096cd0e21282874d76acdff3c05","sha256":"d02ae15ed9a6f6d73bec29ff7cd2b8328031b724c2802750d136a25b1f78799d","sha512":"9f1d4d5c6d0e3041e7de4cbf6e38e662cc9a4e94a90800fc9baa76b80b90b25ef67e6e8cb17e72b9e7b8bd04c168cc8c1fbf130190f312b23263ba047eefe234","ssdeep":"","tlshash":"e801c29ee897a2334ee4bdc86d4ad46060192165b5694d84a04f4cd41b835fdd0daa34","size":792,"data":"","first_seen":"2026-09-01T20:26:35.16137Z","last_seen":"2026-09-01T20:54:52.787089Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/giveaway-PCT2Cg-Y.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"05c2055391df558e67a815e8d310ab27","sha1":"68bc3c8b71f97821031c22a13b1cabd2596e0858","sha256":"50656898e83be4245120382a94f0036cc0798b48182f591434da8232216b0fb8","sha512":"6c00f17ef989226ab1bb329a70951ef381969c91fa052cdfd556a7e3d2f30c3a630ba88578794c1ad7c29bdb5ec1d22f968ec4a710b47a390cdf80e7fc21340d","ssdeep":"192:cYs3AvZvrc4qVpzLdaMC5IWMqhgtaMJRUZvFtQ575/5n5K5J56P67kXTf5+5Y56W:cYsQBrUpzLgMCz+ZUFFmG9ZuuXFLO","tlshash":"6842a411bc880da503ad4ec8ee2650e081e44731966cc4bdfabb4bbd7248c588da9e79","size":12509,"data":"","first_seen":"2026-09-01T20:26:35.066419Z","last_seen":"2026-09-01T20:54:52.581981Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/merge-translations-CrjSAD2p.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe140f1120aec43ab8e53ce2395b0b5f","sha1":"21a923a8cc61d361695ee75d1b197414e7aaebd5","sha256":"5a66861ee3dccd6c54db04081ffa97c26fc00836726cfb35cdc7df007139d7c9","sha512":"ba27bd9d1dcdc04798d870a83c9c79fc3c0e29bcf20d7be72a2951254f09510191636278cc74496466807bb3caba0daa3c94fca4bf05a802dbb2266f2c3697de","ssdeep":"3072:TBnvmfSqTdyi2GZTXyPuXWIYXEHA6OPZbUm:TNmfSqTdyi2GZTXOu8fbUm","tlshash":"f5e35cc2ba5121b99fb74ed5e810108416b65f14a897c4fdb27e1ead01ced90e3b3b36","size":147947,"data":"","first_seen":"2026-09-01T20:26:35.038595Z","last_seen":"2026-09-02T03:21:21.87114Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-CLzzTvQ4.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"963b2dc3bbb8180cb1b178972c856b76","sha1":"f5eeb7bf01536f238b1275aec4edb8ec1389d9bb","sha256":"43c50092a0daa58410f080149e56697eb159636a6b6d2bf2d04d9c33c0f510dd","sha512":"6918f31e354212f0b53328c36bdf1ec869e8edbe3f2118f490cfc70c19f8a168582289f4d548d380c2a034d92003d5f5deffacb3d64e0d86e7c0b298b74e4cfb","ssdeep":"","tlshash":"07214744e978a7b8cbbd829e2b024083e4b431c3fd34e491a7f51c7c6ed4481537b94a","size":1402,"data":"","first_seen":"2026-08-28T05:09:58.468484Z","last_seen":"2026-09-01T20:54:52.779463Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/billing-CXRxlN5l.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea23bde4c11f248ac55035b71001b67e","sha1":"0f10c2e4e2d581c9df002e86d2ba4028af47e5f4","sha256":"ed296ba1c96f6cd6065c1e287479cb6ca15ad77c4ccdabd4938b8adf2a4d1a16","sha512":"02240a5509fac82f11bddace824baa13c3af55cdacf48f9fdec816950c94ceb13e68802d2a3453602528564646523b5aa8a3ec6e28f035a2ab2cd56e2481956d","ssdeep":"192:WWCLazoOezWWW1NoBO3MzAwQyxJE/P/k6Mc5wy0rLwTAIH2TKUkYzSrQgbdBmY0e:WLaMOr0QTwpkYzSrndBmY0kRT","tlshash":"9312b751f1c9342447f2d5c9f0ea48a56b182b63b073a8e582de49255b82c46c1fafdf","size":9081,"data":"","first_seen":"2026-09-01T10:21:13.675327Z","last_seen":"2026-09-01T20:54:52.90735Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/test-manager-CSqV8aPt.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"62dda8416b3360e02489e9aa7e784e30","sha1":"ef67b0037cd211947590e6aaae249ec6f4b89058","sha256":"75a9a6b15fa30838882c7f780272e542af22653928c6fb8cd2c7ae0a3c5757f1","sha512":"a8443ff56373ff980352439837ac8728c5ad3ed0123a84bd0872860596cfcb64f8e6370e0bd25907cb25c6409ddd577a01f60e28635061b78f18e176ba6886c7","ssdeep":"192:6aDhqDGYRDDxxOs8PMmZf4Ngw4BML7eBYtBPNITO6h0sPuRkHE0EsjzmElDLXYE:6aDIDGYRDDxxOpPMmWNLwGKBYtBP8O50","tlshash":"7b121afb3545b03583f502abb0a69001b3355491b20be590f1ad59de3de34c9836bf5e","size":9900,"data":"","first_seen":"2026-08-26T15:23:24.271298Z","last_seen":"2026-09-02T03:21:21.931423Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-D4N-b4Hw.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"522997c09383e0d922e64675d22d6e10","sha1":"1445fd9977efba73bd45fcc49f73f1b0c291a678","sha256":"8dcd783b9b5a8157a27e67df6afa9da776bf7597f65ec75c7156846e58861be5","sha512":"9bb01e37a8f5cf5802f30e8f819ffe709c34ac5f50e02e059e93c4b61ee14e0125a62f4ee437fddf6acb379bbb94b0d6c30f7a9100b1affdfac742bfc9353bd9","ssdeep":"","tlshash":"4b5110022e844d36826c0fcc5c0560e159f58f52e914c88ebfb30d7c3278da95029f7a","size":2600,"data":"","first_seen":"2026-08-28T05:09:58.620277Z","last_seen":"2026-09-01T20:54:52.783582Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/lazy-render.vue_vue_type_script_setup_true_lang-CeKiHSPF.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"aab4235b703200c79158cae9037528db","sha1":"2140c1f50967e903d9569f9a318a1704f698b045","sha256":"6fbef7ba30e600b4d8f3a08487a88e325446267c4c1f5ae246d098d0e87888ba","sha512":"d4f6ec18d4c74e11ba630a2dc7859ec056bd5fec01b611b6a79beae977424b45cb8f4473c7a3cc3f2d47b74fe152005d3d81d1f12a5ed5a357a21b6f766a0257","ssdeep":"","tlshash":"32011005f819eeb8d5441a8bea21aa24ea455aae0b69b89352ff138f238e008524c305","size":706,"data":"","first_seen":"2026-08-26T23:17:12.250856Z","last_seen":"2026-09-01T20:54:52.67494Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/picture-v2-BOL7kWRq.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"71d2b86007c17a568ccae28d4be3b3fc","sha1":"a65eaab3ec90422b8e4334efcaa5f0006609c95a","sha256":"c763afa6cf74404ca6392ac38ee230a0563b183e8ef0bbee027f9a9ec66b6d87","sha512":"d0c61f09250568fd88cbbbd13be0be20996a92ff98415c82218184587bb77bda29fc79fd2efa4256795e483009ee5dd4d38179e372fb3d47fe6ff2ef27c94c28","ssdeep":"","tlshash":"ef61b965aeddc072433594e4613a9310f4343d792835d8d4e2be8c3f5b6491ad03b726","size":3233,"data":"","first_seen":"2026-08-26T15:23:24.002576Z","last_seen":"2026-09-02T03:21:21.903543Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/control-B-KOIy8J.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d455e5e3d4cb6230e9f3849ce558f58","sha1":"0515de5a3453abcf970e3328e1613f82b23879f9","sha256":"f4dbc5212d0deb9517a7d3342068a5e72c1deb3a62abc463e08e895d8d34b368","sha512":"65fe6348455d03f3689bd70a55599fc6cbc1c687c78c5179f36bdef2f21394b3d9bc088721d614ca51c56f848ee767e2b75e4dd71ea100009415134f75fcd4be","ssdeep":"384:sgvgAASkJHv2H1bVSVal9Xu5qAMGArbr+:s0Gq1bgvCGT","tlshash":"dd52b77c6eb07f39cab7c45c7b0ce5268b51d324de1b1686d720b83b47ca4a12263b51","size":13938,"data":"","first_seen":"2026-08-28T05:09:58.375338Z","last_seen":"2026-09-01T20:54:52.608062Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-BHWjyig2.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e2998686cb8614be69fae13504cff1b","sha1":"db2f19a2a5384c305b0d325a7def4b65552b31de","sha256":"49fe7f40b04e76e6e9f59e81f6480e6f2fda85154f6adc3fb5647d9c0383a1fa","sha512":"db496b1e6bbb6e4bdfa84adc04462e57e8c731e808e04a404d9d91c800338d5f409dcc75ca1a2526918e5cfb51c9567fe8eb0eb0fb638d74c165f57446e34e7a","ssdeep":"192:pe0Af7ZaXiaIHpsiFKGs6eQWqJPQ6JWve2RSR9lNU4Lt57PlTaF9yC:oVaXia8siFKG1zTJYpvHSRFU4L7569yC","tlshash":"7412c5a6e41c35f8027a4c94d89905d266bd4f457008d0dcbe3d6ebe6082f6059bbfbb","size":9090,"data":"","first_seen":"2026-09-01T10:21:14.912812Z","last_seen":"2026-09-01T20:54:52.818009Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-feature-flag-items-DScmMJNx.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"717418db3da1aa0ec1a1828ea1db6816","sha1":"3925f89ac496ddb381184427aa555cbff2fdc747","sha256":"a62e60d596149d267345fa9875b24de8d0512f9a27bd0385b8c14b9fc7477e91","sha512":"d28155efc9f5179040b033982987e79443b37f100a045ee631d4e59ceb016af503aa864171ad5fded48e7fccdd3c57bff1309f9bfbe424dda65abfcdca8afa15","ssdeep":"","tlshash":"4101c06d38c9a038c64248e65431e627b79441e2b254edc4ebde467786fb8d6c06ef06","size":752,"data":"","first_seen":"2026-08-28T05:09:58.721654Z","last_seen":"2026-09-01T20:54:52.708824Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/star-BnHFF_Q9.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"44dea7c952b0a3abaad80ffa87f645c3","sha1":"5d97238b33c0c340c375586f8c6f4987120c727d","sha256":"6cb96d2060e61188b590580fa932ebb42fc29c1c35c9644b3c21b520a3bb0472","sha512":"91a99bc28b56425199c952b72eea0ed5f18f77fbddf6319f5bc7041cec8237624ce6c18336cd574db8c78910d9a1f26f94ce42228df25353f8ee5d0b62dbe8a4","ssdeep":"","tlshash":"e801f9e614685abc8d2ad649c7379620234ee8bd374ac8c29f4fd37a81c74a0e507d60","size":675,"data":"","first_seen":"2026-08-28T05:09:58.45348Z","last_seen":"2026-09-01T20:54:52.838291Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/button-BUFP4tSt.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"68f68075d4f1053bc6888c4b47f5a132","sha1":"66fa53a77dc64382ad4456e33d905e3db3b399d6","sha256":"b3f25c88f2026ec3b7df0d783ed62a6c1e4dc6ee364c0095e812d9c2eddcbf42","sha512":"5740ad8a5ae86af3b1cb324025ca578071c9373438166760365abe11b757bab388877c846d70413930a554b944867d771cf850b4d2492d993e91e26b71d594bf","ssdeep":"","tlshash":"cb219315bcba0234131b005b123de062784425bfa77738d482fa8cb503dccae906fa45","size":1170,"data":"","first_seen":"2026-08-28T05:09:58.794414Z","last_seen":"2026-09-01T20:54:52.709691Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/footer-container-BXa15xDK.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2633b80292bd28cf387e00123d8a169","sha1":"d3cdc1665e98cd8a9f6cc73af0eea00ac6bf79a4","sha256":"1a748d09f07458b1b9b568103d895f18bf3fc3ee74e8a92346e442ac02a9155a","sha512":"60de6d3dbba721dd2e64930b9c1d7e78cecd207be61fe4b6db93c26db3a91688056edcc5cfb0b5fd8b12808112c5fd2b502d29a60ec3614a85e68abc4b2557c5","ssdeep":"96:aIm2POP3eHUQghjO7ytZtt/NDEoXQrwrCoHSTRYuxTTqyzwT:aRoOPgUQgIepJNTQrwejYuFqyzw","tlshash":"f3c10a33ea1086715a6bcdf9f126e1b08a3be16397d0d7b4e1ee47358385278c40aa47","size":5955,"data":"","first_seen":"2026-09-01T20:26:35.149494Z","last_seen":"2026-09-01T20:54:52.600884Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f44e71a9e2bc965b05d8567d4fed70fe","sha1":"90857fdd893a704e5e120e021a72d12e58b5d1c4","sha256":"8787e5db8acb2c8079458e86b9d443a68ad35bc7360c3798b2b453094c599123","sha512":"c61c72df0fc62a1fb7e017a041e456af531b2cc82b0dc7293d5c8de4d91eef74439707de1534747daf027888fe7ce46e43d9113da2e6fbfbabc219d240e5b5e3","ssdeep":"","tlshash":"b14196327e46d8b809de28adc62f334afcb41a1c8511a090a650fe913cb9f33956355f","size":2341,"data":"","first_seen":"2026-09-01T20:54:52.908697Z","last_seen":"2026-09-01T20:54:52.908697Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/search-BVy6MC62.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4bcd30e9040e3f0ad17a617b56516951","sha1":"01d7f2192409a5abcf91bdf1772734a2d874839f","sha256":"c73f3f4b7c9b6c42bf89b8f7e6bdbebd32890cf96a2565b76cae001301a183c0","sha512":"7bca519b8eb056abce0003fd92798065bcfed65f4b5efaa9c810f31805205bb874fa3b3e02614950f94d511a2abd88f24717d04e2514465f0cde7552808c7d62","ssdeep":"","tlshash":"69f0ebb22168e0bc0a5f0270d63c28c7431839bcb70d84c8e36ea229888ae70ed4b520","size":574,"data":"","first_seen":"2026-08-28T05:09:58.716643Z","last_seen":"2026-09-01T20:54:52.75565Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/socket-io-adapter-C69REO0G.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a0df4f6fe1a0cfb1588764ea7333fb1","sha1":"d9f297cfa50fa9fabab8b1c5414e091b82087e07","sha256":"7a8a3f9259617e56d12b6f3b630987865603f1e1b4979ca87c7d2fbd071c6118","sha512":"cb72a641ac15095a0889f0936ac4536e90b21919a2b6c6051aaf1cb5084e58a58c858726d7bc05edc14fe0e0b40d7e26b3b39b46ae08d619ebede2f2afe6588e","ssdeep":"","tlshash":"1611bdc2227662b93bbf15ee685090406500aab46781838d3b1c5fe1d03f5d4e59bfb6","size":979,"data":"","first_seen":"2026-08-26T15:23:23.997053Z","last_seen":"2026-09-02T03:21:21.881495Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"debug","text":"[boot] successmap[actor:server1.conn0.watcher14.process7//obj80 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[index 755 cda-redirect] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://1wfqxn.life/","line_number":163,"column_number":2242},{"level":"info","text":"Saved partner infovisit_domain1wfqxn.life","filename":"https://1wfqxn.life/resources/v1/app/assets/logger-M1XavGiO.js","line_number":30,"column_number":27789},{"level":"info","text":"Saved partner infosession_visit_domain1wfqxn.life","filename":"https://1wfqxn.life/resources/v1/app/assets/logger-M1XavGiO.js","line_number":30,"column_number":27789},{"level":"warn","text":"(module fortune-wheel) useModule can't be used inside init function.","filename":"https://1wfqxn.life/resources/v1/app/assets/plugin-server-updates-CIs3ZXCp.js","line_number":1,"column_number":566},{"level":"warn","text":"(module fortune-wheel) useModule can't be used inside init function.","filename":"https://1wfqxn.life/resources/v1/app/assets/plugin-server-updates-CIs3ZXCp.js","line_number":1,"column_number":566},{"level":"warn","text":"(module fortune-wheel) useModule can't be used inside init function.","filename":"https://1wfqxn.life/resources/v1/app/assets/plugin-server-updates-CIs3ZXCp.js","line_number":1,"column_number":566},{"level":"warn","text":"(module fortune-wheel) useModule can't be used inside init function.","filename":"https://1wfqxn.life/resources/v1/app/assets/plugin-server-updates-CIs3ZXCp.js","line_number":1,"column_number":566},{"level":"warn","text":"(module fortune-wheel) useModule can't be used inside init function.","filename":"https://1wfqxn.life/resources/v1/app/assets/plugin-server-updates-CIs3ZXCp.js","line_number":1,"column_number":566},{"level":"warn","text":"(module bonus) useModule can't be used inside init function.","filename":"https://1wfqxn.life/resources/v1/app/assets/plugin-server-updates-CIs3ZXCp.js","line_number":1,"column_number":566},{"level":"warn","text":"(module layout) useModule can't be used inside init function.","filename":"https://1wfqxn.life/resources/v1/app/assets/plugin-server-updates-CIs3ZXCp.js","line_number":1,"column_number":566},{"level":"warn","text":"(module tournaments) useModule can't be used inside init function.","filename":"https://1wfqxn.life/resources/v1/app/assets/plugin-server-updates-CIs3ZXCp.js","line_number":1,"column_number":566},{"level":"log","text":"\u001b[94m[info][analytics]map[actor:server1.conn0.watcher14.process7//obj348 class:Object extensible:true frozen:false isError:false ownPropertyLength:15 preview:map[kind:Object ownProperties:map[client_event_time:map[configurable:true enumerable:true value:2026-09-01T20:53:56.380 writable:true] client_event_time_utc:map[configurable:true enumerable:true value:2026-09-01T20:53:56.380 writable:true] client_time_zone:map[configurable:true enumerable:true value:UTC writable:true] country:map[configurable:true enumerable:true value:Norway writable:true] custom_url:map[configurable:true enumerable:true value:https://1wfqxn.life/ writable:true] device_type:map[configurable:true enumerable:true value:desktop writable:true] event:map[configurable:true enumerable:true value:send_pageview_events writable:true] eventCat:map[configurable:true enumerable:true value:page writable:true] eventName:map[configurable:true enumerable:true value:view writable:true] hash:map[configurable:true enumerable:true value:map[type:undefined] writable:true]] ownPropertiesLength:15] sealed:false type:object]","filename":"https://1wfqxn.life/resources/v1/app/assets/logger-M1XavGiO.js","line_number":32,"column_number":2430},{"level":"debug","text":"[boot] successmap[actor:server1.conn0.watcher14.process7//obj349 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[index 2418 booted] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","line_number":163,"column_number":2242},{"level":"log","text":"\u001b[94m[info][analytics]map[actor:server1.conn0.watcher14.process7//obj408 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[event:map[configurable:true enumerable:true value:send_fortune_widget_events writable:true] eventCat:map[configurable:true enumerable:true value:fortune_widget writable:true] eventName:map[configurable:true enumerable:true value:view writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://1wfqxn.life/resources/v1/app/assets/logger-M1XavGiO.js","line_number":32,"column_number":2430},{"level":"error","text":"NetworkError when attempting to fetch resource.","filename":"https://1wfqxn.life/resources/v1/app/assets/experiment.esm-BCOmDQQx.js","line_number":1,"column_number":53893},{"level":"log","text":"\u003c---------\u003e","filename":"https://1wfqxn.life/resources/v1/app/assets/logger-M1XavGiO.js","line_number":30,"column_number":32375},{"level":"info","text":"Saved partner infovisit_domain1wfqxn.life","filename":"https://1wfqxn.life/resources/v1/app/assets/logger-M1XavGiO.js","line_number":30,"column_number":27789},{"level":"info","text":"Saved partner infoclick_idfc118dc3-52d1-4272-a893-34b2875f81dc","filename":"https://1wfqxn.life/resources/v1/app/assets/logger-M1XavGiO.js","line_number":30,"column_number":27789},{"level":"info","text":"Saved partner infovisitor-idf8b6e427-3bc5-4fed-9652-9a27a2c2250d","filename":"https://1wfqxn.life/resources/v1/app/assets/logger-M1XavGiO.js","line_number":30,"column_number":27789},{"level":"info","text":"Saved partner infoshould_restore_hashfalse","filename":"https://1wfqxn.life/resources/v1/app/assets/logger-M1XavGiO.js","line_number":30,"column_number":27789},{"level":"error","text":"Amplitude Logger [Error]: NetworkError when attempting to fetch resource.","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12899},{"level":"warn","text":"Amplitude Logger [Warn]: {code: 0, error: \"Status 'failed' provided for 1 events\"}","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12728},{"level":"error","text":"Amplitude Logger [Error]: NetworkError when attempting to fetch resource.","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12899},{"level":"warn","text":"Amplitude Logger [Warn]: {code: 0, error: \"Status 'failed' provided for 1 events\"}","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12728},{"level":"error","text":"Amplitude Logger [Error]: NetworkError when attempting to fetch resource.","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12899},{"level":"warn","text":"Amplitude Logger [Warn]: {code: 0, error: \"Status 'failed' provided for 1 events\"}","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12728},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj495 class:Object extensible:true frozen:false isError:false ownPropertyLength:14 preview:map[kind:Object ownProperties:map[build_version:map[configurable:true enumerable:true value:0.4051.0 writable:true] client_time_zone:map[configurable:true enumerable:true value:UTC writable:true] domain:map[configurable:true enumerable:true value:1wfqxn.life writable:true] geo:map[configurable:true enumerable:true value:NO writable:true] gtm_container_id:map[configurable:true enumerable:true value:GTM-KGKQDC7 writable:true] gtm_container_version:map[configurable:true enumerable:true value:270 writable:true] page_path:map[configurable:true enumerable:true value:/ writable:true] page_url:map[configurable:true enumerable:true value:https://1wfqxn.life/ writable:true] redesign:map[configurable:true enumerable:true value:redesign writable:true] user_id:map[configurable:true enumerable:true value:map[type:null] writable:true]] ownPropertiesLength:14] sealed:false type:object]","filename":"https://1wfqxn.life/ line 892 \u003e injectedScript","line_number":3,"column_number":321},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj503 class:Object extensible:true frozen:false isError:false ownPropertyLength:15 preview:map[kind:Object ownProperties:map[banner_name:map[configurable:true enumerable:true value:appbanner writable:true] client_time_zone:map[configurable:true enumerable:true value:UTC writable:true] domain:map[configurable:true enumerable:true value:1wfqxn.life writable:true] geo:map[configurable:true enumerable:true value:NO writable:true] gtm_container_id:map[configurable:true enumerable:true value:GTM-KGKQDC7 writable:true] gtm_container_version:map[configurable:true enumerable:true value:270 writable:true] page_path:map[configurable:true enumerable:true value:/ writable:true] page_url:map[configurable:true enumerable:true value:https://1wfqxn.life/ writable:true] redesign:map[configurable:true enumerable:true value:redesign writable:true] user_id:map[configurable:true enumerable:true value:map[type:null] writable:true]] ownPropertiesLength:15] sealed:false type:object]","filename":"https://1wfqxn.life/ line 892 \u003e injectedScript","line_number":3,"column_number":321},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj511 class:Object extensible:true frozen:false isError:false ownPropertyLength:15 preview:map[kind:Object ownProperties:map[banner_name:map[configurable:true enumerable:true value:freemoney writable:true] client_time_zone:map[configurable:true enumerable:true value:UTC writable:true] domain:map[configurable:true enumerable:true value:1wfqxn.life writable:true] geo:map[configurable:true enumerable:true value:NO writable:true] gtm_container_id:map[configurable:true enumerable:true value:GTM-KGKQDC7 writable:true] gtm_container_version:map[configurable:true enumerable:true value:270 writable:true] page_path:map[configurable:true enumerable:true value:/ writable:true] page_url:map[configurable:true enumerable:true value:https://1wfqxn.life/ writable:true] redesign:map[configurable:true enumerable:true value:redesign writable:true] user_id:map[configurable:true enumerable:true value:map[type:null] writable:true]] ownPropertiesLength:15] sealed:false type:object]","filename":"https://1wfqxn.life/ line 892 \u003e injectedScript","line_number":3,"column_number":321},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj519 class:Object extensible:true frozen:false isError:false ownPropertyLength:21 preview:map[kind:Object ownProperties:map[banners_load_time:map[configurable:true enumerable:true value:2886 writable:true] config_ready_time:map[configurable:true enumerable:true value:1549 writable:true] geo:map[configurable:true enumerable:true value:NO writable:true] is_mobile:map[configurable:true enumerable:true value:false writable:true] lang_load_time:map[configurable:true enumerable:true value:2250 writable:true] page_load_time:map[configurable:true enumerable:true value:2413 writable:true] redesign:map[configurable:true enumerable:true value:redesign writable:true] token_ready_time:map[configurable:true enumerable:true value:2250 writable:true] url:map[configurable:true enumerable:true value:https://1wfqxn.life/ writable:true] user_id:map[configurable:true enumerable:true value:map[type:null] writable:true]] ownPropertiesLength:21] sealed:false type:object]","filename":"https://1wfqxn.life/ line 892 \u003e injectedScript","line_number":3,"column_number":321},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj527 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[category_name:map[configurable:true enumerable:true value:1win-games writable:true] category_slug:map[configurable:true enumerable:true value:1win-games writable:true] game_id_kit:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj528 class:Array extensible:true frozen:false isError:false ownPropertyLength:8 preview:map[kind:ArrayLike length:7] sealed:false type:object] writable:true] geo:map[configurable:true enumerable:true value:NO writable:true] page_path:map[configurable:true enumerable:true value:/ writable:true] page_url:map[configurable:true enumerable:true value:https://1wfqxn.life/ writable:true] position_index_kit:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj529 class:Array extensible:true frozen:false isError:false ownPropertyLength:8 preview:map[kind:ArrayLike length:7] sealed:false type:object] writable:true] redesign:map[configurable:true enumerable:true value:redesign writable:true] user_id:map[configurable:true enumerable:true value:map[type:null] writable:true] vertical_index:map[configurable:true enumerable:true value:0 writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://1wfqxn.life/ line 892 \u003e injectedScript","line_number":3,"column_number":321},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj537 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[category_name:map[configurable:true enumerable:true value:all-games writable:true] category_slug:map[configurable:true enumerable:true value:all-games writable:true] game_id_kit:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj538 class:Array extensible:true frozen:false isError:false ownPropertyLength:8 preview:map[kind:ArrayLike length:7] sealed:false type:object] writable:true] geo:map[configurable:true enumerable:true value:NO writable:true] page_path:map[configurable:true enumerable:true value:/ writable:true] page_url:map[configurable:true enumerable:true value:https://1wfqxn.life/ writable:true] position_index_kit:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj539 class:Array extensible:true frozen:false isError:false ownPropertyLength:8 preview:map[kind:ArrayLike length:7] sealed:false type:object] writable:true] redesign:map[configurable:true enumerable:true value:redesign writable:true] user_id:map[configurable:true enumerable:true value:map[type:null] writable:true] vertical_index:map[configurable:true enumerable:true value:1 writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://1wfqxn.life/ line 892 \u003e injectedScript","line_number":3,"column_number":321},{"level":"error","text":"Amplitude Logger [Error]: NetworkError when attempting to fetch resource.","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12899},{"level":"warn","text":"Amplitude Logger [Warn]: {code: 0, error: \"Status 'failed' provided for 15 events\"}","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12728},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12899},{"level":"error","text":"Amplitude Logger [Error]: NetworkError when attempting to fetch resource.","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12899},{"level":"warn","text":"Amplitude Logger [Warn]: {code: 0, error: \"Status 'failed' provided for 14 events\"}","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12728},{"level":"error","text":"Amplitude Logger [Error]: NetworkError when attempting to fetch resource.","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12899},{"level":"warn","text":"Amplitude Logger [Warn]: {code: 0, error: \"Status 'failed' provided for 14 events\"}","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12728},{"level":"error","text":"Amplitude Logger [Error]: NetworkError when attempting to fetch resource.","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12899},{"level":"warn","text":"Amplitude Logger [Warn]: {code: 0, error: \"Status 'failed' provided for 14 events\"}","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12728},{"level":"error","text":"Amplitude Logger [Error]: NetworkError when attempting to fetch resource.","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12899},{"level":"warn","text":"Amplitude Logger [Warn]: {code: 0, error: \"Status 'failed' provided for 14 events\"}","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12728},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12899},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12899},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12899},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12899},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12899},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12899},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12899},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12899},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12899},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12899},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12899},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12899},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12899},{"level":"error","text":"Amplitude Logger [Error]: Event rejected due to exceeded retry count","filename":"https://1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","line_number":3,"column_number":12899}]},"http":[{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-BfvH0C8e.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.891Z","timestamp":1788296035891,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-BfvH0C8e.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"d95fb1fa755ceb09951e29b2c44fc8db\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 18116\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0590156b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5598,"size_decoded":3321,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4520)","md5":"d95fb1fa755ceb09951e29b2c44fc8db","sha1":"dbace59b89fb8cf5779bf433c98634f1e15f251e","sha256":"a73f343c73657b1d5c92c41a1681f24d5bfc9d45c04ee1bf3097f46e8488908c","sha512":"f6c39fce4da3a55bb854061261b14f14f24724b25f17412c9df19106b060d4fc75a63dffa4e3789e5411b9a7fa016d5df7b290251fcc1a91909a233504db3152","ssdeep":"96:j6VINQF3XqPafVPdS5jLRVtelIJ0/ytYPjZFADOaSJ6yd+GYj80bBZvbEBDHFEvt:mGE3Eafl05jLRjelk0/9rZFADOaSJ6yU","tlshash":"1ac1d445798d19700bec0ea5fd3619d081e51bb1e104c48cf9bf4f7e2281da08aaaf78","first_seen":"2026-09-01T20:26:35.121412Z","last_seen":"2026-09-01T20:54:52.5753Z","times_seen":5,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/cup-BLgxx0Ku.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.979Z","timestamp":1788296035979,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/cup-BLgxx0Ku.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"eacb8923a2fce4062f02ea66f5ea9d3c\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0ea4d56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":813,"size_decoded":980,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (812)","md5":"eacb8923a2fce4062f02ea66f5ea9d3c","sha1":"76b018f016b4b0f7024fa0b542928761475eda76","sha256":"d5528a8567f8d14870d08572435291a45a9ada243e3a3e1f453074546cd1ae38","sha512":"0ad67bff09d41a26eb0850799ec1279020888cd496006c1f09c547b0a14c276a5b7e7ead8f94550bd8c69b0dee64d28a443b00a0fafb9f654a6068a0d762d70e","ssdeep":"","tlshash":"c801bdae3729a0ed961ee80ece29848d934ea8f5371691c40d4ecfb6070b4d1ea07930","first_seen":"2026-08-28T05:09:58.537298Z","last_seen":"2026-09-01T20:54:52.576875Z","times_seen":34,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-DnBibYSk.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.400Z","timestamp":1788296036400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-DnBibYSk.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/resources/v1/app/assets/logger-M1XavGiO.js\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"fea356ad1f099eaff7db5ed74d7a7f78\"\r\nlast-modified: Thu, 23 Jul 2026 14:54:23 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 1294732\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad38e0e56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41655,"size_decoded":14478,"mime_type":"application/javascript","magic":"data","md5":"fea356ad1f099eaff7db5ed74d7a7f78","sha1":"89cd8f5c5b7a5dc776a54d2cb31b2af53438974f","sha256":"ff5161666f6a5901abd06ae1a65b89ab85c50de034f552c97fde3ed5400b3926","sha512":"2642bdf0d3fdad4181fcbbdd3da8d81a80f2b8de51e1ddc0612acca6c6c54c0cdd675bd3f854c04c1fa270c59c234a2c57759b0541d5786fc9d0fbd0ba9e200b","ssdeep":"768:yFXmGuvn67MGwb/yH81S6/wyro3PlepRpieIf/P9YNzdT/8CtmvPgRD52iJ9zyvx:v6MSh8Ax","tlshash":"8413d9c4b251506683d2a1a380b50203f32995547409859cbb2ceeffad7eeca7277f76","first_seen":"2026-06-08T06:00:00.556456Z","last_seen":"2026-09-02T23:44:25.285887Z","times_seen":699,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-game-sections-hYGr0d6r.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.573Z","timestamp":1788296036573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-game-sections-hYGr0d6r.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"f94895091a4c98882ae82ac9f6e14a9b\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:41 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 18114\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad49f8556b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2388,"size_decoded":1813,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2387)","md5":"f94895091a4c98882ae82ac9f6e14a9b","sha1":"ed6680e74497d271de5784590cea3178d5b4c0d0","sha256":"ddd2ee74759154b4e0d0df7b03204d3527eb4c9290a72218714b774b3b38b367","sha512":"0906670cf2b66522f383393165c56789623c7a98d733e0afbb573b98f30d6819e8dce93f109861374334c635524de4aedc105c1be97d5d699eea52dc7e616150","ssdeep":"","tlshash":"4041d712620371779937ecc4e81824d595a1a296727bcfd095bf0aa8060bac8d0fbf2d","first_seen":"2026-09-01T20:26:35.046487Z","last_seen":"2026-09-01T20:54:52.579517Z","times_seen":5,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/shared/images/languages/en-001.svg","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.775Z","timestamp":1788296036775,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /resources/v1/shared/images/languages/en-001.svg HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T01:18:14.47199Z","times_seen":18246362,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/giveaway-PCT2Cg-Y.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.627Z","timestamp":1788296036627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/giveaway-PCT2Cg-Y.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"05c2055391df558e67a815e8d310ab27\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 18114\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad4eff356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12509,"size_decoded":5268,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (9504)","md5":"05c2055391df558e67a815e8d310ab27","sha1":"68bc3c8b71f97821031c22a13b1cabd2596e0858","sha256":"50656898e83be4245120382a94f0036cc0798b48182f591434da8232216b0fb8","sha512":"6c00f17ef989226ab1bb329a70951ef381969c91fa052cdfd556a7e3d2f30c3a630ba88578794c1ad7c29bdb5ec1d22f968ec4a710b47a390cdf80e7fc21340d","ssdeep":"192:cYs3AvZvrc4qVpzLdaMC5IWMqhgtaMJRUZvFtQ575/5n5K5J56P67kXTf5+5Y56W:cYsQBrUpzLgMCz+ZUFFmG9ZuuXFLO","tlshash":"6842a411bc880da503ad4ec8ee2650e081e44731966cc4bdfabb4bbd7248c588da9e79","first_seen":"2026-09-01T20:26:35.066419Z","last_seen":"2026-09-01T20:54:52.581981Z","times_seen":5,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/api/translations/v1/frontend/bonus.bonuses.banner/en-001.json?v=0.4051.0","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.787Z","timestamp":1788296036787,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /api/translations/v1/frontend/bonus.bonuses.banner/en-001.json?v=0.4051.0 HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nContent-Type: application/json\r\nTraceparent: 00-a89ba894a4642ff2db3785be07592c7c-c6d2218fa9551ac6-00\r\npage-view-id: a89ba894a4642ff2db3785be07592c7c\r\nX-Origin: 1wfqxn.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T01:18:14.47199Z","times_seen":18246362,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/error-captured.vue_vue_type_script_setup_true_lang-CAKKD8xl.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.835Z","timestamp":1788296034835,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/error-captured.vue_vue_type_script_setup_true_lang-CAKKD8xl.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 17 Jul 2026 09:37:32 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 1814130\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"4d175c336047130f86c8bfbba635e8b9\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca5f7256b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":228,"size_decoded":662,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"4d175c336047130f86c8bfbba635e8b9","sha1":"e5548a2e85d42dd0d4ba9c14c6e0294b48bbb15f","sha256":"3a856db98850bc4dea6e41a05dbad825c8aa0b95d43d329566c0f36b861a1a09","sha512":"bc2887cc063e9ffd873da455eddd366f4ef4c93efdbad0e31b1ac6059004adbd295061f6eefe194357cc71cabb21bd6ca2750c21a0e847e21ccf387e82871ee7","ssdeep":"","tlshash":"e1d023187d97d5764d50068d5d36593088ccfdea1637d4c25141149b370c441ce1765c","first_seen":"2026-05-24T17:55:17.39424Z","last_seen":"2026-09-02T23:44:25.357958Z","times_seen":454,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/switch-DycKWOZa.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.908Z","timestamp":1788296035908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/switch-DycKWOZa.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"9f0e2c4c177ee16ff6b9c14948668684\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640186\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0694a56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4635,"size_decoded":2124,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3338)","md5":"9f0e2c4c177ee16ff6b9c14948668684","sha1":"7547c9e7debda50a906fb69fbadc4cd907c5811c","sha256":"ba7bfae5f92c416b2686f232b13a4aca190f0fb6c48950afee972b0447c5342d","sha512":"5d1b74e1ecacb928b2d44a9b1a04db135e4900ac48b5de263850b4bbc24bc9469416f836676471543aafd44438898c7204e08bc349ea2f7977593af2c15c7a43","ssdeep":"48:4dgC2rBUdNJ9GD6eY+Z1J5KTQAyvrfgeL+NxXEzk0/h5/mGpiCGhSQf8ZQ93wqlG:4tuBUdL9GV5zvCEzCCGq6NJVCw4","tlshash":"d3a152777350c071fe322215938cd08de498623a0c1d9eb4f5df912a8be2bf16936a17","first_seen":"2026-08-26T15:23:24.211006Z","last_seen":"2026-09-01T20:54:52.584084Z","times_seen":40,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/refresh-CBRSj6--.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.918Z","timestamp":1788296035918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/refresh-CBRSj6--.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"c89a0439900e6c40a057e62cb154d5bb\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0797256b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":636,"size_decoded":891,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (635)","md5":"c89a0439900e6c40a057e62cb154d5bb","sha1":"ad80793248f354d06396c809617cd73199a45ba2","sha256":"57134802f0a891a0761c460b05ecf1fdd1b21aaaca257ec3c451b3aef864f692","sha512":"5ff4f7d2993e5495adb86a3d7a34dd1c9bd4e427d84600a72c6a837c1e24968a73548ec4d8e22038b47b7698e297d014fadb67e12b29b70ebd1cda577f2fc405","ssdeep":"","tlshash":"26f07dfe274cb2bc859b48584a246cc25f1e65f9b78f56d28e1fc273c272250d577024","first_seen":"2026-08-28T05:09:58.451688Z","last_seen":"2026-09-01T20:54:52.585114Z","times_seen":34,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-PFDisf9Y.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.633Z","timestamp":1788296036633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-PFDisf9Y.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453646\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"3aebaa649e8f5933969b33e69c6d4834\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad4f80556b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":788,"size_decoded":845,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (787)","md5":"3aebaa649e8f5933969b33e69c6d4834","sha1":"1ad1edebbe916a142ef28a8f1750f99c1ade7b97","sha256":"53b39c6c5fc6997df5fa54187954f849e781f300d4213cdc3d8c81d3c10a2551","sha512":"7a7582b00262d4442873da6e9250efb7ca744b6d192cd144ff9401447fd96841e9a5cdb54a63687a27385f7d9bbb7f005fba78280a605865da65a883b81f88d1","ssdeep":"","tlshash":"4601f508e5f896b8c9adc0dba61144a3e5b031c6fa34d8d447fa2d689b805c253bad48","first_seen":"2026-08-28T05:09:58.438718Z","last_seen":"2026-09-01T20:54:52.586087Z","times_seen":32,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-BkZBUjIo.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.852Z","timestamp":1788296034852,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-BkZBUjIo.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 23 Jul 2026 14:54:23 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 2245263\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"9288b3bff163efbdde5108bb632467cc\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca5f8456b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":524,"size_decoded":857,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (523)","md5":"9288b3bff163efbdde5108bb632467cc","sha1":"c758e81d560d37a43ae6cd198c743056632e2ead","sha256":"31da4c8eda95166c4263fdbe22ffc5cd86a8202a83a8fba453641b6df87fdb0b","sha512":"94622ad5c1381008c2fdb806e6ae89394e427a3153b0828a9535eddfb2ad8eb0ee2b7d6a74d7898c746518a4b04a9964857d8df0f6028a860853bb812b9f115f","ssdeep":"","tlshash":"fdf0753935f5408043b528fd40051131ea331a987c0df1d1f30c09bb9f5404085f39ea","first_seen":"2026-04-02T00:03:41.742429Z","last_seen":"2026-09-02T23:44:25.341418Z","times_seen":1118,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.123Z","timestamp":1788296035123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/e694063b5082/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=UzbO4kJKVGsSmLPyyj5XAYqOnWZzVvznocTqp.dXqkM-1788296035.1265976-1.0.1.1-9QKZzWbRswoUXs4uuqKUOBHPJV5V.IB1plP6JrPyWUY2S38v2__sns1JPXzKBMF3br9Gep36lPg9gx.s48rMSPm.1KU7WhvE8fJOVftmQH1JiT29Hj07sq_hmKN19wvaut24LuY42GsHqficIZjhtQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=1wfqxn.life; Expires=Tue, 01 Sep 2026 21:23:55 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3472acb892756b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"UzbO4kJKVGsSmLPyyj5XAYqOnWZzVvznocTqp.dXqkM-1788296035.1265976-1.0.1.1-9QKZzWbRswoUXs4uuqKUOBHPJV5V.IB1plP6JrPyWUY2S38v2__sns1JPXzKBMF3br9Gep36lPg9gx.s48rMSPm.1KU7WhvE8fJOVftmQH1JiT29Hj07sq_hmKN19wvaut24LuY42GsHqficIZjhtQ","quoted":false,"path":"/","domain":"1wfqxn.life","expires":"2026-09-01T21:23:55Z","raw_expires":"Tue, 01 Sep 2026 21:23:55 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=UzbO4kJKVGsSmLPyyj5XAYqOnWZzVvznocTqp.dXqkM-1788296035.1265976-1.0.1.1-9QKZzWbRswoUXs4uuqKUOBHPJV5V.IB1plP6JrPyWUY2S38v2__sns1JPXzKBMF3br9Gep36lPg9gx.s48rMSPm.1KU7WhvE8fJOVftmQH1JiT29Hj07sq_hmKN19wvaut24LuY42GsHqficIZjhtQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=1wfqxn.life; Expires=Tue, 01 Sep 2026 21:23:55 GMT"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T01:18:14.47199Z","times_seen":18246362,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/plain/favicons/favicon-v3.svg","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.157Z","timestamp":1788296035157,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/plain/favicons/favicon-v3.svg HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=UzbO4kJKVGsSmLPyyj5XAYqOnWZzVvznocTqp.dXqkM-1788296035.1265976-1.0.1.1-9QKZzWbRswoUXs4uuqKUOBHPJV5V.IB1plP6JrPyWUY2S38v2__sns1JPXzKBMF3br9Gep36lPg9gx.s48rMSPm.1KU7WhvE8fJOVftmQH1JiT29Hj07sq_hmKN19wvaut24LuY42GsHqficIZjhtQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"29e4609d107da142902d5c80582b341f\"\r\nlast-modified: Mon, 22 Sep 2025 16:18:20 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=6,i=?0\r\nage: 2158608\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472acbb98256b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8936,"size_decoded":3903,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"29e4609d107da142902d5c80582b341f","sha1":"30b7fbb10d13ff8b17c7aed4e61e1872905cc724","sha256":"0cef87b78eed9c7e2b91ccfe1ecfd5fbad337cbb61e5d99396e1056600e84a69","sha512":"d872092470557a3f0dd85f1eecb6bd0e796f4d1232940f544b97332536e2c0a4b9865331db0a44e8c730ee9d24fb9e43fe0ace17ce91bde9dfc0b701aa05ac3d","ssdeep":"192:NwE1pIypREtvjdn4DsZNwjNiSMx3hJ+7u3cyb8/tNgEUC4h1bV/L:NwE1pIl9iDsAjNAU7uB1Ey31L","tlshash":"9b02849173b991fcf10997f88306ac31af66afe53532c91987e52c16d49083c297adcb","first_seen":"2025-07-10T00:15:29.49784Z","last_seen":"2026-09-02T23:44:25.53226Z","times_seen":4531,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/picture-v2-BOL7kWRq.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.819Z","timestamp":1788296034819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/picture-v2-BOL7kWRq.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"71d2b86007c17a568ccae28d4be3b3fc\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:26 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640185\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac9ae7b56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3233,"size_decoded":2086,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2670)","md5":"71d2b86007c17a568ccae28d4be3b3fc","sha1":"a65eaab3ec90422b8e4334efcaa5f0006609c95a","sha256":"c763afa6cf74404ca6392ac38ee230a0563b183e8ef0bbee027f9a9ec66b6d87","sha512":"d0c61f09250568fd88cbbbd13be0be20996a92ff98415c82218184587bb77bda29fc79fd2efa4256795e483009ee5dd4d38179e372fb3d47fe6ff2ef27c94c28","ssdeep":"","tlshash":"ef61b965aeddc072433594e4613a9310f4343d792835d8d4e2be8c3f5b6491ad03b726","first_seen":"2026-08-26T15:23:24.002576Z","last_seen":"2026-09-02T03:21:21.903543Z","times_seen":43,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/arrow-forward-BcqAeZQr.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.872Z","timestamp":1788296035872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/arrow-forward-BcqAeZQr.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"70ce560038bcdb3009e1cc9ab069f0bb\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad028bc56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":441,"size_decoded":803,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (440)","md5":"70ce560038bcdb3009e1cc9ab069f0bb","sha1":"4199e0d0d59213385aad6976072e6a11d4ea0d05","sha256":"f8d4677f0b851dd5aba1309ae5aa0ebe760d84cbc817e9df63d04872fb5db9eb","sha512":"555475795b1f49f6ce3b6ba7b639755edc7b1a91124d02ca6913b9bd5f7e5e9407c3e175baadb2ff84c230b2ff3f4fb334fd4ae557453de92640bb3a1c86fa35","ssdeep":"","tlshash":"46f05c7c214f61bc011742a4c6ab3d150709aaf737c584f50a0fda3a42225c4f94b17a","first_seen":"2026-08-28T05:09:58.446854Z","last_seen":"2026-09-01T20:54:52.590303Z","times_seen":34,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-ColKqq_f.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.887Z","timestamp":1788296035887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-ColKqq_f.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"cb486e6890e9d73a137d95e66dae2976\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nage: 18116\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad048fe56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9985,"size_decoded":4640,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (7599)","md5":"cb486e6890e9d73a137d95e66dae2976","sha1":"7054ecd2add1422241ba7d2ad9f13c6102e2925b","sha256":"fb6b24aef19974d5432bb71475b9e1e2714d965b986c518ec03580bc7d20796b","sha512":"98e38ff6ac52802fdf6527ce1a14a830084e01d18379d9290eafbdc0b82e30f7bce2aeda858fe3fc5df479c41b3a61f72fd1af70830b7344b8f82e2144188e99","ssdeep":"192:xICXYyaxMLRPfWItAmqJcVu6bFaeFGH9OZIH/1yqMuwIHlXHkHXIHCd+OoX:xJDacRPfWCDqJcVpFaeFGHwZIH/8qM9u","tlshash":"ba22b606ca800ab4517e0f8cdd9626b049f55f42f610c9adbf7a1dbc7a8185ac162fb6","first_seen":"2026-09-01T20:26:35.101975Z","last_seen":"2026-09-01T20:54:52.591883Z","times_seen":5,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index--nwlGUcV.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.952Z","timestamp":1788296035952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index--nwlGUcV.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"1c2061c01b805ef40e4a9d3d3ca732ea\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0b9f256b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4650,"size_decoded":2592,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3456)","md5":"1c2061c01b805ef40e4a9d3d3ca732ea","sha1":"864facdf1e80fd8be7e2adadb68973c6bd9b90be","sha256":"fad962af681445b6530695da33545e5be12ab6a6bca16567bc27751f68822e46","sha512":"14c9956508ed908accf981e44020b181625e889f4441d414cb5f5465dc04410771410fbbdc573f4103ce6b621239433f257362c6211e3efc39f85b687377d58e","ssdeep":"96:jib8Pa/QVbUhPRkpoDory3IzR+K7eoZf0/oZuI+tuRP0oASn++pAqO8Uve:XaLRKu3GR+KaRoZN+0Ht++pAqO8UW","tlshash":"9ba1b777e5f4cab901b8dac7eb1114e2c6f016d1f908e8d0a7be4d797e805c981aaf14","first_seen":"2026-08-28T05:09:58.611086Z","last_seen":"2026-09-01T20:54:52.593443Z","times_seen":34,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d21deilz814qgl.cloudfront.net/f1b78e230ab175a48645a2-800x344.webp","fqdn":"d21deilz814qgl.cloudfront.net","domain":"d21deilz814qgl.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.238.66","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:54:03.232Z","timestamp":1788296043232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /f1b78e230ab175a48645a2-800x344.webp HTTP/1.1\r\nHost: d21deilz814qgl.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\ncontent-length: 46752\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Tue, 18 Aug 2026 11:16:49 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-disposition: inline\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 01 Sep 2026 09:14:15 GMT\r\netag: \"965bb4871fe0ccc86af1444fe6c668cb\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nage: 41992\r\nvia: 1.1 183a9e2085d5a9255c6d0724cfd9ec10.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: IqnUnygvJ_yLs3l80FrRyUUYAhR9pdwBXNnGipNzYtE7J8wfLG0Dig==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":46752,"size_decoded":47317,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"965bb4871fe0ccc86af1444fe6c668cb","sha1":"e953fdf4d50540d30f978a1e8f3dc71eae5dd913","sha256":"3677516a47f4179fa3304ad03f147a00dc53d87da02023bb1c5a42d1e363820e","sha512":"87b68d974b7f4c74bc989785879916473ef1858c75fc2cb03388db1a2f6ec0c4d84d68a20b4fecaa1d7ad6ecd166c44070c4117f44cd870b4f73e1cc305e3f56","ssdeep":"768:k/MBggCjc0ee6GGXMwaDyPdpA99x7JtfTo4dqiL5hu83VxL4z3d5AvxF/HH:k/LgCjcfVGgMQjA9fzlldVxgA5dHH","tlshash":"b62302895523dde0872659af5e3519fa435aa909483c58b37cc5d3091ebc43ac8e7cfc","first_seen":"2026-08-26T15:23:24.214564Z","last_seen":"2026-09-01T20:54:52.594855Z","times_seen":15,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":15,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/shared/fonts/inter/InterVariable-latin-ext.woff2","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.591Z","timestamp":1788296034591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/shared/fonts/inter/InterVariable-latin-ext.woff2 HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY\r\nSec-GPC: 1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; cda_status=pass\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 22 Sep 2025 15:36:02 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 2160443\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"ba59b77c516a5b15bccfe67260227423\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac83c8856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85748,"size_decoded":86233,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 85748, version 4.0","md5":"ba59b77c516a5b15bccfe67260227423","sha1":"5a654fd878f64afe61ed7b20a8a2758602c78675","sha256":"0ab79615e89169448921911e649950223796846a7f1062dca013e65dc94ca6ec","sha512":"85e5fbc52f8e0efa5396ae2db2b1ae23c18fe48a661eb4eb3e4b814320edd8e05813e5b8ac8ff4b84d8ffc44763e9973e79a26fa3a6fb7f393c8e568797b7afe","ssdeep":"1536:8+tsATEdsiyyAR78SvTd1N93MqNrQvzGzVLdjwg7IiIH:8AsOxbNl30DH","tlshash":"5c83127479b02402c872ea3b36445193310de1ad53882eca36d72fc5c95da6bd6eef4d","first_seen":"2025-06-23T00:10:28.581602Z","last_seen":"2026-09-02T23:44:25.428632Z","times_seen":4744,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/modal-info-BYLoINVW.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.814Z","timestamp":1788296034814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/modal-info-BYLoINVW.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"cac8d7eb14a4b8234a4a6347bd369776\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac99e6556b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2756,"size_decoded":1804,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1652)","md5":"cac8d7eb14a4b8234a4a6347bd369776","sha1":"75ce8f748b534c48676630f240ac1a51f21504f0","sha256":"ec23d247146b7c5b51f522a6fe61108165b35df30d80981244d6d846d5f821ca","sha512":"0121445716759dac239b22a26a6c334fabf73cf7eaccdb891abb9e75faa551cccb4c1784985c5eaba9f14a016d11bda51c70515ed051fe7997a3a8d6a99a7b2c","ssdeep":"","tlshash":"845196847eb8d3b4647f0417a57fe949610ce52a83377ce48078892c07eaca2835874b","first_seen":"2026-08-28T05:09:58.80356Z","last_seen":"2026-09-02T03:21:21.899059Z","times_seen":37,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/api/FREE-MONEY/v1-bonus-pwa-amount","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.766Z","timestamp":1788296035766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"POST /api/FREE-MONEY/v1-bonus-pwa-amount HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 18\r\nReferer: https://1wfqxn.life/\r\nTraceparent: 00-a89ba894a4642ff2db3785be07592c7c-b12b77cb4df30d7d-00\r\npage-view-id: a89ba894a4642ff2db3785be07592c7c\r\nX-Origin: 1wfqxn.life\r\nOrigin: https://1wfqxn.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"{\"currency\":\"NOK\"}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 29\r\ncache-control: public, max-age=300, must-revalidate\r\nserver: cloudflare\r\nx-trace-id: a89ba894a4642ff2db3785be07592c7c\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: a3472acf8f3156b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29,"size_decoded":423,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b920750c645fa643c8be994f784fe733","sha1":"94a512af77fa6b3d5df806a517720dc3165d279b","sha256":"980fff79d8f448bc205a4fe4f3a7775ee451e390b2b57c4d01a71e3a96e66a7c","sha512":"29ab52aa1856fc7e6b7ef47b8d808ce3022374fe1f5e2ad8bed7cc5da9806e55ab282196c8ee7940f67fd22697015c001fcd6b385e28513ad3ea80b5ea260768","ssdeep":"","tlshash":"8180000b3c00a0aae8002280a83a2e202aaca02b82000208a08e0028aa280023283c0b","first_seen":"2025-07-15T00:18:52.693067Z","last_seen":"2026-09-02T23:44:25.255152Z","times_seen":4307,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/footer-container-BXa15xDK.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.445Z","timestamp":1788296036445,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/footer-container-BXa15xDK.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"c2633b80292bd28cf387e00123d8a169\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nage: 18114\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad3ce6256b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5955,"size_decoded":3125,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4302)","md5":"c2633b80292bd28cf387e00123d8a169","sha1":"d3cdc1665e98cd8a9f6cc73af0eea00ac6bf79a4","sha256":"1a748d09f07458b1b9b568103d895f18bf3fc3ee74e8a92346e442ac02a9155a","sha512":"60de6d3dbba721dd2e64930b9c1d7e78cecd207be61fe4b6db93c26db3a91688056edcc5cfb0b5fd8b12808112c5fd2b502d29a60ec3614a85e68abc4b2557c5","ssdeep":"96:aIm2POP3eHUQghjO7ytZtt/NDEoXQrwrCoHSTRYuxTTqyzwT:aRoOPgUQgIepJNTQrwejYuFqyzw","tlshash":"f3c10a33ea1086715a6bcdf9f126e1b08a3be16397d0d7b4e1ee47358385278c40aa47","first_seen":"2026-09-01T20:26:35.149494Z","last_seen":"2026-09-01T20:54:52.600884Z","times_seen":5,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-category-ab-tests-BwpVEZxz.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.568Z","timestamp":1788296036568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-category-ab-tests-BwpVEZxz.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"46b56a6b960d59887c9dc7b5a3dffe01\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453646\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad48f7956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1069,"size_decoded":1111,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1068)","md5":"46b56a6b960d59887c9dc7b5a3dffe01","sha1":"794d3d2d256b7004f40df51793350f66d7142caa","sha256":"d651cab5d3cd56461aebb66d7f9b3a09b50de4b2c057411fd2da145a7d2a1c35","sha512":"c3e73c8b1381546fe471de32afd5918b39dcbaecfba95ba3774daa56d0fcf45c6019a742cc315f1e0e062a0f07a60963ecafd0cbfaa67364ef43674bae715bac","ssdeep":"","tlshash":"b31175aa301e6c336234d5cb901195b84b1ea3d13573cfe0605d4afbb374d8245ccd59","first_seen":"2026-08-28T05:09:58.731644Z","last_seen":"2026-09-01T20:54:52.601855Z","times_seen":33,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/api/web/v1/sdui/templates/css-variables?h=84ffd3e806606baf\u0026country=NO\u0026subdivision=02","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1wfqxn.life/","date":"2026-09-01T20:53:53.440Z","timestamp":1788296033440,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /api/web/v1/sdui/templates/css-variables?h=84ffd3e806606baf\u0026country=NO\u0026subdivision=02 HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Moz: early hint\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wfqxn.life/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T01:18:14.47199Z","times_seen":18246362,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/progress-ChUIU5Mz.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.988Z","timestamp":1788296035988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/progress-ChUIU5Mz.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"bb33175a9f1782cd692888e83172c2a8\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0ea5856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2168,"size_decoded":1590,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1407)","md5":"bb33175a9f1782cd692888e83172c2a8","sha1":"03eb1cb44a7594e6fbdd5dcfe6a3d357c29b4a0b","sha256":"11aad1de6bc9f6751dc548949218d4ad73aafccdf1c30d8168954909b919d3eb","sha512":"0a5aed0a85b9058eb42eeb52e7c79c9e5b91a5af837c5597609237dd62303cc08d9bbc1bfe70ecf735df3822dc28d2c7ceab01ca6ccdeaf6ba30194c6a0294af","ssdeep":"","tlshash":"a2417781fa74d7b899730c5a5b3a40646208a17d471ff8d8ce69c579c7caae1050dbc6","first_seen":"2026-08-28T05:09:58.664135Z","last_seen":"2026-09-01T20:54:52.602801Z","times_seen":34,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-QfnRMTVY.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.611Z","timestamp":1788296036611,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-QfnRMTVY.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 26 Aug 2026 14:38:18 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 536667\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"df6857e6ce672ebecdf1fb4c8b651dd5\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad4cfcc56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":136,"size_decoded":609,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"df6857e6ce672ebecdf1fb4c8b651dd5","sha1":"2eebb1f2a55b3674b610d127b24ab406006bfe28","sha256":"99d49ed7f2d602c078ce61b2d6e0ec400b16d7e6969750bc01388b85ef547882","sha512":"6f66f0284fec2b01b1626f8c9981eff7d6a2ce632631ad8ad0ca75a64457bd3e2bd2a893e8be9e1f46958b2b5cae5c31a316e6f8a64d3dd9f0fee253535a0b30","ssdeep":"","tlshash":"8ec02b0f4039d13802111ca53770c620bf3494d00b32ba80b959031016d84c6034f002","first_seen":"2026-08-27T02:47:30.995079Z","last_seen":"2026-09-01T20:54:52.603783Z","times_seen":36,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/main-W3tAz5ZB.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.782Z","timestamp":1788296034782,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/main-W3tAz5ZB.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"d96ea8d1c7dec1f31f75e507a2bbb8a8\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:41 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 18116\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac96e1a56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":166045,"size_decoded":42626,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (33709)","md5":"d96ea8d1c7dec1f31f75e507a2bbb8a8","sha1":"97388b10d9104d1cddacce2c04e73cd9d40d0e0a","sha256":"2e9331bbe14a6cc5a7af079839fe2bcfa2e950314c4edc102c3eaccbd85d8af0","sha512":"d3f141e1bd10394c7d1f3777af57d1a457ac51e42f42d16a3352e2521cb8831ba8d702052094e688d33a8f12fcf15f35d62977dc2306edaf87bba1c266f954fb","ssdeep":"1536:tcVNQ4BM+kk16KPltLbh7UwyY1TfeEkkF4hWscREesFieCDsduatOJJ0:t2/HLN7UwyY1TfeEkkGIHGesFie60","tlshash":"04f31930219a6469c1f3cce3b1dd2a133d245565b05ac012e62d1de85efbc67a3e6f3a","first_seen":"2026-09-01T20:26:35.016523Z","last_seen":"2026-09-01T20:54:52.604681Z","times_seen":5,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/badge-deprecated-1BFHje8J.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.829Z","timestamp":1788296034829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/badge-deprecated-1BFHje8J.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"ceadeee008d0a643f18ebed88869cbbe\"\r\nlast-modified: Wed, 26 Aug 2026 14:38:17 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 536757\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca5f6556b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3882,"size_decoded":1754,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2395)","md5":"ceadeee008d0a643f18ebed88869cbbe","sha1":"5cd7bf5bc58690b39fc001a7d5b56669df2d8a8d","sha256":"13f21c25fac275478d8f788ddf49023b9ce07459e2cd7db66d234beed38054f4","sha512":"d9ddf1afb6c449a26629d14427677e56dd548074431beeadf6a52b7fbb6b4f6c10b0620aec91f48372648b831e4ab0e32bfbf3e572e3ec6e440f3f95d985f294","ssdeep":"","tlshash":"2981ce77f19b96a1bf1346bbb90ee075c44814f88b291ff6f295421a13cdefd018a900","first_seen":"2026-08-26T23:17:12.102059Z","last_seen":"2026-09-02T03:21:21.899714Z","times_seen":42,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/api/translations/v1/frontend/common.common/en-001.json?v=0.4051.0","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.671Z","timestamp":1788296035671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /api/translations/v1/frontend/common.common/en-001.json?v=0.4051.0 HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nContent-Type: application/json\r\nTraceparent: 00-a89ba894a4642ff2db3785be07592c7c-71d380199949a441-00\r\npage-view-id: a89ba894a4642ff2db3785be07592c7c\r\nX-Origin: 1wfqxn.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: public, max-age=300, stale-while-revalidate=300, stale-if-error=259200\r\nlast-modified: Tue, 28 Jul 2026 08:40:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nage: 559\r\ncf-cache-status: UPDATING\r\netag: W/\"9bf38d5b8f83de628a525a413b7565b7\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472acefe2656b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"UPDATING\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3540,"size_decoded":1909,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9bf38d5b8f83de628a525a413b7565b7","sha1":"85bbaa026d0ffad3e25fd21704056f1bd4728b58","sha256":"c52877c2b65bba36e4511ca847648ed3d649afc1b6b4c3bf7d6ddc37f6a1994b","sha512":"983d8b38a17dcc376ec4128b607846e7a519aebcefe8b6ba5218bdd4d3a71696a43f5453e97c2cc372b26e5a827c295e671cb31ecbe0db76e314bc56828e92db","ssdeep":"","tlshash":"ca71c95a4634e8af36a6135374c6fc053ea844d75315fc9a6bb4439fb0cb352e61d0e4","first_seen":"2026-07-28T11:58:30.732452Z","last_seen":"2026-09-02T23:44:25.213774Z","times_seen":175,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/main-W3tAz5ZB.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/","date":"2026-09-01T20:53:53.443Z","timestamp":1788296033443,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /resources/v1/app/assets/main-W3tAz5ZB.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Moz: early hint\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wfqxn.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T01:18:14.47199Z","times_seen":18246362,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/control-B-KOIy8J.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.863Z","timestamp":1788296034863,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/control-B-KOIy8J.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"2d455e5e3d4cb6230e9f3849ce558f58\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca5f9e56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13938,"size_decoded":4527,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8448)","md5":"2d455e5e3d4cb6230e9f3849ce558f58","sha1":"0515de5a3453abcf970e3328e1613f82b23879f9","sha256":"f4dbc5212d0deb9517a7d3342068a5e72c1deb3a62abc463e08e895d8d34b368","sha512":"65fe6348455d03f3689bd70a55599fc6cbc1c687c78c5179f36bdef2f21394b3d9bc088721d614ca51c56f848ee767e2b75e4dd71ea100009415134f75fcd4be","ssdeep":"384:sgvgAASkJHv2H1bVSVal9Xu5qAMGArbr+:s0Gq1bgvCGT","tlshash":"dd52b77c6eb07f39cab7c45c7b0ce5268b51d324de1b1686d720b83b47ca4a12263b51","first_seen":"2026-08-28T05:09:58.375338Z","last_seen":"2026-09-01T20:54:52.608062Z","times_seen":36,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/sidebar-banner-promo-CAAMwIu3.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.921Z","timestamp":1788296035921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/sidebar-banner-promo-CAAMwIu3.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"2d84f48197afadfebe3eae232248e01e\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640186\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0898656b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3643,"size_decoded":1804,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2205)","md5":"2d84f48197afadfebe3eae232248e01e","sha1":"0422d854c2bf4420039769095b555e9e37e56bff","sha256":"f5a6fe9130a8fcae4f436796b25bd0063f4acb4ff3582f4e1b94f63a2e1cd8eb","sha512":"db11a0c9f6cf31bf6e580ebf599f7aec3011eaddf5c27038f2b583a9d3164f5bc5e5187e6701641545ba72b07846112f5bb917c578b36cc8ee731cfe26d9a228","ssdeep":"","tlshash":"ee713401ee31b57cb3b9598b354908ea509dbebec034cbcfc179922e15dfae08696345","first_seen":"2026-08-26T15:23:24.239557Z","last_seen":"2026-09-01T20:54:52.609015Z","times_seen":40,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-category-preset-mapping-BCrfY3xl.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.548Z","timestamp":1788296036548,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-category-preset-mapping-BCrfY3xl.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"d2d9a3b05bf93ee2cc3755c7404f0ce3\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:41 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 18114\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad46f4656b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9461,"size_decoded":4447,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8046)","md5":"d2d9a3b05bf93ee2cc3755c7404f0ce3","sha1":"1f4d471a316b119c2d59604162903b71eaad692f","sha256":"869beb6b31ca4a298f456f446028e5b96dcbf07eaf26921e6136215e791ce833","sha512":"b0eb6412211b5948eb8a90e36e9023af9c400952ec3635ce1ad45898ce6fa8cd986d9c1fcf1c8eb136c1a589fca4e35cbc981fe444bc2550441b8c1a1eb01269","ssdeep":"192:luPo4xMz08vpBrstTpbz+xjS4/JKXf6wG0ZTUydSU40Li5bCLW:4PTeBQahJGiwG0FUyVV6","tlshash":"3112f789f91218f608776cdab524b840a620427bd7911ed0d2ffcd350bcaeb5a1ed74a","first_seen":"2026-09-01T20:26:35.025022Z","last_seen":"2026-09-01T20:54:52.611776Z","times_seen":5,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/events-BJrNQYeD.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.555Z","timestamp":1788296036555,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/events-BJrNQYeD.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453646\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"a23f55b23e13299d16b70d6618cc3c07\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad47f5b56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":252,"size_decoded":679,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"a23f55b23e13299d16b70d6618cc3c07","sha1":"c41af9200ac1ef38ce9215adc5543654eb27b1c3","sha256":"6e753cc621fdd877be5783959192eb9c7232160ad78542760506364f8f175443","sha512":"1e5e41c673a9e90787f2548b03972052a03a0cdc2e02af18c92655c77741502deb7f593ca4b0c01d7b8ba1cbd6824e170ce3aef2c349d99fcda3425c31896908","ssdeep":"","tlshash":"e6d0a70ba11983b4045dd4fcf391c863c9b419d2b794c5c0c7eb0f3847d04eb8269e4a","first_seen":"2026-08-28T05:09:58.459001Z","last_seen":"2026-09-01T20:54:52.612692Z","times_seen":32,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/top-events-TkVjTH2g.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.580Z","timestamp":1788296036580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/top-events-TkVjTH2g.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"224326709f3114de206a8b829545c7f3\"\r\nlast-modified: Mon, 31 Aug 2026 14:52:28 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nage: 105772\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad4af8c56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7648,"size_decoded":3572,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7647)","md5":"224326709f3114de206a8b829545c7f3","sha1":"6de152efa720ea7dcd7b12527fa7df346d46e468","sha256":"1db8cbd3b5564d8a832dd0d09dcd959a8124231e701c96fe098dc42fe8d07a53","sha512":"07b60cbbfdbcd14e903e5b7058cb7c93b29c20b925e740a70c2764ad90c8e777d05f7c2ae16074e89ef89ecdecc5699662bab610e6f6c5af4a8c8fbe33765b3b","ssdeep":"96:iB4WjgrPOvFMfvF4Z5sIAyF4lRgFYaSO62fbP6CLSUxWUk/Ka9g889i/4ZlQLV1T:iB49bONMfdU5iWCglSdOUUwDg8/0O1fr","tlshash":"80f10a72f08b6574186e52fde8124890d6b60de6ba54e6e0f3ef4d3907dacc4e12522f","first_seen":"2026-09-01T10:21:12.588294Z","last_seen":"2026-09-01T20:54:52.614207Z","times_seen":6,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/sidebar-dynamic-section-DlBilNCJ.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.608Z","timestamp":1788296036608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/sidebar-dynamic-section-DlBilNCJ.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"5077d72da4c4c1f0e935d6c691bd852d\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453646\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad4cfc556b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5491,"size_decoded":2773,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3940)","md5":"5077d72da4c4c1f0e935d6c691bd852d","sha1":"bc98b5d646a9933307e2839ebad30311045a7bec","sha256":"050c571c77d5b99b6a2d50947910d2f69708837a2ff973a8d9b7c0ea3448c2f9","sha512":"8f6778cf2a65f0ee366a75794a489209c0b4ac1ff5354d08467eba18fe6b4e23c6104343875b4321352fb5155f2b3a4968e0040b286b3b8f6bff86c2c573f3ca","ssdeep":"96:0zUvT3sLxPLY3De6nDp0ua/aeIezp7lysL6+4X53JE4:k6TcLJLY3i6Duua/aReZj94","tlshash":"b9b1ea46f530b574553748f6f69970a0d0245aa913d0cce8d1bd8f10cbe1ea9e5ca7cb","first_seen":"2026-08-28T05:09:58.395892Z","last_seen":"2026-09-01T20:54:52.616214Z","times_seen":32,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-history-favorite-ab-test-DlJtFOXo.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.614Z","timestamp":1788296036614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-history-favorite-ab-test-DlJtFOXo.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453646\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"f98d264ec0c911387400b2ca1ef7ec84\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad4dfd956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":295,"size_decoded":716,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"f98d264ec0c911387400b2ca1ef7ec84","sha1":"5b3a7f7b30da348097256d96e0957b2815b3d443","sha256":"933e92643abb7a2047b5716ddd2e00bbf08e5c4b0ed94b039066e48b07b65328","sha512":"8a33d750166c16a6306c1f960a3bbd5c9c5d7c88ff86790aa74df96f92892324572aeca6adaace705e6e152bb628d5e685c804cdb59008ea4b24cb7a58821bc6","ssdeep":"","tlshash":"a8e02b2fa82556b0074b8cedf114c87692654bd93788dbd1e1cd27384786564c15f807","first_seen":"2026-08-28T05:09:58.770997Z","last_seen":"2026-09-01T20:54:52.617853Z","times_seen":32,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/modal-header-D5bOGTxx.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.811Z","timestamp":1788296034811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/modal-header-D5bOGTxx.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"0f9aa43ac273b5c7965d9579d65c2cc6\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac99e5c56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15581,"size_decoded":4320,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9652)","md5":"0f9aa43ac273b5c7965d9579d65c2cc6","sha1":"2ed229aa18c0153c28fa6bf03c8602a8ef1cda83","sha256":"6d156dabd3cdb55923955d9ecdaa84138d34528806a82636715ada53b0ea501d","sha512":"3d68aadf17b3bdbd57d14f89bff3f97331a7d110450d07b2a703fdb158bd62f455f69522e2b45fbd498b557e18d8fbea9d67e544642c1b221868c9cc900ad9d0","ssdeep":"384:PHwrlO7NPXrQHRDRXR1TFTJTYAPeSWsUo:PHwrlCNPX0HRDRXR1TFTJTYmpWsP","tlshash":"7f6261d5ad3c763cdabe0813f68f9d04668ca43994515df6b97d018f03c14b3a2ea36a","first_seen":"2026-08-28T05:09:58.566682Z","last_seen":"2026-09-02T03:21:21.907062Z","times_seen":37,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/banners-carousel-Bu3LdDBo.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.520Z","timestamp":1788296036520,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/banners-carousel-Bu3LdDBo.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"c79bf071eaf6960ca210f20468c1fe60\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453646\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad44ef856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13345,"size_decoded":4999,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5777)","md5":"c79bf071eaf6960ca210f20468c1fe60","sha1":"539168766cbc9cedd4c2228d0c7cd2ef4af49c95","sha256":"0f61ab1da36abc41fa123610118260bdc165be8d99a049a7f0c2997f9612b918","sha512":"68f1a090dbcb5102d7aea57c55dfa9ea135ab628515d667856c8f129a0a81e13fd59ac48512a303e7bde040d322b4569a140f6fcd23204128c1a3eb8e355d526","ssdeep":"192:ezWQGCQLH63CkMlZnwhdfXhZ+lFdJ66jjSuVHRlJQKqXCaSte+jeHm5JZy:kWQGlLHPZnwhVC7PZJQKqh/+SG5JZy","tlshash":"e852a5106b20483bd5238e6ca644d578b2586471cb839e89d2db6e3dc7fdcf4106e78e","first_seen":"2026-08-28T05:09:58.775123Z","last_seen":"2026-09-01T20:54:52.621457Z","times_seen":33,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/mf/modules/paywidget/bundle/1.82.0/index.es.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.762Z","timestamp":1788296036762,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /resources/v1/mf/modules/paywidget/bundle/1.82.0/index.es.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/resources/v1/app/assets/index-B6UQ53dP.js\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T01:18:14.47199Z","times_seen":18246362,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/api/FREE-MONEY/v2-raffle-getCurrent","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.783Z","timestamp":1788296036783,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /api/FREE-MONEY/v2-raffle-getCurrent HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 40\r\nReferer: https://1wfqxn.life/\r\nTraceparent: 00-a89ba894a4642ff2db3785be07592c7c-6ffc87b80470532e-00\r\npage-view-id: a89ba894a4642ff2db3785be07592c7c\r\nX-Origin: 1wfqxn.life\r\nOrigin: https://1wfqxn.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":40,"data":"{\"currency\":\"NOK\",\"clientLanguage\":\"en\"}"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T01:18:14.47199Z","times_seen":18246362,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/fp.esm-CU1Fjgwn.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.126Z","timestamp":1788296035126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/fp.esm-CU1Fjgwn.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/resources/v1/app/assets/logger-M1XavGiO.js\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"aded6609fefb70bd1b20c1a94964f528\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:25 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 640185\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472acb892d56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37708,"size_decoded":17430,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22278)","md5":"aded6609fefb70bd1b20c1a94964f528","sha1":"9389a4b4ba90424f8116365f38807af6220ac944","sha256":"c3357ca1028cb2b8a9d4a3ae26eb5a150af9664124a134c1f82415674d849a3e","sha512":"da59096c56042daf8325ef450f29d42c061ebfd7d75ff7be6433b790123342dabd761d8006b32a03f64187036dc0cc3fcdc88225fe605ffe500a23b5eb3d667d","ssdeep":"768:rGhcsg9NF/z1l1QB/iBi+7RB6hJg4tNqJWWyxop:rxTi+7RB8J1tNqJWWv","tlshash":"d40308dc7287b078836354b544bf9107b23e3c61641d8902d467d9993cbae6e823bfb9","first_seen":"2026-08-26T15:23:24.323447Z","last_seen":"2026-09-02T03:21:21.909163Z","times_seen":43,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-BipuiGV-.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.878Z","timestamp":1788296035878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-BipuiGV-.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"33c2a77f562f1f25a16b6f632e2b458a\"\r\nlast-modified: Tue, 01 Sep 2026 09:52:08 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nage: 39173\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad048e356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2365,"size_decoded":1750,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1400)","md5":"33c2a77f562f1f25a16b6f632e2b458a","sha1":"3018323a003b9827de98cc41a7025291b7d2130a","sha256":"95f8e5ac8b732ad905e79611fe8631d8f7ba8fbb5d8399174b192c87459c43d1","sha512":"664584851f7f85252ab0b8ba194b0e33069164948450dce9c061bb83ad7e6b440b112b3f7a0e88ddba0a2dbeab413db9cdf64d5a1ca3d262467a3f7f9a836807","ssdeep":"","tlshash":"54414195e6548df142ac4cf8aca567da16e48b87b138c89cfd798cbc65a0e00501ef7e","first_seen":"2026-09-01T10:21:14.464746Z","last_seen":"2026-09-01T20:54:52.624677Z","times_seen":6,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-Ba2RL6Qq.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.897Z","timestamp":1788296035897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-Ba2RL6Qq.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"874406731030327bc53b3b710d39ed9b\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 18116\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0591556b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22413,"size_decoded":8156,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (16884)","md5":"874406731030327bc53b3b710d39ed9b","sha1":"a3e2dfe83732e522ec6017657e0969b81245ea72","sha256":"c70edc34531c6baae7f3246045e4ad750fd90a17de09aca4250d59fe4fc06e6d","sha512":"29903a459deaa2e8b7ea7ae67603488ec865c6ca6a5363c7447c79542c69b768244cf56048576d25e741106f3a0f64d7f9afaf0866973b3cf8dd0574b6959d56","ssdeep":"384:ka5qV8eI4coBSubVfHtYMZVur6Oq//RJUOT9T162n/27ZC2W56hiN2BbekHglVMA:kEqV8rUSKVfIOOq/rj9T17OilquL/Ddr","tlshash":"0ba2b62a4b441a6502bd0ecc1c17718158f08b06b409d86dffb79efe346ad5ca4b5fba","first_seen":"2026-09-01T20:26:35.001386Z","last_seen":"2026-09-01T20:54:52.626181Z","times_seen":5,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d21deilz814qgl.cloudfront.net/8d37eb959e549317bc5349-800x3449.webp","fqdn":"d21deilz814qgl.cloudfront.net","domain":"d21deilz814qgl.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.238.66","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:54:03.228Z","timestamp":1788296043228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /8d37eb959e549317bc5349-800x3449.webp HTTP/1.1\r\nHost: d21deilz814qgl.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\ncontent-length: 39890\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Wed, 26 Aug 2026 15:01:37 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-disposition: inline\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 01 Sep 2026 09:10:36 GMT\r\netag: \"793b28bb3a2805cdd35c3f7297d27b6d\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nage: 42208\r\nvia: 1.1 183a9e2085d5a9255c6d0724cfd9ec10.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: D9F9eFDkelOyeACtuDeYt3-eQjwclpi5TpwBWxBGMAr168JNcrkfRw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":39890,"size_decoded":40455,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"793b28bb3a2805cdd35c3f7297d27b6d","sha1":"6266bb341b944fdd3bd5e3780426b7af118bab43","sha256":"1861003dc96bfd66ce122e679c0f7f3f760a491043b302fc349c76f883488e77","sha512":"351136e5f51a54372cb9456edba55fd2ae26172b21bf1fb05f9d1c0f9aabe678dee8245be9968fd6723270690f8e4ca2e8ceb77b97ea42776ce35975684ada87","ssdeep":"768:Fb4CegSxjoeLTSp6q5XFTMmXqCk3LYRu8JKcZWHBxeY6ohM9wZ0:G5/06q5+q0A8cZW7a","tlshash":"fa03017c7214df82964fbb9b80553622632d0c00236e1ed563bea871dc95139bba4bf3","first_seen":"2026-08-30T03:00:27.391571Z","last_seen":"2026-09-01T20:54:52.627252Z","times_seen":5,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":34,"connect":17,"send":0,"wait":15,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/plugin-server-updates-CIs3ZXCp.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.791Z","timestamp":1788296034791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/plugin-server-updates-CIs3ZXCp.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"009da0bcd7dbfb66b8b212ef78ead3ac\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:26 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640185\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac97e2856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2001,"size_decoded":1558,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2000)","md5":"009da0bcd7dbfb66b8b212ef78ead3ac","sha1":"baf548557ae7d3ac81419c1d17a8a0a37ea5bd3f","sha256":"fe94de4d3c677a83e70d39d3fa39c69de0318a578279b988b373aef2cd08fe33","sha512":"7db163bec3bebb258e8af38a56bd5242c53f27f26917be24bdcacc79772d7a55b92575dc297877c16f113101ddb10ff3ad095f60e4653b824c8f03b7b3418caf","ssdeep":"","tlshash":"5f41b56df0d670b783eb1ddde43a6020afa016a8b010e0f4b33c15c21b53181eab6e19","first_seen":"2026-08-26T15:23:24.168206Z","last_seen":"2026-09-02T03:21:21.91153Z","times_seen":43,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/pagination-AuDotTjV.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.524Z","timestamp":1788296036524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/pagination-AuDotTjV.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"d9554f3464bca9661198bf328b65acb5\"\r\nlast-modified: Wed, 24 Jun 2026 14:40:35 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 1029181\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad44f0356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9083,"size_decoded":3685,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9082)","md5":"d9554f3464bca9661198bf328b65acb5","sha1":"b328528bf069c0971bcb9d7220d6711e6135cec4","sha256":"da6d6b5d53be48808dfa3d5444605a48e9ec52b5efecbb9da36b9d022c713ee3","sha512":"78fc3ad667ec7a97b6eaad635057abeaa35d5587883bc91f6178c31c15cecda6f7c81c9ed217e2f9d7286455c0f0b911fa01a811597514ce3a0a31650049356f","ssdeep":"192:lClP+bmu5vMqZ02D4fQPhxP6DqDTo4C5GY+s4ZDMpj4qR9MHqItjd6R9r2Yy2IyX:lIemuZMqz9fWeGps4S9YH665gFuJ6a","tlshash":"151250de611265b24ad317b642f84ad0d6b00844f48ca87870f8cd9f177e88807e7bbe","first_seen":"2026-06-24T21:34:31.330217Z","last_seen":"2026-09-02T23:44:25.287354Z","times_seen":515,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/arrow-bottom-DBDtVt1J.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.875Z","timestamp":1788296034875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/arrow-bottom-DBDtVt1J.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"59e1799f5aefc567887d8de9fa3e1570\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca8fc156b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":394,"size_decoded":769,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (393)","md5":"59e1799f5aefc567887d8de9fa3e1570","sha1":"3ea0acacd72b66352437d1626abf0b8fd61a03d5","sha256":"c2f1125d7ba40f804dd76a0ab4c2df029c1f2bc2ed61d7fb33488b9d9893f59c","sha512":"3a3e42b2b17705d7f600681a2352a3e8c688aeb633a31e934960fc484fca1bc75f0d59240b40685252e84232649e40affc8c3c65229e14b2b332a1e3170cc725","ssdeep":"","tlshash":"58e0617810485df980268b34c12e0cc603147faa3b8940d55a0e5d3b41c32f0b84f535","first_seen":"2026-08-28T05:09:58.370632Z","last_seen":"2026-09-01T20:54:52.630578Z","times_seen":36,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/modal-app-install-DO7dmfjm.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.939Z","timestamp":1788296035939,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/modal-app-install-DO7dmfjm.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"f97d8df08d1074ae281c5da4e99418cb\"\r\nlast-modified: Mon, 31 Aug 2026 08:29:25 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 130828\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad099d056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10776,"size_decoded":4272,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7144)","md5":"f97d8df08d1074ae281c5da4e99418cb","sha1":"c8b926e69593082e35428a76c75ad651c63a711c","sha256":"b1bdd8cb58705dbe5e9fd423b3b96dbb5249b5fbc09771f18049d2be3c668a59","sha512":"32d1896579ab03f0cd945aa565c64f223142ebe909e6040deae7b311db5dbb9ee37fd86d931ad28aa8ec691414b95eba0140b8172e8898c7d4f7a5eba9969d49","ssdeep":"192:JEAWwcZKterLunz8aPRFDZNgfmqNBfVthZlw7kgX5x7kgpHqRP:JEAWBMe1aPJNg5jw715xRwP","tlshash":"852295d86e71e678ba37964e775f2c2861042a1a8c524ef9f0f7052e23c7da183c6747","first_seen":"2026-09-01T10:21:13.051497Z","last_seen":"2026-09-01T20:54:52.631487Z","times_seen":6,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-casino-game-analytics-BWbU5fzG.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.558Z","timestamp":1788296036558,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-casino-game-analytics-BWbU5fzG.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453646\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"12813479a88c2ee20c42def7dd7f633b\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad47f6756b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":649,"size_decoded":851,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (648)","md5":"12813479a88c2ee20c42def7dd7f633b","sha1":"fb1330bd768674d5e1e5a608b45647e5c9ad24f7","sha256":"c96d0f333ff9dffbaadbdc1de6bc8fe458a6f3899077ae7000ee0ff82060777a","sha512":"0c76510377e2e773ba4430c62502f5cec3547b629244ef82c3840ce875d26ef9c09f4ebe46e0db01783d8ae28365d3e905bba2fd2b52420451419823525cd940","ssdeep":"","tlshash":"dff07dffc0dfc8f1081a64fff2282d995230079f3241ad955aae8f346f52549128d605","first_seen":"2026-08-28T05:09:58.430684Z","last_seen":"2026-09-01T20:54:52.632409Z","times_seen":33,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-BqmZ9M9k.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.582Z","timestamp":1788296036582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-BqmZ9M9k.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 25 Aug 2026 10:52:26 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640186\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"b53624e30e643ba429e139df3f1ab931\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad4af9056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":131,"size_decoded":606,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"b53624e30e643ba429e139df3f1ab931","sha1":"92a8dcaeedec103100154537b1fa78236622027b","sha256":"206c1ae63f6ee992ed427da3cde9a6db905977772fd8708f13b0a69d79c5c204","sha512":"35372f0131f9379dee4cda39bb319284807307848c1a2b305d05a044bfdca860424471148b1e17957a55eba0ea6ace9f726d6936551c7c1cb78182cf47a751b4","ssdeep":"","tlshash":"20c02b2b00358d3c0023086d7380c510bb3c84700730fa90d09a171122d80d1030d502","first_seen":"2026-08-26T15:23:24.248801Z","last_seen":"2026-09-01T20:54:52.633383Z","times_seen":37,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/plugin-vue-query-DmKbFtvY.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.899Z","timestamp":1788296034899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/plugin-vue-query-DmKbFtvY.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 25 Aug 2026 10:52:26 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640185\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"7a9a0e760deb1656e4a60e8d5cf3deef\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca8fe056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":756,"size_decoded":963,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (755)","md5":"7a9a0e760deb1656e4a60e8d5cf3deef","sha1":"98fbfd7db0ee52ace3f987ddc4177594bba8ce52","sha256":"d269713b0e49d084a4cdf27d95174d003f4aa396323167d99c41bf59436c334c","sha512":"4c5677042e112041f66d04c929819e11e063e3fa2fe00881e498897abddf02b7aa190194c9d44851376b347e2c334e404dea107ca26bf84f5cd62fe6dea4cdf1","ssdeep":"","tlshash":"3001d01fa478e3ff4b5e5668a2748c1564104fd9a721c1e8d48e6e2ca92fa41a24ff05","first_seen":"2026-08-26T15:23:23.964502Z","last_seen":"2026-09-02T03:21:21.905414Z","times_seen":43,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"libs.smrtwheel.com/s7.js","fqdn":"libs.smrtwheel.com","domain":"smrtwheel.com","tld":"com"},"ip":{"addr":"194.67.193.67","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.800Z","timestamp":1788296035800,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smrtwheel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 14:35:02 GMT","end":"Fri, 16 Oct 2026 15:34:56 GMT"},"fingerprint":{"sha1":"29:11:C1:5E:DE:62:55:1D:37:A0:6C:37:94:2F:D1:19:6D:F0:60:9D","sha256":"6A:B1:8A:15:B3:ED:C4:A5:0B:4A:25:90:F7:55:1A:1A:7A:64:A3:EB:2C:AF:69:80:39:C2:DE:6E:C7:8A:A1:A5"}}},"request":{"raw":"GET /s7.js HTTP/1.1\r\nHost: libs.smrtwheel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 01 Sep 2026 20:54:02 GMT\r\ncontent-type: text/javascript\r\ncf-ray: a3472af7f8ae569a-OSL\r\ncf-cache-status: HIT\r\nage: 3278\r\ncache-control: public, max-age=14400\r\netag: W/\"5278c6a10864e6af7536ace64444c559\"\r\nexpires: Wed, 02 Sep 2026 00:54:02 GMT\r\nlast-modified: Tue, 01 Sep 2026 08:04:50 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 5dbb5d54ce8d1d6f8480679ed6115d1c.cloudfront.net (CloudFront)\r\nx-amz-cf-id: 0KiMOwjT9FiU-1ipYu3j_8KTnveuLpT07M-NnxtV-nIdpVKSr5NxPA==\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-server-side-encryption: AES256\r\nx-cache: Hit from cloudfront\r\nset-cookie: __cf_bm=QCj4cT2DWYlWAf_Edh3foPPiazi8ISmKTX_2D0vXHbg-1788296042.2391896-1.0.1.1-F_QEut8gBTQhCk3SNbv7wmeiM4MSjnAg.YsxaPI2e38kfvq8XqZqc3lkml.DOTCy1K_9wXg34WCkL.F61B7v3vh7cVxEJN9gt3Wkax9RgrdahDDo3Q2Vtnygx4vCOEmV; HttpOnly; SameSite=None; Secure; Path=/; Domain=libs.smrtwheel.com; Expires=Tue, 01 Sep 2026 21:24:02 GMT\r\nserver-timing: cf-cache;desc=\"HIT\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"QCj4cT2DWYlWAf_Edh3foPPiazi8ISmKTX_2D0vXHbg-1788296042.2391896-1.0.1.1-F_QEut8gBTQhCk3SNbv7wmeiM4MSjnAg.YsxaPI2e38kfvq8XqZqc3lkml.DOTCy1K_9wXg34WCkL.F61B7v3vh7cVxEJN9gt3Wkax9RgrdahDDo3Q2Vtnygx4vCOEmV","quoted":false,"path":"/","domain":"libs.smrtwheel.com","expires":"2026-09-01T21:24:02Z","raw_expires":"Tue, 01 Sep 2026 21:24:02 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=QCj4cT2DWYlWAf_Edh3foPPiazi8ISmKTX_2D0vXHbg-1788296042.2391896-1.0.1.1-F_QEut8gBTQhCk3SNbv7wmeiM4MSjnAg.YsxaPI2e38kfvq8XqZqc3lkml.DOTCy1K_9wXg34WCkL.F61B7v3vh7cVxEJN9gt3Wkax9RgrdahDDo3Q2Vtnygx4vCOEmV; HttpOnly; SameSite=None; Secure; Path=/; Domain=libs.smrtwheel.com; Expires=Tue, 01 Sep 2026 21:24:02 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":443572,"size_decoded":122149,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55760)","md5":"81b59b79b5ae45cba3979854c4032602","sha1":"6e9509e22b4eee296f61d27906675dee28070730","sha256":"a015254eb738806442419846eab09a5789ea9537ca828d8c813fcc9145c200b6","sha512":"4674733016c61a907b1b752ac9c26b064f56ed5a3b54b60ada885e91a9476eb1e94d7b655c517ecb0ce56a737b8d167799e4067d06916a1133c7b97212bbc613","ssdeep":"12288:PUMLq5Z505c5NtQpSO5BAuu3ejzVuHluubuuuuMILFn/vXAO93wMMmVpMC4QLZxx:cdyVi33Pdb","tlshash":"ee943ce977eeb93213d14066783b1107f33ec48c180e4218f66c99de6b2994a66f6f71","first_seen":"2026-09-01T10:21:12.207495Z","last_seen":"2026-09-01T20:54:52.638858Z","times_seen":6,"resource_available":true,"data":null}},"time_used":6512,"timings":{"blocked":-1,"dns":6,"connect":2,"send":0,"wait":76,"receive":0,"ssl":6428},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/cdp-modal-DMEQiBsD.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.850Z","timestamp":1788296035850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/cdp-modal-DMEQiBsD.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_TLDTEST=MQ==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"755e792f5381994cfb82910af3b165d5\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0185856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4522,"size_decoded":2493,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1583)","md5":"755e792f5381994cfb82910af3b165d5","sha1":"a66220a259e454cc77e1cd9d7de4102d970f56be","sha256":"e95fd24cbdfb4ffe136fbdd73e01de273b938f51dcc200236d0143174de76747","sha512":"cefa99b34d851a9eb65f3028c913d6de2bd0b4ebeb1f5809bb367777609f51b0a7689f1ef5c598755d9a03254809e0c7c09a2a51a4d4c46bfcf3842f8618e8c6","ssdeep":"96:vFhH0w82r2K2IpitFj9PATK3mUu+kxJYc6/YJuyQZ5YYAAwsQmbjOmmm/+2P:vjH0wBibIpitFJYTKgzx2V/YA1BCu+2P","tlshash":"0691b4897ffcf079182f8896b02f591ae318799855a3ae92d4f4096c2bc0cf79894306","first_seen":"2026-08-28T05:09:58.650806Z","last_seen":"2026-09-01T20:54:52.640484Z","times_seen":35,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-BHj4L3sB.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.877Z","timestamp":1788296035877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-BHj4L3sB.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"f43e021e976cd12b780ca3e885f4aeb7\"\r\nlast-modified: Tue, 01 Sep 2026 09:52:08 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 39173\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad038d956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3066,"size_decoded":2087,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1704)","md5":"f43e021e976cd12b780ca3e885f4aeb7","sha1":"06c583c54d9066e23097719b513915433f79c4c1","sha256":"1ff4c27f44463758ec3df8a04f461d688fb35744685ca6f0046dcef24dbcd481","sha512":"5ec7ac9be9a4cca255d475c27fe92c68bf6140c280a766263c7c4e7a66fe2f1c81dad91ebb4536b5f26affd9c3aa93d66faf35ef72879e1467792745eb62fb13","ssdeep":"","tlshash":"a851855a95845cb513bd4dbcdc9a21e188f84b42e444c99cbf7a4cbd7290ca8601bffa","first_seen":"2026-09-01T10:21:14.315198Z","last_seen":"2026-09-01T20:54:52.642149Z","times_seen":6,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/page-container.vue_vue_type_script_setup_true_lang-Dx01bCb7.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.909Z","timestamp":1788296035909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/page-container.vue_vue_type_script_setup_true_lang-Dx01bCb7.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"eef9ca1bd3e2826f3c09b9d64937e4d2\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:26 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640186\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0695156b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4605,"size_decoded":1879,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2449)","md5":"eef9ca1bd3e2826f3c09b9d64937e4d2","sha1":"be4a3ad2993ee34bf10b53fa263a0cbd6bede5da","sha256":"3dc3d2cd10e9bb2bd9616688f30aea867b7376c8075ebba8cc92f8518268cc65","sha512":"14e5a4259cc840adb156679649638c99feff87d7fd5cd9e8b844916326f631d4d4c1cea8f5d267cf18cda1a1f00a2103526ed177145a47769f911cb64910fc1c","ssdeep":"96:zgi+UTwV+AXq0boLvbMaV6K7lMs24l2f6KyvMsML:zgbPYMrbIbrqfldL","tlshash":"2791ec269fa0e8bda97e39ccc63f70a9eb4c857bdb0558d3d24cb22a07c75a8654441c","first_seen":"2026-08-26T15:23:23.931388Z","last_seen":"2026-09-01T20:54:52.643718Z","times_seen":40,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/scroll-top-C7kMlMrW.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.911Z","timestamp":1788296035911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/scroll-top-C7kMlMrW.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"e88824b1befe2b700aa45ed04019afed\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0795556b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":494,"size_decoded":836,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (493)","md5":"e88824b1befe2b700aa45ed04019afed","sha1":"adc323497725e23a1bc95145de448c0fa8b90b4e","sha256":"b5457b022acae11a02e836dfd5e1f77d885cea22d2ea47ee21d59ebc9c1a3b0f","sha512":"3a441088dfec100dab1cc0372d128c862d56e7717b1c0d3c05f6287f3ace06717f7ab12925b77a1298bbdfeca63e3dfdee8f8e319a33a9e195f2efd2bca8920e","ssdeep":"","tlshash":"c4f052bd12092abd403e8b34c32a0c925b6889fbb78a50d0174e263b02824fce58b5a4","first_seen":"2026-08-28T05:09:58.779736Z","last_seen":"2026-09-01T20:54:52.644852Z","times_seen":34,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/icon-box-L7dmr9bZ.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.820Z","timestamp":1788296034820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/icon-box-L7dmr9bZ.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"5711260df959f0fa3298c237d559538f\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:26 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640185\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac9ae7c56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1435,"size_decoded":1167,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (724)","md5":"5711260df959f0fa3298c237d559538f","sha1":"9d295881cb5df237c89b9486cc5ff7c18d0309d1","sha256":"5e8e3317b218878690428c76d14c78367b94951a2dc23cd22d5fddaa9c8251c9","sha512":"e7761d2c1c67f38978d7245a0b5918056bbf9f00b5e1021fe17026c30704733c18853e4896ec6e1ada8f291f758f737474812fde18a637295cbc841560286af3","ssdeep":"","tlshash":"a6212722dd21e1387365044fc721d98bad5451a11f603cef8b769c395beca1b2304eec","first_seen":"2026-08-26T15:23:23.974173Z","last_seen":"2026-09-02T03:21:21.894793Z","times_seen":43,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/search-input.vue_vue_type_script_setup_true_lang-D6vToUJM.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.869Z","timestamp":1788296034869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/search-input.vue_vue_type_script_setup_true_lang-D6vToUJM.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"8825bb8732c2abc83c447dc479bf356e\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca5fab56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":671,"size_decoded":939,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (670)","md5":"8825bb8732c2abc83c447dc479bf356e","sha1":"b4ae62383a03a31d96ac2ab430577472ced3b7f8","sha256":"75d9264a105777a3c510710efd4079a3bb627906af3b99d8d1fef50d7ad4b0f1","sha512":"b5266cb94a189611f5fa1bb9dcb4df782743b234895cafdec8c9d5527ee8450b67d3467decc3c382e73be9fedf5def8392a4449b66c132d114141b4a1332c296","ssdeep":"","tlshash":"d90123121c14c2772b600cd7ea73b01b58a4107b17d11de049a4c222a76c8e8dc2fa55","first_seen":"2026-08-28T05:09:58.525182Z","last_seen":"2026-09-01T20:54:52.646778Z","times_seen":36,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-7-N9PB7K.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.884Z","timestamp":1788296035884,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-7-N9PB7K.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"a8b95577e2e316786da4cbd601946c24\"\r\nlast-modified: Mon, 31 Aug 2026 14:52:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 106642\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad048ed56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4453,"size_decoded":2614,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2790)","md5":"a8b95577e2e316786da4cbd601946c24","sha1":"68ebc75863489d87c551f1e2835f4c78b2866905","sha256":"9fec2414e25877268d2e2554392dfdfc2f342c09e5b7bdf39a88b648e742e406","sha512":"7f1615c3eaae2074e040bf47b07ca3f1d9d3d0b06ee6da5d5606fb977742b5a640c03dcd8f43d33a8fb841cadd07fc9b5b1fe2c65209bf9236690137645f6030","ssdeep":"96:jrVJRBzkAatK8HPa/mrPz0TrIwzNAjFAO+IEQJHsN7e3nuAK:vVHBgJTvaub4PTI+NssN8u5","tlshash":"be91a51265945cbd12ad0d9ded162bc589e20792e140c4eebfba4cbe21a1c90902fff7","first_seen":"2026-09-01T10:21:14.66221Z","last_seen":"2026-09-01T20:54:52.647749Z","times_seen":6,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-2ppxX2U5.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.957Z","timestamp":1788296035957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-2ppxX2U5.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"8233aeb19e69fb95fe88535926184565\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nage: 18116\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0b9fc56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3751,"size_decoded":2369,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2416)","md5":"8233aeb19e69fb95fe88535926184565","sha1":"239e3a9fe9848df8f1739699b5ad171964ffef02","sha256":"03039268f71d89293a1167d48a3136cea7121d3bff1fffb17e4f93295c7d3a94","sha512":"a7113966c07b2789761ff0d030aa92b7f990a91b56b51044a407310f56b6a0452cda459c436476335106761e2d640a344c98c99725065c1b8f0a3242f76a9da5","ssdeep":"","tlshash":"b67181060d480eb603bc4ddead2472d288e48b036101d4acff31acb932a5ca9503bff2","first_seen":"2026-09-01T20:26:35.136676Z","last_seen":"2026-09-01T20:54:52.649002Z","times_seen":5,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/telegram-white-1YxV1soQ.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.501Z","timestamp":1788296036501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/telegram-white-1YxV1soQ.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453646\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"9b9a4888086ebb6acb52dd99bc05eb71\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad42eda56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":639,"size_decoded":923,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (638)","md5":"9b9a4888086ebb6acb52dd99bc05eb71","sha1":"60aa3d009219fce0997d8970d485728923b325b4","sha256":"cd8b7138b30779d885d6f2a380103400670e6dad034bcd668ed19802aa84da09","sha512":"c1136d96ecda307acc4e712ce13cccc5fc243fa82e1e2e666938e6e62d678efc53985e66b24a816b87d3867aad38470bf2c022c2abb4f10c707baf79bf06a9dd","ssdeep":"","tlshash":"56f06855131456fc02a7ade6cf780e405b0965ac7b4d90c4925fc73173c18d8ccc7c14","first_seen":"2026-08-28T05:09:58.552635Z","last_seen":"2026-09-01T20:54:52.650063Z","times_seen":32,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-active-raffles-D2BKdB0R.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.532Z","timestamp":1788296036532,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-active-raffles-D2BKdB0R.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"2ac87fc2b2d6c48127dd94aab776d562\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 31178\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad45f1b56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6204,"size_decoded":2901,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5411)","md5":"2ac87fc2b2d6c48127dd94aab776d562","sha1":"707f7aed05e7061586984247dece1922597f0bf6","sha256":"d53195d161c302e2429a454919603eaad3520a7349ba5b241ec0bc3b87b4bc67","sha512":"c5d66978176b631085068162199949b6904b9fd10a7731c8a9890771e1cc3db0147ad6649ebd4af82842638de856be4e71ed3bed4c405b75f23c686816ce5b59","ssdeep":"192:k3d4h9icm+emKW4D7+l65jIdqj2WEkUnVqPDtNNiztQh2jy64:eq98njMnVqrtNNiztw2jyJ","tlshash":"8bd1978a1190fd35f712c0c89e75317de82c1d3eedb283d16522284691b29e1bf0db7a","first_seen":"2026-08-26T15:23:23.86627Z","last_seen":"2026-09-01T20:54:52.651052Z","times_seen":36,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/shared/fonts/inter/InterVariable-latin.woff2","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.590Z","timestamp":1788296034590,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/shared/fonts/inter/InterVariable-latin.woff2 HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY\r\nSec-GPC: 1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; cda_status=pass\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 22 Sep 2025 15:36:02 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 2160443\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"6a7353a6049da6d0c298d8b36a8bc8cb\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac83c8256b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62164,"size_decoded":62649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62164, version 4.0","md5":"6a7353a6049da6d0c298d8b36a8bc8cb","sha1":"66b464c8ba4b10dee2b2137ac4f93f1556905c5a","sha256":"9c16a208f738f97584c76f5a4f4929863a40d0574ecd7b11017df9965829e8f9","sha512":"670c75e647532379918668b39810da5144223653235b141a2ee20b0328be7720fc7c34bd48929c5c4b15e6a8bb08e2945399de8dee775ccffc734fd6a6f7a272","ssdeep":"1536:Pd+94WUGwr2EI0EAZE5EedlOGcCX3+Nx4Vhkn50ffAOg8wt5zr:PdyUGwr7Zs5EejOmX3iln503Al8A5zr","tlshash":"1d53021f6eacf2e5c4ad9cec74420cea0a1e571309c74c1245a77e160a46b77d6e60f3","first_seen":"2025-06-23T00:10:28.466523Z","last_seen":"2026-09-02T23:44:25.467188Z","times_seen":4768,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/custom-html-DjLXZtQZ.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.809Z","timestamp":1788296034809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/custom-html-DjLXZtQZ.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"db61ee4bab4807ce14b57e5e010e8fa8\"\r\nlast-modified: Wed, 26 Aug 2026 14:38:18 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 536757\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac98e5a56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27602,"size_decoded":11496,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25057)","md5":"db61ee4bab4807ce14b57e5e010e8fa8","sha1":"c9c30b7fec25651bd283f681fbffc297064327f1","sha256":"eedead98f275597080c0a9288faab99e3978d511413863014786e53232819e9b","sha512":"b0ba39b7195aed8dc719a4dcc9ad3501838316ac6ae4accc90a6f48ab38efad3d3855cd2bbc0f79aa7caab2770dde2799edbb4471fa02ff41d13c73da8eee375","ssdeep":"768:ACAgiLrKdj8GMbalUqDrqYW2FTayyHAjyPS2ckAGEoRjZwUVVa2lDRDEvJ0k9Xgb:nv8p9Y4t7ZwU/F4A","tlshash":"f1c229787999a9b24fef40d9507b6a09a1bc051e714cd490e6cdccb61cfaa091067f3f","first_seen":"2026-08-26T23:17:11.928225Z","last_seen":"2026-09-02T03:21:21.920886Z","times_seen":42,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/get-region-by-code-CYxhYg5B.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.877Z","timestamp":1788296034877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/get-region-by-code-CYxhYg5B.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 20 Apr 2026 08:02:59 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 1814130\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"2ef54af25afba19e741169f154f89f44\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca8fc656b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168,"size_decoded":628,"mime_type":"application/javascript","magic":"ASCII text","md5":"2ef54af25afba19e741169f154f89f44","sha1":"3a962a1a0ab43a6c2581a8f0248feae40c56455c","sha256":"ebc220e944b156a536195f9f1aa40527063214aa24c7a14bd519c84fded8a882","sha512":"27c1896a3bf262eb458ec5b35bf2995a0aa4cc121411af155a1264fb2e9247f71a078b66560d12c5c11b6bfdbde7ecf7d001e3941c0846a4852173e804bee6ae","ssdeep":"","tlshash":"83c080463d11255143b1197b0a5e4db54869a408394a4791b11d94c72e754b115dbe0a","first_seen":"2026-02-20T00:06:55.063189Z","last_seen":"2026-09-02T23:44:25.435279Z","times_seen":1139,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/handle-affiliate-Dach5UOx.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.897Z","timestamp":1788296034897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/handle-affiliate-Dach5UOx.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 25 Aug 2026 10:52:25 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640185\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"bfb96fec11fc2f35115cc3cb8dce614a\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca8fde56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":774,"size_decoded":982,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (773)","md5":"bfb96fec11fc2f35115cc3cb8dce614a","sha1":"086d9d2b39b86c19258f235e05a55ce384d7da41","sha256":"95176073b32d1b6e56c314e7551e0bf410dcd33a660896a33927657186b36f16","sha512":"ebdc06978998956d06b95552fa7c79134d8acfe679d3bfcafc96b0f60574909c2019e6e6f8ce0d66a6f1f5acd7eb92bce4d9eebad80c1525e48ca40d2c450cfd","ssdeep":"","tlshash":"d001258921b789be0b793ee064553765b4b244cc787a86c5305d27026313e4bcc3f549","first_seen":"2026-08-26T15:23:24.073752Z","last_seen":"2026-09-02T03:21:21.873209Z","times_seen":43,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/define-widget-BTP9gEN-.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.862Z","timestamp":1788296035862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/define-widget-BTP9gEN-.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 26 Aug 2026 10:03:51 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 553744\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"e1c4b9d97ac1ec9462d73eb31f3c8954\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0289856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":229,"size_decoded":663,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"e1c4b9d97ac1ec9462d73eb31f3c8954","sha1":"593f1e0341d7dbceb2d20022184725c54a897dd5","sha256":"dba4ea2800e1c42f2a70f0ac97fd77439d742ade4e6865e81b763b13adfac466","sha512":"8d709631c85919c37001277bc79e89184006967c9014f9bc9f6cc72e0daf61976427b68eb79d4c3ab87bf241d15f230c91ff80d75ddd5a695cd9cc0a9f3f0428","ssdeep":"","tlshash":"81d097216414a0bc4080ba62af285c4a51c2feab5c84a094120688e0cfca0594e2149e","first_seen":"2026-08-26T15:23:24.352655Z","last_seen":"2026-09-02T23:44:25.542849Z","times_seen":42,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-DxIZjfRi.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.885Z","timestamp":1788296035885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-DxIZjfRi.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"9f80f710360f479c6b309e7443a26349\"\r\nlast-modified: Mon, 31 Aug 2026 08:29:25 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nage: 130829\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad048f156b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6633,"size_decoded":3268,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5252)","md5":"9f80f710360f479c6b309e7443a26349","sha1":"962034b2433a465655100953361be775575e7a1d","sha256":"9a0f9b2424ed9232fe09fc9ca3a5f8e353ed653d1fa99ada9fcc1b4fcbafe65c","sha512":"2a8dd17901f3818689c34e83dfc8666a5b8c18e10015ab0e6d33e798c0247758ad28441662e101e1984387e2159d9d26ae0bc835966ba28260ea9061ecbe99e9","ssdeep":"192:BIcVgaCHbh/iIF/u4uv4YZ4Qq1w+UHPgIyKkxA2nm6nPxi:lgaEzawYZHqq+UJyKgA2nm6nPxi","tlshash":"c6d18385a2865df2233e4ed95c6511a104a44b547900c9eeffbd0d3eb1098dad2bae3a","first_seen":"2026-09-01T10:21:13.873958Z","last_seen":"2026-09-01T20:54:52.657011Z","times_seen":6,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-DaKqfvV4.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.972Z","timestamp":1788296035972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-DaKqfvV4.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"4efc395944ecbe6161b0d6ce38042c32\"\r\nlast-modified: Tue, 01 Sep 2026 09:52:08 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 39172\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0da3656b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129593,"size_decoded":30850,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (63678)","md5":"4efc395944ecbe6161b0d6ce38042c32","sha1":"753ff85f2167650083948f657c708c0e56bf2b20","sha256":"0a26578d589368438a11e4ca9ba2bbcfc8480aaf5432f8a639481fd234ffebfc","sha512":"1fcb7b42049879fdb0991c0cd8158f461e49c3dbaf949acc8d53b0bb4dde3cf8a04da1c843a2b1565c9eecd59911f4d06773a9ceefe03b2a907eae7a03dd3955","ssdeep":"768:2l1CbZ2uBmE+omMIa41eFAuEMXVCR6r2QTm2+0rB3RCIlLWQM5P6kTXCYmSdmY8G:wSsXoCR4eAlGNhgpAYG3k6r4CRlAoh","tlshash":"52c31870fb51a4bce5374c06fbed1088706c2b16a502c9ecd6a9512a0ac7df713e1bad","first_seen":"2026-09-01T10:21:11.943829Z","last_seen":"2026-09-01T20:54:52.659056Z","times_seen":6,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/useInfiniteQuery-wzGDmxTe.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.625Z","timestamp":1788296036625,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/useInfiniteQuery-wzGDmxTe.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"99afae82db19e4fd22770d0245c636b5\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640186\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad4efed56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1123,"size_decoded":988,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1122)","md5":"99afae82db19e4fd22770d0245c636b5","sha1":"7e03826a6ffba7799c7d2da35946f7d4565cc798","sha256":"31c0cabb9df746381d943b3f8742b8a664d3e2a5f26d8cfae0ce9fe4324d5208","sha512":"909805693262a8d4a0a9cda474b97182ddcf11b1feef7e7456ce093a937822bada5a7babd84fff7736e80fe550cf0d77bd5b4474bf576452a868ad67a0dc6bb1","ssdeep":"","tlshash":"0d21bb71364a7f07e0a6c24fe30c0305e5105973783ad7bcbc2c8aa6ba25401d38957a","first_seen":"2026-08-26T15:23:24.358019Z","last_seen":"2026-09-01T20:54:52.660081Z","times_seen":37,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/api/web/v1/user","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wfqxn.life/","date":"2026-09-01T20:53:53.442Z","timestamp":1788296033442,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /api/web/v1/user HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Moz: early hint\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wfqxn.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T01:18:14.47199Z","times_seen":18246362,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-path-based-route-matcher-u_WwO7dQ.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.826Z","timestamp":1788296034826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-path-based-route-matcher-u_WwO7dQ.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 28 Jul 2026 12:24:43 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 1639169\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"b5e9cc4a439a5cca68fea1fddcc5e36c\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac9ae8656b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":952,"size_decoded":1052,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (951)","md5":"b5e9cc4a439a5cca68fea1fddcc5e36c","sha1":"c1839917cf0caa4d8206b3fdb68740df262ca5df","sha256":"1a1b7d4a81390490d7f41d902903a805172bc6d903c64c5c204336a970597f22","sha512":"cf172a66cf1cd20a15ebc2d55b3194e6f2c52cd083e0b8b7ddb09bfde4cf0d294fd9d984fc240dc25f7a9d8fafe0b23563642842e77d9994d040fa52fdeb4eb5","ssdeep":"","tlshash":"ef11d4a511e7d1a09721de8491304037f42a5dd93509e6e0eafd6e32ee17e43d07ee2d","first_seen":"2026-07-29T05:21:14.894571Z","last_seen":"2026-09-02T23:44:25.545436Z","times_seen":175,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/page-loading-DqoxeeyD.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.838Z","timestamp":1788296034838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/page-loading-DqoxeeyD.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"d1de42a00b3a1806231473efb303e4f5\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:26 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640185\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca5f7a56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2970,"size_decoded":1958,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1992)","md5":"d1de42a00b3a1806231473efb303e4f5","sha1":"cbd29c1232629255ff425fd42573e059ed579eac","sha256":"9f8a6f487b89771f9699a81c8022768c0a21aa32f8d7e34f1ffcddbd99c57c99","sha512":"5a4dbff8a00e8c25b7e5871dc53428a1f0a69393a260f8cf9e8a4fba9e958a2dce8df69b9cfdc1f65090a7fe411de986c92206affe2e6c4d5ab6c4fdc43c5e14","ssdeep":"","tlshash":"ee51ea05ae02c4b85f6b9443961cd890958a73a3d77268f332fd4d2d03f0c648f6746a","first_seen":"2026-08-26T15:23:24.321103Z","last_seen":"2026-09-02T03:21:21.925497Z","times_seen":43,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/component3-composition-Cx3jgoEb.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.871Z","timestamp":1788296034871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/component3-composition-Cx3jgoEb.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"d8695b39268ef13ab53677f31b3ebe1d\"\r\nlast-modified: Thu, 23 Jul 2026 14:54:22 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 2316455\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca5faf56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62163,"size_decoded":18957,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (62162)","md5":"d8695b39268ef13ab53677f31b3ebe1d","sha1":"afefacbc2ed14d9f3f0913f11518c588ab68c01f","sha256":"e40b141403b66bc04c84defb2bdb146565458f8b5315df70e37c0ce9e6b5944a","sha512":"fb35d32d7c9b4dfccddfd56fd34c7d94a2d096055e65586dcc6609b2cad7e2765ff187345300e4f86e46fc772874c82db673fd4d9a59c73ba1776c1b4d1f61c0","ssdeep":"768:3cmUMGfv70yYqsLw/qt8RkS49TDA62WnzMidTMfdoEWQhyFQBUmrxeroCrwDUT35:1ZDUzg+SNQBUfOLQSOReYL","tlshash":"ca53a5d033f6a46683e8d8d44cb102a3e3327b843445869df47da6df293ed4261bab75","first_seen":"2026-05-26T00:02:55.211308Z","last_seen":"2026-09-01T20:54:52.662968Z","times_seen":439,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/useQueries-9j_7dr4K.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.901Z","timestamp":1788296035901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/useQueries-9j_7dr4K.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"aa0928de037dc379d51e47b931eb224a\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640186\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0692556b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3202,"size_decoded":1902,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3201)","md5":"aa0928de037dc379d51e47b931eb224a","sha1":"032995e581ac5ce4f560661641b5e1f8bc7ee8bd","sha256":"6a8a49d869e3beecb6b4a8fc97d144be20147ec83f5f240fc0cf44b1a0a9b326","sha512":"73c81e04f7ba8ffd5af0a47744f14703d10b406de8a196c5b4f10a3cfd1c6279dd582308e7193dda6b4da28de7b38bed67e086dc4c4745501643892992ead8f0","ssdeep":"","tlshash":"1761734fb054a17673a1c5e9cc358066a3196e08300d406cfbad9ddbae53cc96672f3d","first_seen":"2026-08-26T15:23:24.278634Z","last_seen":"2026-09-01T20:54:52.663911Z","times_seen":40,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/support-row-CaekctOc.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.496Z","timestamp":1788296036496,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/support-row-CaekctOc.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"088a98738f90ec8b6afddb67d49293e8\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:41 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 18114\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad41ecc56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8026,"size_decoded":3514,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5124)","md5":"088a98738f90ec8b6afddb67d49293e8","sha1":"68665a9f44ef16462d2784b6ec3962624bbc63ba","sha256":"9bbafcce5b24a3c64a8c60e84a19d6980f73fcd26c77abd21871e72ae3098d21","sha512":"ba7fb6eb25ec0705eaa8acd0f7cb68d08f3c7d016bfb2606f8eece12410415b9539aacb84d192dcf446cb6d7cbd0c4e2cdb9b176c5e98d5f52138e3d9188e577","ssdeep":"192:qBxOJ8tTfvuRsGnpWK0g4Eo9dAkjOJByAKPObVFqm4:qrOYvPGnpWK0KotOJBynPORs","tlshash":"81f1c746ee74aab48077487ff11d54279524e526cbc9cae4c0ed93a643f6db0c27ea03","first_seen":"2026-09-01T20:26:35.029403Z","last_seen":"2026-09-01T20:54:52.665069Z","times_seen":5,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-template-ref-BXEEq4q-.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.803Z","timestamp":1788296034803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-template-ref-BXEEq4q-.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 26 Aug 2026 14:38:19 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 536757\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"0793715f8344a7d3e08de3fe77c607ef\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac98e4756b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":163,"size_decoded":614,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"0793715f8344a7d3e08de3fe77c607ef","sha1":"88ff6e3d51b021e4033f51580fa1d2a3ebf159e4","sha256":"98bae4d2db0ebf9ba2356600d4df31e797845bc757af808ed5545ad5bad34680","sha512":"c781cef105becf20831b3c8e6ac1ba950312f1a0522fb6113c7d34b755d05477927cb888262397559dde736d87cf3fd74889af4a5dbdd08d2881b94b1a6beb93","ssdeep":"","tlshash":"17c08c6fe003b1b3d221389821204db0820189c6232bd5d0d4440ad106052d0c07bb79","first_seen":"2026-08-26T23:17:12.006316Z","last_seen":"2026-09-02T03:21:21.91892Z","times_seen":42,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/plus-circle-DGSXgs7l.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.870Z","timestamp":1788296034870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/plus-circle-DGSXgs7l.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"b5297fe41325b923739db398d5082b07\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca5fad56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":439,"size_decoded":794,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (438)","md5":"b5297fe41325b923739db398d5082b07","sha1":"8be33c57eac1067b8abd60936352e55367cb0055","sha256":"8c3670fe20e141b58cb11e9cfd1cc513404e5b74d1d020c85df09e3af2b5dfae","sha512":"e463089a0566ac6a8255c661d56818d289bacfb8e2b4fb571a16d7b9f8f15f9a27d15c9aa02e329e70f03ef47bb53ba0b17d7e9425334f6aacf4e2b06359a6dd","ssdeep":"","tlshash":"69f05c76204888bc412bc97dc0985493077d74fc33016c84ce8d957243e2221d88b56a","first_seen":"2026-08-28T05:09:58.474222Z","last_seen":"2026-09-01T20:54:52.667448Z","times_seen":36,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/api/web/v1/user","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.689Z","timestamp":1788296035689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /api/web/v1/user HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nContent-Type: application/json\r\nTraceparent: 00-a89ba894a4642ff2db3785be07592c7c-d23e73b3d056d306-00\r\npage-view-id: a89ba894a4642ff2db3785be07592c7c\r\nX-Origin: 1wfqxn.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 5\r\ncache-control: no-cache, no-store, must-revalidate\r\nserver: cloudflare\r\nx-cache-status: BYPASS\r\nx-trace-id: a89ba894a4642ff2db3785be07592c7c\r\npriority: u=4,i=?0\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\ncf-ray: a3472acf0e4956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"BYPASS\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5,"size_decoded":442,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"68934a3e9455fa72420237eb05902327","sha1":"7cb6efb98ba5972a9b5090dc2e517fe14d12cb04","sha256":"fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa","sha512":"719fa67eef49c4b2a2b83f0c62bddd88c106aaadb7e21ae057c8802b700e36f81fe3f144812d8b05d66dc663d908b25645e153262cf6d457aa34e684af9e328d","ssdeep":"","tlshash":"aa3000000000000c000000000000000000000000000000000000000030000000000000","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-03T01:23:25.8245Z","times_seen":80683,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/user-DW9BYKXR.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.906Z","timestamp":1788296035906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/user-DW9BYKXR.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"25d3ecf487ac3be73149a3b24c2b13e8\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0693f56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":521,"size_decoded":846,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (520)","md5":"25d3ecf487ac3be73149a3b24c2b13e8","sha1":"fde9be4a3edb528c196d983daee02d75630b3f07","sha256":"6f39329d351b1875db7a270ed5b034086eed14aab3147f0bf3c648818b2861e6","sha512":"b5d468fa39234a9113fd5ffe2aab6b1b5839a70cd846c86fe9c407898ebf6add9bdf0b582b25229f84c4da51487c6be5d3dbedc1a8c8e1bb1c0c5ebbe5c80cb6","ssdeep":"","tlshash":"93f059e80191a8dcc5a94d7eca3e18960b59b8ac374584c4d73ee9f78aa40f0d0db226","first_seen":"2026-08-28T05:09:58.848867Z","last_seen":"2026-09-01T20:54:52.670926Z","times_seen":34,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/api/translations/v1/frontend/bonus.bonuses.cdp-banners/en-001.json?v=0.4051.0","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.259Z","timestamp":1788296036259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /api/translations/v1/frontend/bonus.bonuses.cdp-banners/en-001.json?v=0.4051.0 HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nContent-Type: application/json\r\nTraceparent: 00-a89ba894a4642ff2db3785be07592c7c-12c307676d487dea-00\r\npage-view-id: a89ba894a4642ff2db3785be07592c7c\r\nX-Origin: 1wfqxn.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: public, max-age=300, stale-while-revalidate=300, stale-if-error=259200\r\nlast-modified: Fri, 24 Apr 2026 04:18:45 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npriority: u=4,i=?0\r\nage: 559\r\ncf-cache-status: UPDATING\r\nvary: accept-encoding\r\netag: W/\"e1bb9a23bd197621f3a1ada2fd52a979\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad29ce756b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"UPDATING\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":744,"size_decoded":950,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1bb9a23bd197621f3a1ada2fd52a979","sha1":"4b0bfcb370a2aeee809efcb2ba436c4496cbe1ed","sha256":"4acca3fde269de095c4db583cac0c5558c7eb61d877382fc7a498e0160306c83","sha512":"5c34570ff410c094dca1318a40d5722597d60c6cd110c4c99ad2884bac01e25a4bc5caadab4193885bf0d9f8478ab57355092b812397996ef51ea181d9d4db52","ssdeep":"","tlshash":"70019c4c5f6a10620f472bca7cd1dfb89e647370624342d99dfa914e0eb43b082725c7","first_seen":"2026-04-15T08:17:19.403484Z","last_seen":"2026-09-02T23:44:25.153931Z","times_seen":872,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/lazy-render.vue_vue_type_script_setup_true_lang-CeKiHSPF.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.470Z","timestamp":1788296036470,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/lazy-render.vue_vue_type_script_setup_true_lang-CeKiHSPF.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 26 Aug 2026 14:38:18 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 536667\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"aab4235b703200c79158cae9037528db\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad3fe9456b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":706,"size_decoded":952,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (705)","md5":"aab4235b703200c79158cae9037528db","sha1":"2140c1f50967e903d9569f9a318a1704f698b045","sha256":"6fbef7ba30e600b4d8f3a08487a88e325446267c4c1f5ae246d098d0e87888ba","sha512":"d4f6ec18d4c74e11ba630a2dc7859ec056bd5fec01b611b6a79beae977424b45cb8f4473c7a3cc3f2d47b74fe152005d3d81d1f12a5ed5a357a21b6f766a0257","ssdeep":"","tlshash":"32011005f819eeb8d5441a8bea21aa24ea455aae0b69b89352ff138f238e008524c305","first_seen":"2026-08-26T23:17:12.250856Z","last_seen":"2026-09-01T20:54:52.67494Z","times_seen":38,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-banners-carousel-CImHxFum.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.522Z","timestamp":1788296036522,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-banners-carousel-CImHxFum.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"8789ab5b3e5eb600750fd81b6b5e0f44\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453646\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad44efe56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21426,"size_decoded":8311,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14841)","md5":"8789ab5b3e5eb600750fd81b6b5e0f44","sha1":"187fc33c885073c47001b4b45be5f1afd612fe1e","sha256":"8a4bdb6cbf87c35bd1c64427b6ff1816d4b4bd4f90fec75b86c62edcf9a61eac","sha512":"f368acf279ba2cdde23c0be5a26773335dd4bc1367f2bc592a3ee383c44af5a4362265017169a15aa5b8557ed203fff33a96e418b2fe7d533ecff54728635f25","ssdeep":"384:raGByiI6+YRseP66Cpi4d5iCazVbCTo8FmgxXNyK1XinjuT//fJ:rautI6+YRsC6PsvxzJCTo3gxXNz1Sn6l","tlshash":"bfa21bb92e10203997bb85dcf3a64498a10d3821e542ebe4e5ed6d2406efed41237b3d","first_seen":"2026-08-28T05:09:58.58449Z","last_seen":"2026-09-01T20:54:52.67676Z","times_seen":33,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/logger-M1XavGiO.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.785Z","timestamp":1788296034785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/logger-M1XavGiO.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"55dee51c6f6a9a664a8da599d90eda00\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:26 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640185\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac96e1d56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":261441,"size_decoded":92472,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65531), with no line terminators","md5":"55dee51c6f6a9a664a8da599d90eda00","sha1":"ea911101593d9e95b06ffc9ad9781c715f286bce","sha256":"d521cb15322634d83c21f398711fb4763446cc74ebc44a35a554a7f8859fa460","sha512":"c12129c1903706e69dfa9e2cfb8f53fc23ef18ba7e3f456340a26da9b765e1fd512be5d2c7027d97c48758a9157b77908e33505a6e2a30bdf2d2326c18bb2f62","ssdeep":"6144:rCWqV4JnPivyA+MXjNqJ0MAgDzqtnAGJK5NeMwHGJJ:rCNBwJAEqQ5sMJ","tlshash":"8a44f6c471c6b16243a355e8903f0109f63e2964784cc498f26eddda3c76c8a967bf7a","first_seen":"2026-08-26T15:23:24.056535Z","last_seen":"2026-09-02T03:21:21.90656Z","times_seen":43,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-recaptcha-C1-k4II9.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.797Z","timestamp":1788296034797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-recaptcha-C1-k4II9.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"4fc518860b1f10743724eceefb51f9a0\"\r\nlast-modified: Fri, 21 Aug 2026 09:14:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 991392\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac97e3856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2427,"size_decoded":1780,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2426)","md5":"4fc518860b1f10743724eceefb51f9a0","sha1":"62ed751980c30a6e7ef8b49d81b8644ff50498fc","sha256":"dfa4abcd31678707b89c25f2bbaf0b3c3761209dc2e461e2cad628d8982a84c3","sha512":"2d371b4d453d7cff283813fdcfb4eaceabf5ac793b232bbfc5252ac270f50f2b1b5771afa771a62d713343a733f8ac744d36664221f464a1a3bc18f30ab2b9f9","ssdeep":"","tlshash":"4041971182519bfa0d195942f13a63c8f7a0025af014588835ac4e76b28fdc3c78ffed","first_seen":"2026-08-21T18:26:18.570301Z","last_seen":"2026-09-02T23:44:25.2884Z","times_seen":57,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-src-to-imgproxy-picture-C0cE2EmZ.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.853Z","timestamp":1788296035853,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-src-to-imgproxy-picture-C0cE2EmZ.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 25 Aug 2026 10:52:27 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640186\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"a47b6a81e5282b1bae86e0b6615206f7\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0186b56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":794,"size_decoded":1001,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (793)","md5":"a47b6a81e5282b1bae86e0b6615206f7","sha1":"cd26f4741784dc4c317c654c937aa1ad08e05f05","sha256":"be9c0bed849ddd286c804334c72b122d4566a28e109704f6b9e09f460260df88","sha512":"f3f9311b2db7b45273bf3a31083cd1861124a9eb5f69a699049824348d73cb0d86a7bd1e01c51d303bf6b22c5c330d037886c4534c87d1405792b3df6fe0bd28","ssdeep":"","tlshash":"3e014170a6d495b0e77088e81220c173f13c3e453a2ce6d1f1ae185f593a05281a7c1b","first_seen":"2026-08-26T15:23:24.127305Z","last_seen":"2026-09-01T20:54:52.682195Z","times_seen":40,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/content-load-error-Ck9uZ66Y.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.919Z","timestamp":1788296035919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/content-load-error-Ck9uZ66Y.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"c62764120e840fa748e26a5740469c68\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nage: 453648\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0797a56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3160,"size_decoded":1731,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1661)","md5":"c62764120e840fa748e26a5740469c68","sha1":"cb24b1accab99adafed4f814ff7e785aef701af3","sha256":"0845d3041f76f3e9ab72d4bade614e51556c9d3b86916314a41061370980dcb4","sha512":"b4514cfc8f64079b521b5e4fade6fc534bccde05def471b126a3d1d9d13be1236dd8d90fafd42740c65171b0732f2789bd7f6fdcb77dd63489069b5101a81a54","ssdeep":"","tlshash":"62517565ef64d138f7775c8e2b297008d058c1abc527e4f8d1a5831c9ac6bea07a4f0a","first_seen":"2026-08-28T05:09:58.63059Z","last_seen":"2026-09-01T20:54:52.683922Z","times_seen":34,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-CpOnMf3S.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.946Z","timestamp":1788296035946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-CpOnMf3S.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"ad02643f0a9315164937a83b07e95986\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0a9de56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4281,"size_decoded":2674,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2679)","md5":"ad02643f0a9315164937a83b07e95986","sha1":"b309d5dbe33e9c778f929b6797b2b369a9f3c23e","sha256":"d4ff77d05119f097354633b35498a57d1a2191b0db22ea8a21ea77c48cab6e05","sha512":"9a9fe7c94820e1b46afcafc3f649c426b0ef15dabee75cea036307719061af58b356426cb33ec544f17587d191aa104d0756ce5111a0ea30aad9c366f58927b5","ssdeep":"48:jOQO6eiqxef/PaIrfFa5+zKX5pIzPO8XdXMdYNno2Oe3UJPrxnfuOQwKks0uNvO1:jiYf/Pa4fXKPyPO8FNsPDHmpN3spay","tlshash":"4491b54769496d7a02bc0d88dc2c60e296f44b92f515c6ccfa7e0eb93690c59406bffb","first_seen":"2026-08-28T05:09:58.414638Z","last_seen":"2026-09-01T20:54:52.685856Z","times_seen":34,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/gift-BnKIc5zy.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.000Z","timestamp":1788296036000,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/gift-BnKIc5zy.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"4c06580958d8214ba03ad507a08606be\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nage: 453648\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad10a6e56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1248,"size_decoded":1234,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1247)","md5":"4c06580958d8214ba03ad507a08606be","sha1":"4626f35225a17f6665c58f49754d378957d10f33","sha256":"71b53897c386adbc69f3a282ea1e1247671750aa9509865f25f067b0f6b7ec26","sha512":"cb79e6a486603a7b7fc8e008a5741a2bda69d22122a0eb3764b5115ddc553e1071f6d76228854dabb4f8332bb288116cb31cecb2d36b750a0eb597094a0e1337","ssdeep":"","tlshash":"3e2135e02360d6ac1a57e75acf38bee4526f159a3395c5c14e8ed7b901d39b0f806800","first_seen":"2026-08-28T05:09:58.681588Z","last_seen":"2026-09-01T20:54:52.687207Z","times_seen":34,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/dice-DP7hpcFb.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.001Z","timestamp":1788296036001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/dice-DP7hpcFb.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"7f8abff7f93eefeb06fbe22487c6bd98\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad10a7056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":947,"size_decoded":1014,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (946)","md5":"7f8abff7f93eefeb06fbe22487c6bd98","sha1":"af9c9f08962891b3ecbc896c155e398a672772c9","sha256":"04e3bb597eaac0f7054183148667696820571c9a6e339761cde7a0db4e5ed868","sha512":"a076eb3622a9946d6211671b1f35c7cca9dd3f45c71876cc906f8c57934f298af18f577f8c1591c68025ec648324a1c6b5493992b3feadd7275bb098b032e8d8","ssdeep":"","tlshash":"1611bdeb6e5595bcc6ab49f9ce3a36010f97926a325d0059f7dd26770087950c483c50","first_seen":"2026-08-28T05:09:58.407492Z","last_seen":"2026-09-01T20:54:52.688315Z","times_seen":34,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/process-billing-schema-BzxpfwX5.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.765Z","timestamp":1788296036765,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /resources/v1/app/assets/process-billing-schema-BzxpfwX5.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T01:18:14.47199Z","times_seen":18246362,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d21deilz814qgl.cloudfront.net/7af480f8495afb022c86c4-800x34411.webp","fqdn":"d21deilz814qgl.cloudfront.net","domain":"d21deilz814qgl.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.238.66","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:54:03.231Z","timestamp":1788296043231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /7af480f8495afb022c86c4-800x34411.webp HTTP/1.1\r\nHost: d21deilz814qgl.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\ncontent-length: 46566\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 27 Aug 2026 10:46:54 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-disposition: inline\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 01 Sep 2026 09:01:26 GMT\r\netag: \"eb4f2d88272720d899456aa04843ed45\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nage: 42758\r\nvia: 1.1 183a9e2085d5a9255c6d0724cfd9ec10.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: VZuQdqTxdp4K9eX7NvipYerjlBFpqKpfDXOLApG-X1qpO5hKUH_zsw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":46566,"size_decoded":47131,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eb4f2d88272720d899456aa04843ed45","sha1":"778cc41456baaeeaac8ba62d52f17132494ea4e1","sha256":"425749731c5da0c98ff670257f44e5138d5b8dc41e0f0450e369bb2ca727da92","sha512":"ab33b375dda80276428bfadce93779313343e6daf9792d45f83f6c7194aa917480d4a5715fc0489e95e18120e1c14c3961134066cecafba2367ac23c03cd268f","ssdeep":"768:v0g/wOJ8JQ1H+Nd2O4AfKH4XPfHsRZy7KiNjw+W7QrxWm2VjBOrYwfYTty6dtrry:8M6W+NxxKHcHH4ZQKiNxW7QrEjFOr/6a","tlshash":"1323014b15645f88359b9841fca5220bcc029f0491bd35636e1e23b7fbe8e1ddbc688a","first_seen":"2026-08-30T03:00:27.66272Z","last_seen":"2026-09-01T20:54:52.689599Z","times_seen":5,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":16,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d21deilz814qgl.cloudfront.net/26d46a49cfbd85926b27ad-800x344.webp","fqdn":"d21deilz814qgl.cloudfront.net","domain":"d21deilz814qgl.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.238.66","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:54:03.237Z","timestamp":1788296043237,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /26d46a49cfbd85926b27ad-800x344.webp HTTP/1.1\r\nHost: d21deilz814qgl.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\ncontent-length: 56488\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Tue, 28 Jul 2026 09:08:39 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-disposition: inline\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 01 Sep 2026 05:45:08 GMT\r\netag: \"0e22d5262269ffbc3c3f3aefe2c96286\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nage: 54536\r\nvia: 1.1 183a9e2085d5a9255c6d0724cfd9ec10.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: zjjBKltXFXOWfaSNKKFDDa1IbOLkmgKfJF0Ouc3oCWPd0gUZXDGI7Q==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":56488,"size_decoded":57053,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0e22d5262269ffbc3c3f3aefe2c96286","sha1":"9f8c8682e9fa3eea79135e58b283e1757414a96e","sha256":"381780e90c48d3d8efde3758369cb380ace225daa963a1cfc3f5c8a1d722d7b1","sha512":"edfe4e1d135a7ec91bd2d56e334c81e8f4b242da00df3f1709312d657e1039c94abcdb1eb5dd208f3b71a7bc4c70b1ebff71684ce2368dfb2999da2f584fb7e4","ssdeep":"1536:d1lGxCoMacWlW5HFCnTBVii5fFQq4O2oW:TlLablWzONt5Kqt2t","tlshash":"0b4301626b6196f19bc7243c2445ac6d4efa5f0f5a6f02e356cf6e7140e3030cbe64a6","first_seen":"2026-08-06T08:10:47.116725Z","last_seen":"2026-09-01T20:54:52.691153Z","times_seen":42,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":14,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.900Z","timestamp":1788296034900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/setup-amplitude-Tt5y5fuG.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"1c1e599c09502bd77be1c54d0a72b04d\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640185\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca8fe456b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129598,"size_decoded":38157,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (45147)","md5":"1c1e599c09502bd77be1c54d0a72b04d","sha1":"1c04624987470d8bbbba55b56cd181aa1b4d9ce9","sha256":"9c80f7ee8d9263b33c797485109632532790a7ebbd71be021def5c52519403d4","sha512":"a3a8362138d9c6b79e13c4726be733c7a7cb1f2ca0763d5622d5565559d91f4b8592a7e47d8d260bd043ed3c0f095a0bb7525e2c372029d2895729886ebaac2e","ssdeep":"1536:Wdu4Yet//IC46CggzkSZ0yqdCYYpvdP+VL1MOGWdjtahFNRwmIQcT1z7CP4:WKedAxg6kK/qdCYYpvdP+VsWdj8hyzc4","tlshash":"c9c3b6cdf68bb4750387e5b8d07f1216b23e3e89641c4028f56bd8d62e796098137bb9","first_seen":"2026-08-26T15:23:24.099836Z","last_seen":"2026-09-02T03:21:21.913288Z","times_seen":43,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/api/MS-SMALL-THINGS/web-v2-banners?localeId=1\u0026category=main\u0026tzOffset=0\u0026country=NO\u0026u=0\u0026locale=en-001","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.785Z","timestamp":1788296036785,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /api/MS-SMALL-THINGS/web-v2-banners?localeId=1\u0026category=main\u0026tzOffset=0\u0026country=NO\u0026u=0\u0026locale=en-001 HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nContent-Type: application/json\r\nTraceparent: 00-a89ba894a4642ff2db3785be07592c7c-05c34cb899b20ab4-00\r\npage-view-id: a89ba894a4642ff2db3785be07592c7c\r\nX-Origin: 1wfqxn.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T01:18:14.47199Z","times_seen":18246362,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-4JWgXt0K.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.893Z","timestamp":1788296035893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-4JWgXt0K.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"d5aeb6a2459e1e085c39d9e2be82ae86\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 18116\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0590856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61916,"size_decoded":18679,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34266)","md5":"d5aeb6a2459e1e085c39d9e2be82ae86","sha1":"373cfa78263e85cd71a2925c3580f2f8bd0da611","sha256":"b53555a2c06529c63f6f97a81c34cb9b0084a9ad5c6fdb5e4e112b21915e9d96","sha512":"cc141ed936441a7f75635bb6294fdbd3a54dcc6bdcd74e4bb0d2e40213f6b680ff7d2529f0f4c06d60c669c474ec822fc1d2eb20fe8a565d7c2f8e5e95945086","ssdeep":"768:fotWi19tGkIRHz+dm+5pRz8nVUJYZxmEevK/ynK+mSkCwO1Nf7eswQcEejaPWZbX:fqYDqzTeAAjxF1/P","tlshash":"52533b41bf50a178173b1c68ecea055012b95f197407c5e9bebe2d2a22caed4c1b7f36","first_seen":"2026-09-01T20:26:35.129072Z","last_seen":"2026-09-01T20:54:52.696316Z","times_seen":5,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/game-history-section-lobby.vue_vue_type_script_setup_true_lang-Duuzd53i.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.586Z","timestamp":1788296036586,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/game-history-section-lobby.vue_vue_type_script_setup_true_lang-Duuzd53i.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"99c7878f3ba1ee245a76540449cdf0c9\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 18114\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad4af9a56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2915,"size_decoded":1920,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2914)","md5":"99c7878f3ba1ee245a76540449cdf0c9","sha1":"88bea6a6857e99d0b6ae15fe381d9743ddab42b1","sha256":"d219670f5ef3c43adbfeb48c60c499d4014472c6241ad54d90322118a2d1337b","sha512":"62ae1039baec86efba1176ca246efbd7457ae6eb62af1aa1959340dbb1016dc0531f691967c8757094cc0b0cedd93a5ea6bb6e0243a527db724611ae5fce959c","ssdeep":"","tlshash":"e051a89aeb384cf65d539eec495020246718426acb61aed0d4ffcfb117f94c8d46e509","first_seen":"2026-09-01T20:26:35.127767Z","last_seen":"2026-09-01T20:54:52.69771Z","times_seen":5,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-oauth-finish-BJwEzY86.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.800Z","timestamp":1788296034800,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-oauth-finish-BJwEzY86.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"f630aae50fcdd4cdcb23aad198fa0350\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac98e4156b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21319,"size_decoded":9078,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21318)","md5":"f630aae50fcdd4cdcb23aad198fa0350","sha1":"e3001b3c752bdfd9ead3957bb3d0a09f7d3ac436","sha256":"0c64888aeb502240d14e4ff32e525714f09cffa94301f49ebe3273d7d23ba14e","sha512":"b56d84e6e9e43d0a7ace71f7e44de5a2a37d72d169b7b0f6633831fa2ef0da02ce6734f3cc9e625ec437ff3df6a79b34841ac8307cf202398dd20c898f7a5d9a","ssdeep":"384:sdXijiXxMxuasgAMzU8r4m9PIUkw+FPIkS5Akm1Sz0CBbP1pY1x95kQxMAEm7iH6:iyjixMxBsHMzU8r4m9Psw+FPIkS5Akm/","tlshash":"32a21a92e1b365f58ef344c4da293270e2280d14b80ddae0f5ad9e1b146be06957ff2d","first_seen":"2026-08-28T05:09:58.660395Z","last_seen":"2026-09-02T03:21:21.932317Z","times_seen":37,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/button-DBMjOvRF.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.812Z","timestamp":1788296034812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/button-DBMjOvRF.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"2c678e3ff2dd22d1e7cc17d14391b8af\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nage: 453648\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac99e6056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13428,"size_decoded":4007,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9778)","md5":"2c678e3ff2dd22d1e7cc17d14391b8af","sha1":"976cf468e2c46d9ec071dcfea76f0762557fad6a","sha256":"5d51e3874e0fbb5ecd2ba9e1fed2633274be88c3ee50548cc10b5798f1b71e11","sha512":"aab145dafc07a1d569f194dd818e7dfc6c23c5e32586a967ffb30c36a8f12593531e07ca765b611ed811b29b6685ace1f9d4162ea38512e95b3ff79b5682eb57","ssdeep":"192:vQ2U+dUABylBWJSjEhMlSWu9qyzSUt55Q4:vhJ90lB1jEhMlbuxSUt55t","tlshash":"ca5285aee600f53dbf93960d531da0ec930ceae5a5115fe4f06458286bc2be162d7306","first_seen":"2026-08-28T05:09:58.807854Z","last_seen":"2026-09-02T03:21:21.902918Z","times_seen":37,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/checkmark-DqDOOLD8.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.823Z","timestamp":1788296034823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/checkmark-DqDOOLD8.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"204b7fc16c32808d0ed595e0a2c41003\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac9ae7f56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":396,"size_decoded":776,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (395)","md5":"204b7fc16c32808d0ed595e0a2c41003","sha1":"a78088c4591c9510e28fe3482d6238f017f727df","sha256":"fc7cd5fe615681ff620963c232911bf9ad944d917887afe1e5a257aa8768d958","sha512":"f1c18f75c3f09701c2fda8c2ae7d1fc37eebcfc095875044e1efac3fe4dfff4b27e661aee682e2bfb281cec1497094060b0ea2a648c13f21b597fc30d55670bb","ssdeep":"","tlshash":"7ae022ba02491eb8402b8938c63e0d92470c1eeb3b8484d1830e2f3a46d61f4e94fa79","first_seen":"2026-08-28T05:09:58.826792Z","last_seen":"2026-09-02T03:21:21.885037Z","times_seen":37,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/arrows-BdKBWscS.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.966Z","timestamp":1788296035966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/arrows-BdKBWscS.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"32c2a4d835a5573c975514e932845407\"\r\nlast-modified: Mon, 31 Aug 2026 14:52:26 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 106642\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0ca1c56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1528,"size_decoded":1293,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1245)","md5":"32c2a4d835a5573c975514e932845407","sha1":"d277f53309469a3236d4c1f3a9e39df37b08a8bd","sha256":"6b23c2ce9c99d5c049adaa90ced14ddddc82beb9a9ce516a6b9122dd0af72a21","sha512":"913796d0dd68fbff01f56e3fa7c194f822478786e686afc84622a6a08b9ccc08f6b8e3c1369a9af750bcca1af8c8acd7860c4037b3882e40c75057593f82523f","ssdeep":"","tlshash":"fb31871b6dbb5d7159574009d63ed263661d037feb1634d052df0c3c0bae9b14006d94","first_seen":"2026-09-01T10:21:13.343971Z","last_seen":"2026-09-01T20:54:52.702052Z","times_seen":6,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-BNFtgC1Z.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.967Z","timestamp":1788296035967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-BNFtgC1Z.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"a0f884b770acfa31471e644737bd90a3\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 18116\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0ca1f56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2673,"size_decoded":1846,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1430)","md5":"a0f884b770acfa31471e644737bd90a3","sha1":"fe829e2553b7772604b1b67a73ff8e9ecef6fa3c","sha256":"f285f939cdea70f62608491f650eab91bb879d06af9b9aa978d9f9ccac7df7b1","sha512":"8e74ce03d886bfb48dd838ebab9e153f607e53d0f0c8dbe6c2d5765e44f1fe71e06da7039c34f0376d41aef095222b014be407afaaf6c3dfb62be7a9f8837173","ssdeep":"","tlshash":"2051720aaa98acf501bdce88ec62b5e148f18781d240c98cfe365c7c3590c75805ffb6","first_seen":"2026-09-01T20:26:35.019401Z","last_seen":"2026-09-01T20:54:52.702687Z","times_seen":5,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d21deilz814qgl.cloudfront.net/3f13dbf05bf57f1e92765e-800x34430.webp","fqdn":"d21deilz814qgl.cloudfront.net","domain":"d21deilz814qgl.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.238.66","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:54:03.238Z","timestamp":1788296043238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /3f13dbf05bf57f1e92765e-800x34430.webp HTTP/1.1\r\nHost: d21deilz814qgl.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\ncontent-length: 58816\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Mon, 10 Aug 2026 19:53:13 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-disposition: inline\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 01 Sep 2026 01:53:53 GMT\r\netag: \"6fa35094e5d5381406b4c2c2a1c85a4e\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nage: 68410\r\nvia: 1.1 183a9e2085d5a9255c6d0724cfd9ec10.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: aLjXCMxRF7d47ehDVrtfwhrSq_Qv7HaY2CN5TgLo2w7YQDldezPaLA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":58816,"size_decoded":59381,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6fa35094e5d5381406b4c2c2a1c85a4e","sha1":"889c047f127421aafc04baf69fbf079c26e169d5","sha256":"cabbdf9ca6a325e7437eaa10c167ead262c17b1d724ae0c080692748fcf7548b","sha512":"911ba4ff19cff3b4ddb2887bfdd269201992dc71d7f54cfcf9c65d3f4855dcb4b8d82d7893e025c03bb75611113b97a39816dcb2ea74d68fe46cd5eb0019df3d","ssdeep":"1536:5rUoMDJXEn+PqdxzMEIZ1ZZTnbDNU+3PRs:teXG+SIZV/DbRs","tlshash":"274302e24d24d8ea7f8e1ec00dafa5cf1d607323381757690d997885f54c35e2aa63a3","first_seen":"2026-08-13T05:18:08.691097Z","last_seen":"2026-09-01T20:54:52.703311Z","times_seen":32,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":14,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/email-input-D2wP3Lq-.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.866Z","timestamp":1788296034866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/email-input-D2wP3Lq-.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"b7004c1fbd9ff23bea2ebe709b7f5c04\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca5fa656b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12619,"size_decoded":5519,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11867)","md5":"b7004c1fbd9ff23bea2ebe709b7f5c04","sha1":"331f074351fe38c23b33092fbd42138904df6dee","sha256":"3f8cc199226982fad208a0d31b7debd2a2d7e684c0bb5b766a88598a0d385416","sha512":"4acaf64902428a7c656e48f72d81918dcc0b82e1212bfc39fbebdba532220cb6eadfb77f5f6e05298eb21b6182710a12f9d156b68ab1e7da3f18834de6618504","ssdeep":"384:uIAOiu60UqrFC1DbsWqjfD5RrL/Mhd2zpJZ/rwJHthRpej5uC:uISu605rAxbcjflRrLMdGfZ/rwJzRpeN","tlshash":"9b42d950b5d4adf152d208dc283f7418e87aad342159f0e0f3af9de12fa4b4191b6e4d","first_seen":"2026-08-28T05:09:58.563973Z","last_seen":"2026-09-01T20:54:52.703924Z","times_seen":36,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/footer-partners-link-D-kUgnsj.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.498Z","timestamp":1788296036498,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/footer-partners-link-D-kUgnsj.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"c225c3d2fb8f4cb91155a760a2651a71\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nage: 18114\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad41ecf56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3351,"size_decoded":1996,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2110)","md5":"c225c3d2fb8f4cb91155a760a2651a71","sha1":"45358a901a9380cafff78333e11e5b853e88edfa","sha256":"41eea658d79230c85e15c9b666db4483ac968c5c6aae976dc9681768cfa3ee36","sha512":"f473e2ff2facc782c24749684442983a9aba2a7e39db9eb318d119b794112c319e7470a4bc12ad7e15c237e7b39ad47fb0a3eb68f86938596b312597bb726d4f","ssdeep":"","tlshash":"816196a1bd648c7412635c41f62d3146c658ca7d8a5590dbe2cfab3807f3fc922d7709","first_seen":"2026-09-01T20:26:35.137677Z","last_seen":"2026-09-01T20:54:52.704519Z","times_seen":5,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KGKQDC7","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:54:02.517Z","timestamp":1788296042517,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtm.js?id=GTM-KGKQDC7 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Tue, 01 Sep 2026 20:54:02 GMT\r\nexpires: Tue, 01 Sep 2026 20:54:02 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Tue, 01 Sep 2026 18:47:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 164655\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":493116,"size_decoded":165305,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (20526)","md5":"c402ce97b36d0b7a5f1877862db70a46","sha1":"f7bd8f5797799d4ce91901e73992200cddc3b61c","sha256":"0d139880195ffcb5ad5f5a4c13fd93d013950107e5358f7427d0d94a2499e6fd","sha512":"075c2c5dee55f163cb29f04af0fd79d4855403863820b9493f2fd73751dfb74825a85ae4932594fb7eb2dedab51f4071e2d5bb7996577f5e717297eec120f2ce","ssdeep":"6144:hld0KIrxbm+Lo0wKvMkcrsA/2EgD3Yj3WfVM5/sFD:UrM++Sk3QMKh","tlshash":"66a419cdb3c6b46293a2b574903f018f727a29a2b84cd894f289dcd42e3465a5177f7c","first_seen":"2026-09-01T20:40:30.208602Z","last_seen":"2026-09-01T20:54:52.705124Z","times_seen":2,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":3,"connect":15,"send":0,"wait":41,"receive":60,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-server-event-ZyQuN_gS.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.797Z","timestamp":1788296034797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-server-event-ZyQuN_gS.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 25 Aug 2026 10:52:27 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640185\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"63ac57132a2fc3f9e9a72d6926bbf861\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac97e3556b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159,"size_decoded":617,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"63ac57132a2fc3f9e9a72d6926bbf861","sha1":"9d09c2a75c755b32cfc34d53b0be256d5557f348","sha256":"4148eb5e0f432fdbba5573e9d5f6e7d3f3e6c26414dbd5035a231db559c1f8af","sha512":"d84d9da5228c89f64c69b7d4efb360ff52286c67b74c094bcf27366c417abe21970484c001f28c78c52c22c271755b3e96525cbc96c5c3bdf48258d5d79706bb","ssdeep":"","tlshash":"dcc08c274c5280f8387d98d9be1484328165228933129ad8181c4a638a0b0e1841fd5f","first_seen":"2026-08-26T15:23:23.853913Z","last_seen":"2026-09-02T03:21:21.928476Z","times_seen":43,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-feature-flag-items-DScmMJNx.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.932Z","timestamp":1788296035932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-feature-flag-items-DScmMJNx.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"717418db3da1aa0ec1a1828ea1db6816\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad099b356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":752,"size_decoded":928,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (751)","md5":"717418db3da1aa0ec1a1828ea1db6816","sha1":"3925f89ac496ddb381184427aa555cbff2fdc747","sha256":"a62e60d596149d267345fa9875b24de8d0512f9a27bd0385b8c14b9fc7477e91","sha512":"d28155efc9f5179040b033982987e79443b37f100a045ee631d4e59ceb016af503aa864171ad5fded48e7fccdd3c57bff1309f9bfbe424dda65abfcdca8afa15","ssdeep":"","tlshash":"4101c06d38c9a038c64248e65431e627b79441e2b254edc4ebde467786fb8d6c06ef06","first_seen":"2026-08-28T05:09:58.721654Z","last_seen":"2026-09-01T20:54:52.708824Z","times_seen":34,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/button-BUFP4tSt.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.964Z","timestamp":1788296035964,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/button-BUFP4tSt.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"68f68075d4f1053bc6888c4b47f5a132\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0ca1a56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1170,"size_decoded":1214,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (840)","md5":"68f68075d4f1053bc6888c4b47f5a132","sha1":"66fa53a77dc64382ad4456e33d905e3db3b399d6","sha256":"b3f25c88f2026ec3b7df0d783ed62a6c1e4dc6ee364c0095e812d9c2eddcbf42","sha512":"5740ad8a5ae86af3b1cb324025ca578071c9373438166760365abe11b757bab388877c846d70413930a554b944867d771cf850b4d2492d993e91e26b71d594bf","ssdeep":"","tlshash":"cb219315bcba0234131b005b123de062784425bfa77738d482fa8cb503dccae906fa45","first_seen":"2026-08-28T05:09:58.794414Z","last_seen":"2026-09-01T20:54:52.709691Z","times_seen":34,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/support-section-icon-DA6tJ67K.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.871Z","timestamp":1788296035871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/support-section-icon-DA6tJ67K.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"501c570a528d32e52762b9b767d844d1\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640186\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad028b956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5325,"size_decoded":2344,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3162)","md5":"501c570a528d32e52762b9b767d844d1","sha1":"b09533cddb9fed17461d426eac4fc4c9b909d6e5","sha256":"62722fcf61006d8bfff04e1619e5aebe7a198b935dea17516364768a354c1152","sha512":"7b480a97240940fb756fdb3082234bb43b8896b3a66abe3ebc024a9c55d84f1276f7eeba39a15b4bbc21fcbb59fd5c318e2d7ae8c0ea2ef120c0f7db9687ecf4","ssdeep":"48:sIBsA6AnbDFDGI1asQGgGVn8cpiQnk1Xh5S/MP/edoL9KrPDKpSHjMPrjQA9ccml:sIBYcbDFS6iQk30owDLDFcmCj4","tlshash":"a7b193447e70f6b4c5232c7b731ab40b482de1464bf2999e9531a6590ffebf5c10228d","first_seen":"2026-08-26T15:23:24.087262Z","last_seen":"2026-09-01T20:54:52.710703Z","times_seen":40,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-table-controller-DTBTrNZi.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.978Z","timestamp":1788296035978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-table-controller-DTBTrNZi.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 21 Apr 2026 12:13:31 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 1294732\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"9525ed0c4d4922e799cb4cb5d10e2d32\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0da4056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":962,"size_decoded":995,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (903)","md5":"9525ed0c4d4922e799cb4cb5d10e2d32","sha1":"41dc4d4564916890360f130ad35bea7f6486c4a1","sha256":"c35719279cb1f10ecb252962ab224e8862edac934223c8cf40051464b342c093","sha512":"a50189cc56f17c1ef826f32e4de8acad4de8e45ee37777c6dc78b9db65fa49b51a5e82ba970bf8e9c3029d994230f1132804f31fb673110901abcf6c87516337","ssdeep":"","tlshash":"4b1104057b159c7881decf8da86056e9e15a119ff62341f86126dc780491fc5351ac7a","first_seen":"2026-04-24T05:21:35.06993Z","last_seen":"2026-09-02T23:44:25.302294Z","times_seen":640,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/title-placeholder-BTEx-YBL.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.564Z","timestamp":1788296036564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/title-placeholder-BTEx-YBL.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"f71ccbe1e96dd3302522cd969bcae18f\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nage: 640186\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad48f7856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1387,"size_decoded":1131,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (786)","md5":"f71ccbe1e96dd3302522cd969bcae18f","sha1":"0c1fac7fad7361190078af0085d3fc55aae04464","sha256":"a415715ed177ceec04fc28a05b272c2583c09bd592a8ac70b33913ff3773e7c7","sha512":"797f1c0e01beb29e5b53c696388cd781e864291ed0fc2ec410b479122f4242688b227ee9868d3ac2ed87dc74abb0935e9862b462d3822dc8a210645cff108fa7","ssdeep":"","tlshash":"b221531cc928c7b81422d01b577cce89793c302b9bd138f445649e3a1fe8de2c172180","first_seen":"2026-08-26T15:23:24.3848Z","last_seen":"2026-09-01T20:54:52.712893Z","times_seen":34,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-casino-category-analytics-CvnRMDdB.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.571Z","timestamp":1788296036571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-casino-category-analytics-CvnRMDdB.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453646\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"f75413186e1abbc0424ed70e3ea9090d\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad49f7d56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":333,"size_decoded":730,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (332)","md5":"f75413186e1abbc0424ed70e3ea9090d","sha1":"a5f544da1fcb4434cb30fdd2eb102b22c4cd40d1","sha256":"dd5e98b563885db399f1da66b9367dc5100a1403755c7ee7bac2c40ef42930d2","sha512":"491fd7c73292dbadabddc3d096c19ec9077cefc1e5c818a7488557c37bbab25de63e38d3d00b46140baa455bb00e7c856950e7909e71b9d6adaadb4099ec24a2","ssdeep":"","tlshash":"88e0267f80ab50f0580a4cfae129cd36113045a263c1fd90a0deee740f96592928da06","first_seen":"2026-08-28T05:09:58.482134Z","last_seen":"2026-09-01T20:54:52.713963Z","times_seen":32,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/skeleton-c8_FFKl0.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.837Z","timestamp":1788296034837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/skeleton-c8_FFKl0.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 25 Aug 2026 10:52:26 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640185\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"4232aeba152f284999755e31f4b76614\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca5f7556b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":864,"size_decoded":998,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (488)","md5":"4232aeba152f284999755e31f4b76614","sha1":"12e0b95d9c17b511fe09fd0743b54ac8d7e2c5ac","sha256":"449af805f504103c3e63392c1676bdf4c02cbfa7e0be4c9ec4229ffbbb1c6738","sha512":"e722174a2ab72c2a209d10ba0a1dc3fafe894324a4fbb4f63feba7337f8f9b9def60cc8beca229be5ec153f5e5fa299c78895ce91d45fec7321fe833990e0bbb","ssdeep":"","tlshash":"e611e314afa480f461975057b23ce6e0d86e54b35711e575427efcf8278499c412ba84","first_seen":"2026-08-26T15:23:23.909645Z","last_seen":"2026-09-02T03:21:21.904141Z","times_seen":43,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/clear-redirect-params-DUWjXPr3.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.856Z","timestamp":1788296034856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/clear-redirect-params-DUWjXPr3.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"6e3f906fcd2254d7c61c34c8082a99cf\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 18116\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca5f8656b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2127,"size_decoded":1415,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2126)","md5":"6e3f906fcd2254d7c61c34c8082a99cf","sha1":"3cbc92a908c4a1c25ccc41693a1c68db9593c123","sha256":"a5b59c1f79610ac9b4534e67a7c00d85f7a7bfc0b7390929122ecc989a7bb541","sha512":"38e53cf54e17ec88606a391d76ee025c08e727e44744d6a961f3e02c06e130471ebd8db8c8ec473abd66593c0b0053f845fcb77414c815dfd7d1462208a39043","ssdeep":"","tlshash":"ab41be1ceca9fda105f044dd7070f665263dd2c0331aebe5b82522e1e53bd9a5732a49","first_seen":"2026-09-01T20:26:35.023414Z","last_seen":"2026-09-02T03:21:21.908123Z","times_seen":6,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/language-picker-ByjyweIu.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.923Z","timestamp":1788296035923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/language-picker-ByjyweIu.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"e6708cb2a23a61b2e3412cf23d1d5b8a\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0898856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11972,"size_decoded":4385,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6061)","md5":"e6708cb2a23a61b2e3412cf23d1d5b8a","sha1":"de7a12b682e5dfd039e0b6def5e5f4f35a20d31e","sha256":"57e540811f5bbe20978de9644480ee2c76e30650e6ef07f7df074e834edbecbc","sha512":"c13f81517f6b1f8fa84df8f32434f5182aa31d39554ba0646141e3df143bd5fa88fbf79d9e74eccb9b418b56e2234e31e9b88878f084c92b96032d4820c1eea5","ssdeep":"192:v27KZ6zwkZf1zCgEwaxiHg4XCP+5QEwd2zhcxiwkEMG7r0FEAcD8RTY6D7FSXwuq:v2vskra4AJ+ud2t8kEMXWUSAuJOwIP","tlshash":"9b321948ba11e638b6735e093794788cc0286f6a8a99bdfadb57502503cb7fdd1c7b04","first_seen":"2026-08-28T05:09:58.632171Z","last_seen":"2026-09-01T20:54:52.717126Z","times_seen":34,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-modal-DN7xCc4P.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.816Z","timestamp":1788296034816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-modal-DN7xCc4P.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"d5bded6821a0a694c23a758f4cf3bb7b\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac99e6c56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1226,"size_decoded":1089,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1225)","md5":"d5bded6821a0a694c23a758f4cf3bb7b","sha1":"1ae88c869f18c8b8539ee1c5170d9c3d53f90e14","sha256":"300ee5af93e47ba6ed090600f407f6ea5617f8cd0b3b78be6b51cffb9efd09b0","sha512":"b78c10ba967473bf1149719182eb53c87df4eeee4f38376e9fd6f7ba4c24e05eb04f4dbb031ad176e20fa6bb62b7fadda08531bb4667b2ff82200ede97f5ae4e","ssdeep":"","tlshash":"37210f5fce69aab8020be95ac49187bf973817e0d25ff1a3906e175822673c2431b81c","first_seen":"2026-08-28T05:09:58.442264Z","last_seen":"2026-09-02T03:21:21.912083Z","times_seen":37,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-scroll-container-C9YwbMXP.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.975Z","timestamp":1788296035975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-scroll-container-C9YwbMXP.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"7cd16b73d16a52383b3df571e3bd096b\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640186\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0da3a56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1375,"size_decoded":1203,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1374)","md5":"7cd16b73d16a52383b3df571e3bd096b","sha1":"e2abff419df2cc255915e5d7b57bbb79869f2ad6","sha256":"3a40799cc82b4739e59ca74896a1b058e8d90c1a31f00e6ca8a36cfa51dcbfc8","sha512":"cc3aa708743057d7a2f6c4973d937dfa42414c36115ad9a2bbfd67d06538363e69f2f0d4a12a6956b281ca44fc3151d5e5c9c6f4ea9c37a3018e9c8465770e1a","ssdeep":"","tlshash":"f72141020950603867ec58d7e866022066b102da3333e5d4f80d5e6b5a267b7b1bf70a","first_seen":"2026-08-26T15:23:24.064223Z","last_seen":"2026-09-01T20:54:52.718995Z","times_seen":40,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/game-card.vue_vue_type_script_setup_true_lang-dHhzIAir.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.560Z","timestamp":1788296036560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/game-card.vue_vue_type_script_setup_true_lang-dHhzIAir.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"056b5551578cfd08e047c7a396ca111b\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453646\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad48f6f56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4097,"size_decoded":2247,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2529)","md5":"056b5551578cfd08e047c7a396ca111b","sha1":"d972a622bc00a4e17e503d9f466a4a9eddc09bc4","sha256":"7ccb83687761f55be1e00fe275f9891cebe46a4092747dbb7d5e898d72bcbecd","sha512":"22324960114fa6ea444661088de9d24aa2464210af0f94742001fe2c406ac3f8cb4f1d3ffa1e7edb4a3e6aa3f497593ab1fcbe6cd8dba565e26e6425225133f5","ssdeep":"96:j/WDpwbvN0n5duPyN0fj8VdSA7nsrTscP:7WDpwbv6n5duPff8dB7sEcP","tlshash":"098174155e154af8047f4c034a3aba8450b84727d924e8b999a86d3ebfc3dfc817869c","first_seen":"2026-08-28T05:09:58.823212Z","last_seen":"2026-09-01T20:54:52.719748Z","times_seen":32,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.smrtwheel.com/visitorGame/89617691-60d0-48a8-89af-8f8b6b325bea-7/6c564985/en/517","fqdn":"img.smrtwheel.com","domain":"smrtwheel.com","tld":"com"},"ip":{"addr":"194.67.193.67","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:54:02.668Z","timestamp":1788296042668,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smrtwheel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 14:35:02 GMT","end":"Fri, 16 Oct 2026 15:34:56 GMT"},"fingerprint":{"sha1":"29:11:C1:5E:DE:62:55:1D:37:A0:6C:37:94:2F:D1:19:6D:F0:60:9D","sha256":"6A:B1:8A:15:B3:ED:C4:A5:0B:4A:25:90:F7:55:1A:1A:7A:64:A3:EB:2C:AF:69:80:39:C2:DE:6E:C7:8A:A1:A5"}}},"request":{"raw":"OPTIONS /visitorGame/89617691-60d0-48a8-89af-8f8b6b325bea-7/6c564985/en/517 HTTP/1.1\r\nHost: img.smrtwheel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://1wfqxn.life/\r\nOrigin: https://1wfqxn.life\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Tue, 01 Sep 2026 20:54:03 GMT\r\ncf-ray: a3472afaee07a0f0-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://1wfqxn.life\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nvia: 1.1 e16f7e277f02980794c00cd2fe44c0b4.cloudfront.net (CloudFront)\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-max-age: 8640000000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 64oXgYTPpM5ezEJi2NatCZjsqC1ErH_a5DDvvYQTfyU683bhZZ_Z9g==\r\nx-amz-cf-pop: ARN56-P4\r\nx-cache: Miss from cloudfront\r\nset-cookie: __cf_bm=Z9.woBCKigPGkXGMPd6KkzC7Wp4zfiday1KqWizPX0I-1788296042.7067313-1.0.1.1-MjsXZFAZ07Md.MlnjpmkVgbo1bHIbNalwUdnX36EtbonIHm.UDiTp05zCQ63Tv2YvL44srgm4B61tY9mJBF9jCCFu2umAjHdEs_5hTGZlMjFjeMSUDCsXtHYD2LqFdFg; HttpOnly; SameSite=None; Secure; Path=/; Domain=img.smrtwheel.com; Expires=Tue, 01 Sep 2026 21:24:03 GMT\r\nserver-timing: cf-cache;desc=\"DYNAMIC\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"Z9.woBCKigPGkXGMPd6KkzC7Wp4zfiday1KqWizPX0I-1788296042.7067313-1.0.1.1-MjsXZFAZ07Md.MlnjpmkVgbo1bHIbNalwUdnX36EtbonIHm.UDiTp05zCQ63Tv2YvL44srgm4B61tY9mJBF9jCCFu2umAjHdEs_5hTGZlMjFjeMSUDCsXtHYD2LqFdFg","quoted":false,"path":"/","domain":"img.smrtwheel.com","expires":"2026-09-01T21:24:03Z","raw_expires":"Tue, 01 Sep 2026 21:24:03 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=Z9.woBCKigPGkXGMPd6KkzC7Wp4zfiday1KqWizPX0I-1788296042.7067313-1.0.1.1-MjsXZFAZ07Md.MlnjpmkVgbo1bHIbNalwUdnX36EtbonIHm.UDiTp05zCQ63Tv2YvL44srgm4B61tY9mJBF9jCCFu2umAjHdEs_5hTGZlMjFjeMSUDCsXtHYD2LqFdFg; HttpOnly; SameSite=None; Secure; Path=/; Domain=img.smrtwheel.com; Expires=Tue, 01 Sep 2026 21:24:03 GMT"}],"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":965,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T01:18:14.47199Z","times_seen":18246362,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":29,"connect":1,"send":0,"wait":312,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"optimize.v3.bundlecdn.com/unsafe/banner_mobile_5x/plain/https://d1x0nzb6t1pnx3.cloudfront.net/banner-files/qrmGejMIJNpPoc2sWESfniZSvHK5sdZFnFlbS4xTHrs5dakTt9fI6aZs1QwF2d6kYgN9WEcRMvNPq1lU2JNnipnX8Za3EPqCyxnt.jpg","fqdn":"optimize.v3.bundlecdn.com","domain":"bundlecdn.com","tld":"com"},"ip":{"addr":"194.67.193.128","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:54:07.405Z","timestamp":1788296047405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v3.bundlecdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:02:01 GMT","end":"Thu, 10 Sep 2026 13:01:53 GMT"},"fingerprint":{"sha1":"1D:AB:1D:06:89:8B:28:BA:DC:EA:83:A3:78:E0:DF:46:B8:AA:3B:23","sha256":"EC:47:30:E3:52:BC:01:30:AA:00:6A:62:A6:81:61:5B:C6:62:D0:80:C0:46:1D:56:53:E2:A3:EC:FE:31:7D:F7"}}},"request":{"raw":"GET /unsafe/banner_mobile_5x/plain/https://d1x0nzb6t1pnx3.cloudfront.net/banner-files/qrmGejMIJNpPoc2sWESfniZSvHK5sdZFnFlbS4xTHrs5dakTt9fI6aZs1QwF2d6kYgN9WEcRMvNPq1lU2JNnipnX8Za3EPqCyxnt.jpg HTTP/1.1\r\nHost: optimize.v3.bundlecdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:54:07 GMT\r\ncontent-type: image/avif\r\ncontent-length: 54874\r\ncontent-disposition: inline; filename=\"qrmGejMIJNpPoc2sWESfniZSvHK5sdZFnFlbS4xTHrs5dakTt9fI6aZs1QwF2d6kYgN9WEcRMvNPq1lU2JNnipnX8Za3EPqCyxnt.avif\"\r\ncontent-security-policy: script-src 'none'\r\netag: \"D9Az74RL9gkueTxjVwFXRFpiOCfPXl167QFFfof1qpk/RImVmZDcwNDc3MTZjYzI0NDc1MzBkZjI2MTdiODBhMDg4Ig\"\r\nvary: Accept, accept-encoding\r\nx-request-id: IjTu8IeqAsAz6bUte1Uzt\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 7203200\r\ncf-cache-status: HIT\r\ncf-ray: a3472b184cd12efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54874,"size_decoded":55670,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"fecefc12b1034ab754821361ccd8545c","sha1":"15b990bb96d4adb6ba05ec9bb39837c593f4901e","sha256":"3f64cf3146763caf4e58bb964bedebc1f570d47a70d7ce8fd6187562e3064c70","sha512":"bf4a2270a44719cb2496fa12c54f1ec6465b9411fb3e1ffa06e60d853d1f738dd379283f266caa6b146eba8c17c55c11d178004fc595d544b6a9e31e62898c85","ssdeep":"768:5hvxDp4hR2awzyH/TSlhf16dfQvHtl0GnvYhqLQiJsaPqLH3QtSNNw51Ntb:HVp4hN0WWzkfQvH/0AYhLSvPqrQ4Slb","tlshash":"4433f2ead2270ff0c906007d19e68ac46e28572f74d22267e9f07948520a174deef9e9","first_seen":"2026-06-10T14:26:28.215397Z","last_seen":"2026-09-01T20:54:52.720516Z","times_seen":554,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-spAEgv-d.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.845Z","timestamp":1788296034845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-spAEgv-d.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 25 Aug 2026 10:52:26 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640185\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"de54cdbd911f81ffd04894acae9dd3db\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca5f7c56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221,"size_decoded":666,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"de54cdbd911f81ffd04894acae9dd3db","sha1":"7fde4fcf83ea43f79dbc832509511f3d9fd6fde1","sha256":"dba255c962fdf487036bef27e80d295ec7fdbc416ec79f3f91d5c4d0485a85f1","sha512":"683b033a7a4a5ff89f83645546247c392d21dfd01b21de458d6639a6a593ec0653bab660307c9909cae271c694b1c7d9d641ee7929da43828e433d597ce4d2aa","ssdeep":"","tlshash":"e2d023750413e07d75e4acc8d794ff3103d9688fd55602c583890984af00150f85be5f","first_seen":"2026-08-26T15:23:24.129971Z","last_seen":"2026-09-02T03:21:21.896226Z","times_seen":43,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/install-CxSOU_QG.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.921Z","timestamp":1788296035921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/install-CxSOU_QG.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"e2982195de7243f02bd26ff07a0dbfdb\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0898156b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":753,"size_decoded":939,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (752)","md5":"e2982195de7243f02bd26ff07a0dbfdb","sha1":"7e72096c9d93a8c8863af1d8e5317f12b4ee89f6","sha256":"d7bbc96f79b93fb79a47663008a6228628b5efdc4009de38e8734212baa07d56","sha512":"3a7e455c051dd04c8301efbd18b091d6066b200d64d734cf1ed8f00cee0986eb996f5190d667c89c56d4e67245a720f06c80c8a9765c9e4c5b5f3da0221c4647","ssdeep":"","tlshash":"b50190fd131806bd88c76bacd72f8e96131a4c5b378558e08b1f973591574e0f68f120","first_seen":"2026-08-28T05:09:58.535723Z","last_seen":"2026-09-01T20:54:52.723178Z","times_seen":34,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-Dh3Q3Z1-.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.968Z","timestamp":1788296035968,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-Dh3Q3Z1-.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"07dfd7b2db65dcefa8a0f45f56d0b83b\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0ca2756b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2235,"size_decoded":1785,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1617)","md5":"07dfd7b2db65dcefa8a0f45f56d0b83b","sha1":"767f3085345e920672a0d7f38ae4172c2b1a71fc","sha256":"3d66a04430508efdd32ca38d8a85ea60815f7f7105ae8bd54b88f318b33c6564","sha512":"ff474b3b003d2accf4e72fb45492b5f10be968c8f4448e950ac329573fbab8bacfa384719422aee4a218f100c21b6b9404e572623801c2d529af10ac97010db4","ssdeep":"","tlshash":"0141945642011db0127c8dcccc2890e358e54bd3ba09cdccf9695e391a83e98e15bf35","first_seen":"2026-08-28T05:09:58.366156Z","last_seen":"2026-09-01T20:54:52.724508Z","times_seen":34,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/autoplay-C5bRuECE.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.526Z","timestamp":1788296036526,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/autoplay-C5bRuECE.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"dc3c93cee343dc62692cbcb17d60ba9e\"\r\nlast-modified: Thu, 23 Jul 2026 14:54:22 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nage: 954862\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad44f0856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4015,"size_decoded":2012,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4014)","md5":"dc3c93cee343dc62692cbcb17d60ba9e","sha1":"a7be30cf27e9ffc7b4e849779256e38c08c9db97","sha256":"b96c857090cbd45fe9a0423fcdaddfaac4a97e7d21e2a26af62368d54f3a04ac","sha512":"f9c50a99dd4b4c20dd2ec44a75d319e8278901695011fddabb00617679b455692f862913d60f1201f56c73f947e8088bb8452e623d4f5b42051e8815a6c59177","ssdeep":"","tlshash":"1b81418b2241763a6eee874692f444185b301416701d3becb4fe8e386f5e887527ab71","first_seen":"2026-06-24T21:24:28.632711Z","last_seen":"2026-09-02T23:44:25.226777Z","times_seen":521,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/error-logger-E9cg7Bq5.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.539Z","timestamp":1788296036539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/error-logger-E9cg7Bq5.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 01 Sep 2026 14:42:40 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 18114\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"dfa9191d2f1c038f91c9db9eb2964ce2\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad45f2c56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":459,"size_decoded":788,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (458)","md5":"dfa9191d2f1c038f91c9db9eb2964ce2","sha1":"b658f2df91ab610bc23868971ed52b15e116d3ab","sha256":"e1e52cbcd469981776c763d53ab65bdd3d7793282b09f9cc6dcf80d234169914","sha512":"4fa05e6914b6c881fdf04e991d863c55c4213164eae675a30019fc0134f9928a5d82558b003d5075d0286a3902336f255deec54cba8b1328a5acd13634287150","ssdeep":"","tlshash":"32f05c2dcb75cce15cef14d4b7317c1756965054e9924dc4b52f859703430e7c48b68b","first_seen":"2026-09-01T20:26:35.077073Z","last_seen":"2026-09-01T20:54:52.726584Z","times_seen":5,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.bundlecdn.com/healthy","fqdn":"v3.bundlecdn.com","domain":"bundlecdn.com","tld":"com"},"ip":{"addr":"194.67.193.128","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.920Z","timestamp":1788296034920,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v3.bundlecdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:02:01 GMT","end":"Thu, 10 Sep 2026 13:01:53 GMT"},"fingerprint":{"sha1":"1D:AB:1D:06:89:8B:28:BA:DC:EA:83:A3:78:E0:DF:46:B8:AA:3B:23","sha256":"EC:47:30:E3:52:BC:01:30:AA:00:6A:62:A6:81:61:5B:C6:62:D0:80:C0:46:1D:56:53:E2:A3:EC:FE:31:7D:F7"}}},"request":{"raw":"GET /healthy HTTP/1.1\r\nHost: v3.bundlecdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nOrigin: https://1wfqxn.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 2\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS, HEAD\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3472aca5ad50731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":361,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-09-03T01:17:20.27612Z","times_seen":374492,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/api/web/v2/tracker","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://1wfqxn.life/","date":"2026-09-01T20:53:54.518Z","timestamp":1788296034518,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"POST /api/web/v2/tracker HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 3046\r\nReferer: https://1wfqxn.life/\r\nOrigin: https://1wfqxn.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; cda_status=pass\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3046,"data":"{\"events\":[{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"266040e8d95ecf3364146e6469396ded\",\"traceId\":\"266040e8d95ecf3364146e6469396ded\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"init\",\"name\":\"html\",\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:53.728Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"266040e8d95ecf3364146e6469396ded\",\"traceId\":\"266040e8d95ecf3364146e6469396ded\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"sw\",\"type\":\"migration\",\"name\":\"none\",\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:53.728Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"266040e8d95ecf3364146e6469396ded\",\"traceId\":\"266040e8d95ecf3364146e6469396ded\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"cda\",\"type\":\"domain_check\",\"name\":\"started\",\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:53.731Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"266040e8d95ecf3364146e6469396ded\",\"traceId\":\"266040e8d95ecf3364146e6469396ded\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"cda\",\"type\":\"domain_check\",\"name\":\"finished\",\"params\":[387],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:54.119Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"266040e8d95ecf3364146e6469396ded\",\"traceId\":\"266040e8d95ecf3364146e6469396ded\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"cda\",\"type\":\"redirect\",\"name\":\"auth\",\"params\":[\"266040e8d95ecf3364146e6469396ded\"],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:54.119Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"266040e8d95ecf3364146e6469396ded\",\"traceId\":\"266040e8d95ecf3364146e6469396ded\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"boot\",\"type\":\"finish\",\"name\":\"success\",\"params\":[\"index\",755,\"cda-redirect\"],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:54.125Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"266040e8d95ecf3364146e6469396ded\",\"traceId\":\"266040e8d95ecf3364146e6469396ded\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"imgproxy\",\"name\":\"url_ping\",\"params\":[1],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:54.265Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"266040e8d95ecf3364146e6469396ded\",\"traceId\":\"266040e8d95ecf3364146e6469396ded\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"sw\",\"type\":\"registration\",\"name\":\"success\",\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:54.283Z\"}]}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 37\r\nserver: cloudflare\r\nx-trace-id: 340b0c930ffeb9d4b0bd85240e4eb9d1\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\ncf-ray: a3472ac7bbd356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37,"size_decoded":378,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ffd908939b60f1154b33016c6d2e9c6b","sha1":"663ebb986e784df674df5ab579ad90c05517597e","sha256":"9c3b25f260defd6991608963a30a67cad0981ecce13e5975b1a6304887514d7f","sha512":"786fb75180a4545de1e3d9858f421255beed81a5f0efe626b0ef1b9fae8565b4bb633bf8241d114a998f78d1f345d63afbd628e5a310c3cdf937c7fca79c852e","ssdeep":"","tlshash":"6b8000002c028002acc0cc8a03838030bfb23fa0802f08e8028ee030ca2a0f8e08ec28","first_seen":"2024-04-13T04:25:13Z","last_seen":"2026-09-02T23:44:25.339337Z","times_seen":11087,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-B91oazRG.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.959Z","timestamp":1788296035959,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-B91oazRG.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"3dfac8bec07a622976188760a370e434\"\r\nlast-modified: Mon, 31 Aug 2026 14:52:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 106642\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0ba0456b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25230,"size_decoded":8906,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18901)","md5":"3dfac8bec07a622976188760a370e434","sha1":"e990f6ab245fb0c7fa4d6d66d3854e1117b65210","sha256":"87d3060f1f7aa956977781664c61c3c3cd2015dbde828e087cccf8bd882f9705","sha512":"76e280cda31cc52268213de09954f6586e84852bc7f1e4e28e2233efd7f3339ec6ff67ce23988e843b7f11505c2f00a0be757ddd4983858ef5e3358b82e307fd","ssdeep":"768:UqfabV43RJ0hFOZP/Z9ukZyQaUqOp7+CCIgHWZLh:Uy3RK4DcOF+2Zt","tlshash":"c7b209a4b1006c38d7b70b4cad2a5585d2e05fadce51ecf4b5ba483507caef0c19ab5e","first_seen":"2026-09-01T10:21:14.400104Z","last_seen":"2026-09-01T20:54:52.729129Z","times_seen":6,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/freemoney-sidebar-banner-DQ_Ju0Q-.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.597Z","timestamp":1788296036597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/freemoney-sidebar-banner-DQ_Ju0Q-.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"5c42ba5a460ad0b9b84e4c1bba0b278f\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nage: 18114\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad4bfaa56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7398,"size_decoded":3084,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4131)","md5":"5c42ba5a460ad0b9b84e4c1bba0b278f","sha1":"0ed20cac49d942992d7dba0dcf9255076fd85c9b","sha256":"4a896ff0613e6ea811e687f2ee186ce9699345f7fcf04bfd7b224f7b74efd90f","sha512":"191fa7723016366db7e220d49a2419cb90446e7ed1d3a782273875a9575da922eca34553b5cfe378739bb87bfbe759438e957932e03c9dbcc4876a6c9b74ae22","ssdeep":"192:mXzALvvQngDkKrlq2qPngHwyz9MitKEoKn:mXzALvva7Klq2qPgHpaitKEoc","tlshash":"1fe172243830ad38ab66c9ac6e9c5575d0e9fef4ca51de8b90adad3003d5ad2834a345","first_seen":"2026-09-01T20:26:35.124168Z","last_seen":"2026-09-01T20:54:52.729923Z","times_seen":5,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/segment-control-DbwjGASW.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.832Z","timestamp":1788296034832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/segment-control-DbwjGASW.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"ebc2bb4b5533b7dd6cfa1feb0eb21c2f\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca5f6a56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8476,"size_decoded":3622,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4584)","md5":"ebc2bb4b5533b7dd6cfa1feb0eb21c2f","sha1":"540a9957e8918193a7317766f22a6672f0c1f87d","sha256":"8c9c6208e6f2dcee42118db66dc21662ff74e281c03e0c6035e56d6eb5379cc9","sha512":"67ce0167608b78b6279cc4842f1e406e7577f1ce1248c576b0d474389d37491eacc18962fdd20a54b1c83ada4af8eed1ca6488504b83c080b28aba522fc0a29a","ssdeep":"192:HqqH6o8lyfwz1q1oeHMKtv8WQl5vJxtPBtwqvUsu9qyzc:Hqo6fswzioJSvCl5RxtPB66uxc","tlshash":"710210a569645e7b57b7ca1ef71cc8949438ebb2ea1503caf17c7b2803c2f60600bb05","first_seen":"2026-08-28T05:09:58.833256Z","last_seen":"2026-09-02T03:21:21.924613Z","times_seen":37,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-languages-DavAeqt6.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.896Z","timestamp":1788296034896,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-languages-DavAeqt6.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"a845d80adc5b1cf9c226ced586b46949\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca8fd956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":906,"size_decoded":1042,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (905)","md5":"a845d80adc5b1cf9c226ced586b46949","sha1":"60c8c03ad7186936236eee1bb148ee6e61b347c9","sha256":"46c32bcc1b2b343f9c57f3607c0ecf13fd189385cc08001c00e9909af02fbf3d","sha512":"a7b6d8a9ad97e0320565560474892141c7f97b769e98affeb921249b9c0c89e838a06cefd543bf5b2ce09012c5982a09f7cd996c6920fa90b0c989bfb9130944","ssdeep":"","tlshash":"cf1140d33047b2b221dc0dd8ea6414d00b249f95320cecda538f8e8a058b082c9efe52","first_seen":"2026-08-28T05:09:58.817472Z","last_seen":"2026-09-02T03:21:21.926245Z","times_seen":37,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-token-sale-server-events-BqQV5a_c.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.948Z","timestamp":1788296035948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-token-sale-server-events-BqQV5a_c.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"581821d2f27376fcc45f6b8b7dfca2f7\"\r\nlast-modified: Wed, 26 Aug 2026 14:38:19 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 536667\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0a9e156b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2756,"size_decoded":1436,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2755)","md5":"581821d2f27376fcc45f6b8b7dfca2f7","sha1":"8627ffad7caeb508fe91f51466cbcd9e436204bd","sha256":"d5a33516c5819d6668a24f93c9e77548038471cbdc872423c236059c3db6293b","sha512":"a4c3501197c5920f5103e9b4ec73b330ee81d7006a07ccf3605aaa942dd0649abbd68e8613f69d95f92cf0eba14f23859f9c2ae92dadbab4679316d992604775","ssdeep":"","tlshash":"8251528fcc95f2352da4eb3b85b0cabe68d569123c6d814291174e4dde488dd7ade808","first_seen":"2026-08-26T23:17:12.044417Z","last_seen":"2026-09-01T20:54:52.732236Z","times_seen":39,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flowmetric.life/api/v1/product-visits","fqdn":"flowmetric.life","domain":"flowmetric.life","tld":"life"},"ip":{"addr":"194.67.193.200","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.230Z","timestamp":1788296036230,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flowmetric.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jun 2026 14:53:26 GMT","end":"Fri, 04 Sep 2026 15:53:13 GMT"},"fingerprint":{"sha1":"9A:77:6A:A6:89:74:A1:CA:A5:72:30:D0:EE:8A:76:AB:3E:DA:D2:59","sha256":"9F:F8:3C:32:C4:D2:78:C7:C4:CC:17:DE:91:65:DB:F0:E7:91:3C:9E:DB:E4:FC:C5:9A:25:63:CF:61:AD:92:FB"}}},"request":{"raw":"POST /api/v1/product-visits HTTP/1.1\r\nHost: flowmetric.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 127\r\nReferer: https://1wfqxn.life/\r\nX-Unique-Key: 85e1ebdc8dfe661595e76ac2c2cad345\r\nOrigin: https://1wfqxn.life\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":127,"data":"{\"href\":\"https://1wfqxn.life/\",\"pageType\":\"product\",\"unique\":true,\"referer\":\"https://1wfqxn.life/\",\"visitDomain\":\"1wfqxn.life\"}"}},"response":{"raw":"HTTP/3 201 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://1wfqxn.life\r\naccess-control-allow-credentials: true\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nx-frame-options: DENY\r\ncf-cache-status: DYNAMIC\r\nset-cookie: h_visitor_id=f8b6e427-3bc5-4fed-9652-9a27a2c2250d; Path=/; Max-Age=2678400; Expires=Fri, 02 Oct 2026 20:53:56 GMT; Secure; HttpOnly; SameSite=None\nh_click_id=fc118dc3-52d1-4272-a893-34b2875f81dc; Path=/; Max-Age=2678400; Expires=Fri, 02 Oct 2026 20:53:56 GMT; Secure; HttpOnly; SameSite=None\n__cf_bm=ez1.0q1u3.LVXXKw2gRa_StVRErs0vJURliouR8KWwo-1788296036.3768897-1.0.1.1-qHzjgNqNWNXFEYFSTa8N3Ex4wd9QeVlAraMGEsSGh0cNfJ.cdmAPUubGY0ePwFh3Aiebax7oFqWYPiUx9bdb.17B4cQijc882hdHXb9ptxmssddMwknmLC5ihI9zXkeB; HttpOnly; SameSite=None; Secure; Path=/; Domain=flowmetric.life; Expires=Tue, 01 Sep 2026 21:23:56 GMT\r\nserver: cloudflare\r\ncf-ray: a3472ad3597156b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"h_visitor_id","value":"f8b6e427-3bc5-4fed-9652-9a27a2c2250d","quoted":false,"path":"/","expires":"2026-10-02T20:53:56Z","raw_expires":"Fri, 02 Oct 2026 20:53:56 GMT","max_age":2678400,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"h_visitor_id=f8b6e427-3bc5-4fed-9652-9a27a2c2250d; Path=/; Max-Age=2678400; Expires=Fri, 02 Oct 2026 20:53:56 GMT; Secure; HttpOnly; SameSite=None"},{"name":"h_click_id","value":"fc118dc3-52d1-4272-a893-34b2875f81dc","quoted":false,"path":"/","expires":"2026-10-02T20:53:56Z","raw_expires":"Fri, 02 Oct 2026 20:53:56 GMT","max_age":2678400,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"h_click_id=fc118dc3-52d1-4272-a893-34b2875f81dc; Path=/; Max-Age=2678400; Expires=Fri, 02 Oct 2026 20:53:56 GMT; Secure; HttpOnly; SameSite=None"},{"name":"__cf_bm","value":"ez1.0q1u3.LVXXKw2gRa_StVRErs0vJURliouR8KWwo-1788296036.3768897-1.0.1.1-qHzjgNqNWNXFEYFSTa8N3Ex4wd9QeVlAraMGEsSGh0cNfJ.cdmAPUubGY0ePwFh3Aiebax7oFqWYPiUx9bdb.17B4cQijc882hdHXb9ptxmssddMwknmLC5ihI9zXkeB","quoted":false,"path":"/","domain":"flowmetric.life","expires":"2026-09-01T21:23:56Z","raw_expires":"Tue, 01 Sep 2026 21:23:56 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=ez1.0q1u3.LVXXKw2gRa_StVRErs0vJURliouR8KWwo-1788296036.3768897-1.0.1.1-qHzjgNqNWNXFEYFSTa8N3Ex4wd9QeVlAraMGEsSGh0cNfJ.cdmAPUubGY0ePwFh3Aiebax7oFqWYPiUx9bdb.17B4cQijc882hdHXb9ptxmssddMwknmLC5ihI9zXkeB; HttpOnly; SameSite=None; Secure; Path=/; Domain=flowmetric.life; Expires=Tue, 01 Sep 2026 21:23:56 GMT"}],"status_code":"201","status_text":"Created","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":433,"size_decoded":1712,"mime_type":"application/json","magic":"JSON text data","md5":"f5c88bf331cdbf7dc7af922751dee754","sha1":"6b480b6e9e5b85331e81f53661ab04ccb5d14d87","sha256":"31b297f4b76f6a40fa3e70ad33bb2aa7c4172bd93cb887868bd9cc3f39ee6a2e","sha512":"1eab93fe2fca923c771f077e4621901eda740285937dc4a867ebdeba31bced52e6979ca8164da28be0b13a2b56d83436e019ddffc654a01502ef213d945d9c2a","ssdeep":"","tlshash":"70e06835a5ab7e2a758c323a605c3f09f49f058b81f22e70b8c66f481cf01711390304","first_seen":"2026-09-01T20:54:52.733017Z","last_seen":"2026-09-01T20:54:52.733017Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":2,"connect":2,"send":0,"wait":95,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-theme-Btwoj3hW.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.581Z","timestamp":1788296036581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-theme-Btwoj3hW.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 21 Apr 2026 12:13:31 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 1906041\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"6993b14b3ceb08d61cff4ffb85353b67\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad4af8e56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":505,"size_decoded":817,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (457)","md5":"6993b14b3ceb08d61cff4ffb85353b67","sha1":"4cf3aaf4a0d08ba1281b46cf310bc48f110ca3d0","sha256":"ddd59f6082eb2667d307338c6977a29baed8fc7b992c066cc183c67589865e77","sha512":"a052bc6aeed4e1e429217cb74b752ea0058131605e8f55fe58b4ed3c8a67591c3279160ae320d5544c9c1c71989589002f225ff9a3c9c4c268ef40118d2830db","ssdeep":"","tlshash":"0df00ef1ab78a93812200cbe933055a2fe18259db7629151e13998ce1068c0083b2f74","first_seen":"2026-05-26T00:02:55.156535Z","last_seen":"2026-09-01T20:54:52.735713Z","times_seen":338,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/event-section-DC6Ct5dr.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.583Z","timestamp":1788296036583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/event-section-DC6Ct5dr.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"2ccc86ed68feb78bd83a1fec5d71ca0b\"\r\nlast-modified: Mon, 31 Aug 2026 14:52:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 105772\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad4af9356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37474,"size_decoded":13429,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30864)","md5":"2ccc86ed68feb78bd83a1fec5d71ca0b","sha1":"d342a7c13688e35f7b636462605e4aa3fcec51bf","sha256":"e34a45b030d311ab425b4136cde1e825bb74912ef1ff84957378b523a0be3d71","sha512":"899826c0fd51885e17ececb3b0698ffdc0b78e2ccd1584ccccc9ada7a093ae0300700254797648aa1820764ea8e87754e638ce6bd50d6ae281d65ed26afb46ef","ssdeep":"768:2y2/ZhpGUrx+8fyaECZyY9yaECZyYnwBoIr8CVTPvUySEUW66Hs+SpS9:kU586aECZyYUaECZyYwKIr8CVTPtUQS8","tlshash":"28f2e9d52114a3bcd496590d9b2eec80931da06ef62189c19aafcb7d41cffd0fa87618","first_seen":"2026-09-01T10:21:12.176918Z","last_seen":"2026-09-01T20:54:52.736648Z","times_seen":6,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/main-C9POaWo-.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.609Z","timestamp":1788296036609,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/main-C9POaWo-.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453646\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"b42db0a98ba6a4aeea1da646e52c05c0\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad4cfc856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":744,"size_decoded":779,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (743)","md5":"b42db0a98ba6a4aeea1da646e52c05c0","sha1":"1b824874a403f6d229018c9fa69ed247d874e837","sha256":"705697c798b81d9c107386884c77e483f49e6f75c67162085cd96e73da7bf536","sha512":"b93f78a994206e54a06641ac1df4d9ead56916f766a4d32503fc81d71499ae8b8923558904469fa2f18c3a7da393a3ef76fc1fbb848cdf773d5713b0fda933b3","ssdeep":"","tlshash":"22012d98b0a8937884ede5edc752c493c0f421c2f665c890c7f50d2846a00c753abe4e","first_seen":"2026-08-28T05:09:58.443779Z","last_seen":"2026-09-01T20:54:52.738227Z","times_seen":33,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/base-input.vue_vue_type_script_setup_true_lang-CKonV0s5.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.864Z","timestamp":1788296034864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/base-input.vue_vue_type_script_setup_true_lang-CKonV0s5.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"4836c2b0bb8c13d5a77af2e23926986f\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca5fa356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2780,"size_decoded":1820,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2779)","md5":"4836c2b0bb8c13d5a77af2e23926986f","sha1":"4beba064c7dda5d3a67d3b664384a797ccc9f64b","sha256":"c6bdbb83b5b6a35568dd0d4db58d2d4c04384ad2a0c02addee92398c5ff2884b","sha512":"7790ad1d862a427dccae7688ce07a692b6823eb45d7c8cfa8990054c040fbac08a1b07c1f4fb28151a2a699b25fbd7c66571ef5d9467248f8934592172747282","ssdeep":"","tlshash":"ac51ea1f566ca4731e97c68af8eba060da58926c668000e094cfca345fbdfc4c51ef92","first_seen":"2026-08-28T05:09:58.628604Z","last_seen":"2026-09-01T20:54:52.739095Z","times_seen":36,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/api/translations/v1/frontend/common.uikit/en-001.json?v=0.4051.0","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.679Z","timestamp":1788296035679,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /api/translations/v1/frontend/common.uikit/en-001.json?v=0.4051.0 HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nContent-Type: application/json\r\nTraceparent: 00-a89ba894a4642ff2db3785be07592c7c-4a57567934db8f57-00\r\npage-view-id: a89ba894a4642ff2db3785be07592c7c\r\nX-Origin: 1wfqxn.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: public, max-age=300, stale-while-revalidate=300, stale-if-error=259200\r\nlast-modified: Tue, 04 Aug 2026 07:58:08 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nage: 559\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: UPDATING\r\netag: W/\"7d7694ae6c1f5c02d45aedecaa1c889b\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472acefe3956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"UPDATING\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14278,"size_decoded":5530,"mime_type":"application/json; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (14243), with no line terminators","md5":"9e81cb9e7f71a5e3916a6062cc01b0e2","sha1":"f478dae63859a8c1273b2cc43721044c91cc8af1","sha256":"948ec3d77eb3f703fa9970ca3ce635da393446b59529e62726bfc2c912b66193","sha512":"0fc3b33788d72c2303761643f16f1762e2b8d8be2fc2de58b17ef18432f90e631dfcd879511dbf96aee0646f8c18a235478959c0a8c6b5766087fc3bd53e454d","ssdeep":"192:CP/885XINTVak2KUAtsElJ3/+ULGGgceSxBCJ9mfG:KE85XINZz2RDG+9wxcOO","tlshash":"2652912da820dbfdfdb493ca71d6393b14b2024063b66897aacd4b2813d65d8d152b37","first_seen":"2026-08-05T09:11:21.979618Z","last_seen":"2026-09-02T03:21:21.93073Z","times_seen":129,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/menu-tab-CDNKseFR.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.928Z","timestamp":1788296035928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/menu-tab-CDNKseFR.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"f2efee3f366d88de24364562025f372d\"\r\nlast-modified: Wed, 26 Aug 2026 14:38:19 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 536667\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad089a856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7380,"size_decoded":2955,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4470)","md5":"f2efee3f366d88de24364562025f372d","sha1":"1374cdcf56e750572caca0a6d7b2daf8be640efb","sha256":"24155d5f411af7c25c27caa04ec0586631248e29acdcd6f1106ba04daadaaccd","sha512":"483e8a693935023e946ab62a12eb2e9e13c3a93c513ad3c84047484222cea14e40bd58d267ce57b6c548d3dd08d6a1932ff9e16066aef6144938662e67760e8a","ssdeep":"192:1Jfnvt4B9eXlQKoDeISpWPS1eq7Ftqqg4:1x6eXN1pWPB8fR","tlshash":"74e1bcbc7d90e13c9a67b47b4778f0ec620864e48f4606e4d238d93e4fc6bd29192356","first_seen":"2026-08-26T23:17:11.938716Z","last_seen":"2026-09-01T20:54:52.743981Z","times_seen":39,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/tooltip-DfQYKALt.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.851Z","timestamp":1788296034851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/tooltip-DfQYKALt.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"688444dc77f14dc2bd12211cd77a10f3\"\r\nlast-modified: Wed, 26 Aug 2026 14:38:19 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 536757\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca5f8356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27688,"size_decoded":11605,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26260)","md5":"688444dc77f14dc2bd12211cd77a10f3","sha1":"60cfe9ee6e8f16d1311ea11ec57664231d806fb9","sha256":"df79d1b4ec0212fa2f88fc3962890e66780ccb56be92db2f00a72a2e61e596c1","sha512":"b4e0cf7a6f4bf0be8499ddf8a5695288182eb5771a719e022917853d79a179d1b96e9aa372eb069ee1d86f5f7ae5f4ff02a74f2521a44f329a4cb6badb4ce996","ssdeep":"768:4p6HyT+UKH5xfMdamsca9UYFtvOsR2hAG2lUkpNVlT/ubnbOKiLZgctkhtivzPxJ:e+xHT7caR9tT6catax0TPyr","tlshash":"49c23ad471a27035536f4a57903b020db3360590320fa4b0b27daa9e3cb6d6257b3bbe","first_seen":"2026-08-26T23:17:12.205823Z","last_seen":"2026-09-02T03:21:21.904769Z","times_seen":42,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":58,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/tab-DeIxiXcd.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.831Z","timestamp":1788296034831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/tab-DeIxiXcd.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"07690caef403346942c2a3556410bb3c\"\r\nlast-modified: Wed, 26 Aug 2026 14:38:19 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 536757\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca5f6756b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8368,"size_decoded":3173,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5201)","md5":"07690caef403346942c2a3556410bb3c","sha1":"fac953f9048b09be472707747993cd3d9ff49e84","sha256":"363bf38ecd6238a1d38e8beca14865321833ad6805abc226d4d8e58f0437117b","sha512":"66023c5184156d323d4b01b4ce84052b4de664e86c8c9b06f6f5d31c0a484ce272f71dd692e0378f0b52eeda0d8f90d2816e528f5a606b96c053b95dd6405644","ssdeep":"192:cbwmw/2UB2gOAJssNcAwn41uuUqyzi+s9WGYEYglOrlJJmJOi4:ccP/2ZsFw4YuSRz/","tlshash":"d4028814750ce5fa5ad7a67e5f189488c0c8d2bfeda13fec756da13443cf6aa8102603","first_seen":"2026-08-26T23:17:12.126086Z","last_seen":"2026-09-02T03:21:21.907588Z","times_seen":42,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/support-BQYtwoAE.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.867Z","timestamp":1788296035867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/support-BQYtwoAE.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"3091ad03e13288083e4cc2959d5c536f\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad028b156b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":705,"size_decoded":937,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (704)","md5":"3091ad03e13288083e4cc2959d5c536f","sha1":"180577b6ca87695f6455ae4e52ea739d00de9a30","sha256":"4724288d951bb767062a892e30490d271fee9a9891212dfcc4e480d540900398","sha512":"b3951c6df41597caf4a0eabd11dded10e30062038268e3b05ebbb055120c61ec315f4a2d4026243fd25c36a18d29205b1733522ec9bfc0db7ac3d74b057f3073","ssdeep":"","tlshash":"940197ef525c16fc0927ca258e36f9501f1d60aa334682d2464f9fb243824e0e85ba10","first_seen":"2026-08-28T05:09:58.839426Z","last_seen":"2026-09-01T20:54:52.746568Z","times_seen":34,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/modal-banner-DyTgCUqF.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.945Z","timestamp":1788296035945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/modal-banner-DyTgCUqF.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"9f5418437f2ea6b9e96a1a17354b3c1d\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:26 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640186\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0a9db56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3685,"size_decoded":1782,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2493)","md5":"9f5418437f2ea6b9e96a1a17354b3c1d","sha1":"0afbd023c8f12e3247c15f8406c93b6bc04cb6f7","sha256":"f215a9982fdd942d780488c0c3bc43e7e2143605b7b04b74a084c58e38a93716","sha512":"5a935d614435f83746545d75769cb9c2f764f16e9df8c7823ddff285d36f84a90dbf72e4a1b4966e7a3fc4325ba914ec9c4f332501ccbbb2f85876c8b01b28b9","ssdeep":"","tlshash":"3c711049ae24f07ced3d9c9b336ba41cf04da42a8d569bf9d5f2471e46caeb20340b15","first_seen":"2026-08-26T15:23:23.894084Z","last_seen":"2026-09-01T20:54:52.74734Z","times_seen":40,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-CPo_BH7C.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.970Z","timestamp":1788296035970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-CPo_BH7C.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 25 Aug 2026 10:52:26 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640186\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"95b130f0451cead3b818a1fec6bca164\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0da2d56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":414,"size_decoded":776,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (413)","md5":"95b130f0451cead3b818a1fec6bca164","sha1":"c226899379c04138d5cb01dd461ff58bb0f15cdc","sha256":"b8b5f69eed04e3304b430f5976d268bdf65c97fc6e0c1cf0a50ec2881581c64b","sha512":"a6d0cf06b483e03f689428bdfcbde3b00201e76e1585dec878c9ca4ff95f8271fb272ae1c8bd0e84069aa5f7f0fab49f550e000bf17bfbb057df60cea02bc2ab","ssdeep":"","tlshash":"aae02bb78016c6f4397e89f9d448d112586355a65780c37293de6725274547ae10ea07","first_seen":"2026-08-26T15:23:24.062839Z","last_seen":"2026-09-01T20:54:52.748084Z","times_seen":40,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/arrows-scroll-view-9KuFXeJe.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.974Z","timestamp":1788296035974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/arrows-scroll-view-9KuFXeJe.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"24a0cf770428ad2df3c1727d0c656247\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0da3956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5936,"size_decoded":2215,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3169)","md5":"24a0cf770428ad2df3c1727d0c656247","sha1":"e6a4c84906aa0178fa3c809554c9565c58077033","sha256":"fbf5c90b3e3238ec1fb83fac213ca4811f189829a4fbf64d509ed662acdeb295","sha512":"214a6f4b8abfc514abadd0343a92963279ab68a700a3ce9dc0448075a9b3bfa2bb4a1d13cec5790fdf123fe08aa2283f94df01e89b760c49125b83d96b488227","ssdeep":"96:PPf+IKxbgH4TO5PxPpxEIm1OPFWaOxDYh/DND5/Dm:Xfb4i3AIzPgaOx8RR5a","tlshash":"bcc1da76accee0a866cf8239d915471b11d90dbb57143946d8bbaeba07d0fb8013d30c","first_seen":"2026-08-28T05:09:58.84424Z","last_seen":"2026-09-01T20:54:52.748801Z","times_seen":34,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/api/MS-BONUS-BALANCES/v3-bonus-list","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.429Z","timestamp":1788296036429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"POST /api/MS-BONUS-BALANCES/v3-bonus-list HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 77\r\nReferer: https://1wfqxn.life/\r\nTraceparent: 00-a89ba894a4642ff2db3785be07592c7c-858c3a8940eaf1c8-00\r\npage-view-id: a89ba894a4642ff2db3785be07592c7c\r\nX-Origin: 1wfqxn.life\r\nOrigin: https://1wfqxn.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":77,"data":"{\"currency\":\"NOK\",\"localeId\":1,\"type\":[\"deposit\",\"freespin\",\"deposit_sport\"]}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-trace-id: a89ba894a4642ff2db3785be07592c7c\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad3ae4456b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1161,"size_decoded":983,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1966102a148864bc149a2c44e633c83c","sha1":"ff345ae588e784ada2d2b7364f179c4aba0351a6","sha256":"d270e65eb3605d266ad90a3ba60e05f44196c666b7b38e9b352e924235e985d4","sha512":"f2333a27bcb60e8e98d8f04be5f86a720d002653a3426b7cea2b53aaaa4f63fde56b5a3389267a3759c303c37fa97499c95d7c0db5a948cebb4100ed431baf38","ssdeep":"","tlshash":"da210343ae2c86b45a53b6d1b4eb1d6f53f4112d41860ef044cf3a6517c658a22ab619","first_seen":"2026-09-01T20:54:52.749575Z","last_seen":"2026-09-01T20:54:52.749575Z","times_seen":1,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/helpers-BVRNAj2t.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.894Z","timestamp":1788296035894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/helpers-BVRNAj2t.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 01 Apr 2026 15:51:43 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 1232838\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"ed51fbf722966cc2be991b35726a8dff\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0590a56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105,"size_decoded":583,"mime_type":"application/javascript","magic":"ASCII text","md5":"ed51fbf722966cc2be991b35726a8dff","sha1":"7c89b789efe6e84c66a4d7bd305a5734254e8113","sha256":"0105bdf37d7fd44da0b90a782e043a20bbe4c5777e853a1c5f1aa5f611d4c439","sha512":"c54ab28b21764047338b99f5a42094c3d8bc9f2acc392a59274bdd928e9ba2022a9c7a654de267696017d7d14c91455b9328973cd6e8275306a8ad5577760640","ssdeep":"","tlshash":"61b012da114013fe5b05828021d35604f562036c24a2b2470eb027d115c0043e10ed8e","first_seen":"2026-01-20T19:14:14.321823Z","last_seen":"2026-09-02T23:44:25.340995Z","times_seen":1272,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-body-scroll-lock-Kv5cWDft.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.802Z","timestamp":1788296034802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-body-scroll-lock-Kv5cWDft.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 25 Aug 2026 10:52:27 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640185\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"6ba1b329ec139ef99f4888fbbf490b24\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac98e4356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1006,"size_decoded":1106,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1005)","md5":"6ba1b329ec139ef99f4888fbbf490b24","sha1":"6cfbbe90d9f574c6f093afcc16baad906b611214","sha256":"df04c21ae4370872290c02e18a4305a7f5a8f69939feb9c59f30b39bdb056f45","sha512":"1c700901b6643b55a3747f88eade2045eabc19eb77dced1ab02f20830ade651f519b48ecf1c29dae36b240072808a725bf77a34172a69e4131c1627bd01c3325","ssdeep":"","tlshash":"ef1102b67640b23043eb99cab193cf90a5306240264db4d4506f88496efaea321c7f67","first_seen":"2026-08-26T15:23:24.098059Z","last_seen":"2026-09-02T03:21:21.89556Z","times_seen":43,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-Cns1jwyB.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.842Z","timestamp":1788296035842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-Cns1jwyB.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_TLDTEST=MQ==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"53cd5d69d8b58bd0552b01299e5b8c0e\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nage: 18116\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0083056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37587,"size_decoded":14543,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18027)","md5":"53cd5d69d8b58bd0552b01299e5b8c0e","sha1":"2e00198265a56b57930edd339879e15a00da7872","sha256":"757968c0855274ce6b0212e6b8af4788631f20924aff9487475cdbe44366f011","sha512":"b927495980d3340b81e6a8e588f4cd10e47689ea8b3740e0e39a107585c66e32c413a9b3604139b2346cb7ea95125f24dfa3e5af411b332f42de2bf76ff83c83","ssdeep":"768:MmsblhJ8Jxr4UTdFEpox8C0/Xvm1cZXmcSc48FhU16I6GVBgwKgTNRXYWN7Y6ZS9:MntrZ2MKyZjjJ","tlshash":"f5f24bc832d1767003faa8f1d42b1151623a971cb409c0ecfa35ade6189dd4696bbfbd","first_seen":"2026-09-01T20:26:35.125609Z","last_seen":"2026-09-01T20:54:52.753288Z","times_seen":5,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/freemoney-main-banner-C7rXOgpj.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.530Z","timestamp":1788296036530,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/freemoney-main-banner-C7rXOgpj.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"451bf1fe5e055f3cd373cd13638f27d5\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 17853\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad45f1356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9679,"size_decoded":3550,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4919)","md5":"451bf1fe5e055f3cd373cd13638f27d5","sha1":"8daf60b207da372558a4f3ccfda1aae5f062a9e0","sha256":"6e499fefc61695d605c92ab38db2eafcc73939ef9ce2f8f36acc6ffa3f2a399e","sha512":"f69b13df3d8ad282e4a56d37ff87516f72aa7bc9bb8455add4469efc48e55f4ffe7aad418f3099862006fee07d7bab48937416105ed3acc182e0bf998e8bb47c","ssdeep":"96:Fxe1SqtPL8nllYfYEYYY+0zPhb02u5RAFjFExCWuzM/TqnhLbJ6lGH:FxeAq9L8lNzxnuPfCWu6Tqnhn3","tlshash":"4b1254537a7498b861364cedad2d227ed14e3c35db05dfe9406e2c740bda6611336b0d","first_seen":"2026-09-01T20:26:35.045605Z","last_seen":"2026-09-01T20:54:52.754048Z","times_seen":5,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/sidebar-dynamic-section-g7ZozRvx.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.611Z","timestamp":1788296036611,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/sidebar-dynamic-section-g7ZozRvx.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"eddc72a88ce4d54fb11059c2304241c0\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:41 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 18114\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad4cfcd56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9845,"size_decoded":4028,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9844)","md5":"eddc72a88ce4d54fb11059c2304241c0","sha1":"798d366522ff4b0d87d3b830a120530c417d1558","sha256":"3f6e59c5b742476e5096d0247101dc4d73d848231529d73e37d818e628893abc","sha512":"d6ec1eb065644800b097cd37c285d5c846fe8ea237c2e159bd869567a19253a8e0fdf9cc8d41329b4c064443ccfe3769284a8a9c8668f8f68bb6ccceb925d270","ssdeep":"192:QMamXYLtwEoyXD/0dOl7XfF3T8XkqAexfypLeCuovowtwrqW:QMtoLtxD/1FsZktwz","tlshash":"4612b61ae005483b4da3baf5dcc540ece11903e9e3d646e179ef89351b2f8e8d275217","first_seen":"2026-09-01T20:26:35.141605Z","last_seen":"2026-09-01T20:54:52.754811Z","times_seen":5,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/api/web/v2/tracker","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.773Z","timestamp":1788296036773,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /api/web/v2/tracker HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 24190\r\nReferer: https://1wfqxn.life/\r\nOrigin: https://1wfqxn.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":24190,"data":"{\"events\":[{\"url\":\"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"init\",\"name\":\"html\",\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:54.652Z\"},{\"url\":\"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"sw\",\"type\":\"migration\",\"name\":\"hashed\",\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:54.654Z\"},{\"url\":\"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"cda\",\"type\":\"redirect\",\"name\":\"finish\",\"params\":[\"auth\",533,387,\"266040e8d95ecf3364146e6469396ded\",\"pass\"],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:54.658Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"cda\",\"type\":\"domain_check\",\"name\":\"started\",\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:54.659Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"sw\",\"type\":\"registration\",\"name\":\"success\",\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:54.707Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"imgproxy\",\"name\":\"url_ping\",\"params\":[1],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:54.969Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"cda\",\"type\":\"domain_check\",\"name\":\"finished\",\"params\":[374],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:55.032Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"init\",\"name\":\"start\",\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:55.085Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"geo\",\"name\":\"timezone_country_matched\",\"params\":[0,\"\",1],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:55.101Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"html_to_init\",\"params\":[539],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:55.102Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"web_vitals\",\"name\":\"FCP\",\"params\":[0.594,\"/\"],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:55.131Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"api\",\"name\":\"request\",\"params\":[\"/api/web/v1/sdui/templates/by-types\",0.03,200],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:55.136Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"api\",\"name\":\"request\",\"params\":[\"/api/translations/v1\",0.097,200],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:55.201Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"imgproxy\",\"name\":\"url_use\",\"params\":[1],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:55.663Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"user\",29,13],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:55.728Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"@shared\",23,3],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:55.730Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"@temporary-shared\",22,3],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:55.730Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"api\",\"name\":\"request\",\"params\":[\"/api/translations/v1\",0.083,200],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:55.755Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"api\",\"name\":\"request\",\"params\":[\"/api/translations/v1\",0.163,200],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:55.827Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"api\",\"name\":\"request\",\"params\":[\"/api/fss/socials\",0.157,200],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:55.828Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"api\",\"name\":\"request\",\"params\":[\"/api/web/v1/user\",0.147,200],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:55.829Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"billing\",454,1],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.142Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"betting\",449,7],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.150Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"cdp\",471,2],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.161Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"fortune-wheel\",512,7],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.212Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"promo-landings\",517,3],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.213Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"vip-landing\",526,8],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.225Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"loyalty-program\",524,9],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.225Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"streamers\",528,4],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.225Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"promotions\",528,3],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.226Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"bonus\",534,9],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.238Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"referral-program\",549,0],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.242Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"support\",556,4],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.248Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"ceo\",560,1],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.256Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"casino\",563,1],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.262Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"play-chat\",564,0],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.269Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"blog\",564,0],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.271Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"forum\",568,0],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.276Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"betwave\",569,0],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.278Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"crypto-token\",583,1],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.289Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"vip-promo-crashback\",585,0],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.290Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"rules\",586,0],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.294Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"seo\",586,0],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.294Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"banners\",589,0],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.297Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"layout\",635,2],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.335Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"freemoney\",632,0],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.338Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"lottery\",640,0],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.350Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"module_load\",\"params\":[\"tournaments\",647,2],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.355Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app-critical-event\",\"name\":\"event_start\",\"message\":\"ce-auth-buttons-rendered\",\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.374Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"modules_load_to_mount\",\"params\":[10],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.385Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"html_to_app_load\",\"params\":[1998],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.541Z\"}]}"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T01:18:14.47199Z","times_seen":18246362,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=17\u0026frm=0\u0026apvc=1\u0026ae=g\u0026auid=755945686.1788296043\u0026dt=Online%20Casino%20%26%20Sports%20Betting%20%7C%201win%20-%20173599.8214677781\u0026en=page_view\u0026dl=https%3A%2F%2F1wfqxn.life%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1907076499.1788296043\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He68v1h2v894400803za200zd894400803xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~118897920~118897930~119791749~120385423\u0026tft=1788296042941\u0026tfd=8814\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:54:02.944Z","timestamp":1788296042944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"POST /ccm/collect?rcb=17\u0026frm=0\u0026apvc=1\u0026ae=g\u0026auid=755945686.1788296043\u0026dt=Online%20Casino%20%26%20Sports%20Betting%20%7C%201win%20-%20173599.8214677781\u0026en=page_view\u0026dl=https%3A%2F%2F1wfqxn.life%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1907076499.1788296043\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He68v1h2v894400803za200zd894400803xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~118897920~118897930~119791749~120385423\u0026tft=1788296042941\u0026tfd=8814\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nOrigin: https://1wfqxn.life\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain\r\npragma: no-cache\r\ndate: Tue, 01 Sep 2026 20:54:03 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://1wfqxn.life\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":540,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T01:18:14.47199Z","times_seen":18246362,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":3,"connect":25,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/search-BVy6MC62.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.867Z","timestamp":1788296034867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/search-BVy6MC62.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"4bcd30e9040e3f0ad17a617b56516951\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca5fa956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":574,"size_decoded":870,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (573)","md5":"4bcd30e9040e3f0ad17a617b56516951","sha1":"01d7f2192409a5abcf91bdf1772734a2d874839f","sha256":"c73f3f4b7c9b6c42bf89b8f7e6bdbebd32890cf96a2565b76cae001301a183c0","sha512":"7bca519b8eb056abce0003fd92798065bcfed65f4b5efaa9c810f31805205bb874fa3b3e02614950f94d511a2abd88f24717d04e2514465f0cde7552808c7d62","ssdeep":"","tlshash":"69f0ebb22168e0bc0a5f0270d63c28c7431839bcb70d84c8e36ea229888ae70ed4b520","first_seen":"2026-08-28T05:09:58.716643Z","last_seen":"2026-09-01T20:54:52.75565Z","times_seen":36,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-game-slider-analytics-BC0BgskM.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.559Z","timestamp":1788296036559,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-game-slider-analytics-BC0BgskM.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453646\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"2b97c813837f65b373222a108e1a77da\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad47f6c56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":849,"size_decoded":925,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (848)","md5":"2b97c813837f65b373222a108e1a77da","sha1":"bbd60995965a69b275070af7f2d3b0fbb73037da","sha256":"5e2661a7a05a71abb346b2ffeb921f5810873eda0e7fd2126e94a4f0025f1e2a","sha512":"9252ddc27814692fef1b2731dd5e19a62b75a6d4ddcc0f497db6ecb0b40c6e1e0d2ad074667d89acf155e421b2b2762cf44ee8d82802658dc21a125088da5453","ssdeep":"","tlshash":"fe01afbec0eecdf0080794f8f18084de57b146b7aa42ace44a49cf381e52c99564d989","first_seen":"2026-08-28T05:09:58.810232Z","last_seen":"2026-09-01T20:54:52.756405Z","times_seen":32,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/button-placeholder-ByfWt604.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.562Z","timestamp":1788296036562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/button-placeholder-ByfWt604.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"cb9b78ff620fab6f6c8896caa7165aeb\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:25 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640186\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad48f7356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2007,"size_decoded":1180,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1159)","md5":"cb9b78ff620fab6f6c8896caa7165aeb","sha1":"71bc51e942c47a26115dbb7419f6fe2aafa5da26","sha256":"c6d545258d3eb9d3a0c9ef534b5da40fb8b7bf01f078828962267e16ea6132c9","sha512":"7fd7c2cadbe547e36a89ed68e27bf620e10f4208e452c084e831a6d27776835650c4e9699df60b37eb5207ec25e0c34ee558c43b6a8dde3e56de3decf148057a","ssdeep":"","tlshash":"ee414eef9ff8a3e86791c60fd21ade5676209813642138f1189864fa2ec5dd1d03e2c6","first_seen":"2026-08-26T15:23:24.163626Z","last_seen":"2026-09-01T20:54:52.757209Z","times_seen":34,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"optimize.v3.bundlecdn.com/unsafe/banner_mobile_5x/plain/https://d1x0nzb6t1pnx3.cloudfront.net/banner-files/nYI_W8fja4J88vcPEomNAtDeEOvgMZU8NNLPlZhmbCnIO1GrBA6-jWFsM5tUEwQo9FTpQaOZjkwOqGVMvaiTkApRr9DN8lmRA2ly.jpg","fqdn":"optimize.v3.bundlecdn.com","domain":"bundlecdn.com","tld":"com"},"ip":{"addr":"194.67.193.128","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:54:02.052Z","timestamp":1788296042052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v3.bundlecdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:02:01 GMT","end":"Thu, 10 Sep 2026 13:01:53 GMT"},"fingerprint":{"sha1":"1D:AB:1D:06:89:8B:28:BA:DC:EA:83:A3:78:E0:DF:46:B8:AA:3B:23","sha256":"EC:47:30:E3:52:BC:01:30:AA:00:6A:62:A6:81:61:5B:C6:62:D0:80:C0:46:1D:56:53:E2:A3:EC:FE:31:7D:F7"}}},"request":{"raw":"GET /unsafe/banner_mobile_5x/plain/https://d1x0nzb6t1pnx3.cloudfront.net/banner-files/nYI_W8fja4J88vcPEomNAtDeEOvgMZU8NNLPlZhmbCnIO1GrBA6-jWFsM5tUEwQo9FTpQaOZjkwOqGVMvaiTkApRr9DN8lmRA2ly.jpg HTTP/1.1\r\nHost: optimize.v3.bundlecdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:54:02 GMT\r\ncontent-type: image/avif\r\ncontent-length: 109480\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"nYI_W8fja4J88vcPEomNAtDeEOvgMZU8NNLPlZhmbCnIO1GrBA6-jWFsM5tUEwQo9FTpQaOZjkwOqGVMvaiTkApRr9DN8lmRA2ly.avif\"\r\ncontent-security-policy: script-src 'none'\r\netag: \"D9Az74RL9gkueTxjVwFXRFpiOCfPXl167QFFfof1qpk/RIjJlMmExNTU0YWY0MzRkMmRjNGYwN2ExN2I0ZWIyMjU2Ig\"\r\nserver: cloudflare\r\nvary: Accept, accept-encoding\r\nx-request-id: k0OEr1dyz77y8mvsdCyxD\r\npriority: u=5,i\r\nage: 2281917\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: a3472af6dfdd2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109480,"size_decoded":110277,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"54e04f483e82ce8c3810934230d79bae","sha1":"aca80ba4e365ab18e3fc12544ca6be2effc8db90","sha256":"4ca4aef69c07a668f6780cf0d7df32a73a70346b45d9ab63516922fa36bebde5","sha512":"59032ce13dd19cdc4b4e57a67114a43ab979c19faa3ef7816daea72cba0344d73273c6ad5649a88e6ea42a9f0e9837528932d223cb6cc727a50b9cdefc13e84d","ssdeep":"3072:IHznaDTNHW9jCh4IvFZ5eYuz167L/iaXvuqRokwkr:YUpHWF04y7eYO167LqaXvsUr","tlshash":"14b312c76a8d1351f538a3b03ca52a10c8bf7e86860405de60c65e07a7f3bc7b8de695","first_seen":"2026-08-07T04:45:38.868141Z","last_seen":"2026-09-01T20:54:52.758068Z","times_seen":90,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/plugin-form-builder-VSkHwrfC.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.895Z","timestamp":1788296034895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/plugin-form-builder-VSkHwrfC.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"08de428c119e3e5da82e998d5ca4d712\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:41 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 18116\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca8fd456b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54355,"size_decoded":15890,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46981)","md5":"08de428c119e3e5da82e998d5ca4d712","sha1":"250626968088f72a85b526790c1a4e9aef4cecbb","sha256":"a39724feb483cf6b5762cbfa442a2b06693640d4f2536224b57ad069209fff1d","sha512":"186ed74f6b8fc4157c2c069d835470a5efb92c31b20d04471dc4909349db26ee3fef68391f94ad24bc84ba6914ac608195be61b127a1bf0746d32a3803fb28f9","ssdeep":"768:3bv+gt7c8+QTaDhiL+6ZGJOn5wzhzDiyRBNqhCy5:39m7FBgGon52ZBIhF5","tlshash":"9c336188cb65069dfc73ab9c740a7821163a7f63f5ccc6c0bcdd4ba6a4d0ee19160799","first_seen":"2026-09-01T20:26:35.13577Z","last_seen":"2026-09-01T20:54:52.758777Z","times_seen":5,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-game-session-CUmBHhnT.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.898Z","timestamp":1788296035898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-game-session-CUmBHhnT.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"bb860b168c03fcba275f86259258d705\"\r\nlast-modified: Tue, 25 Aug 2026 12:35:08 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 634451\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0591a56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7058,"size_decoded":3668,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7055)","md5":"bb860b168c03fcba275f86259258d705","sha1":"29f59cf761e56e67a216fd7537ad4b1bfcc7516a","sha256":"3271e3c7110278bf11f8b87631a134c229864261a3cb8552be6d0cb670ecd77d","sha512":"62e6dccbbfef4a0287ccb620b1a0c0f9aac722b30f11f196f9e4e284e0878aaef4d3831dfe94748c7732c80f455fe661ab30bc44d238c9ce04804a4cca42cfc6","ssdeep":"192:tSJNM1J4aykawZR0PAw8AXOuRR4xrSAdh4lK9dkTRYNQ:tuNJay/ywAwzXOuQzOUrkTGy","tlshash":"72e109a79221813e157fd6c5bc4c35e67c910ac2b09b88c1bedc0f1a66476ce436bb9d","first_seen":"2026-08-26T15:23:24.276785Z","last_seen":"2026-09-01T20:54:52.759452Z","times_seen":40,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.smrtwheel.com/visitorGame/89617691-60d0-48a8-89af-8f8b6b325bea-7/6c564985/en/517","fqdn":"img.smrtwheel.com","domain":"smrtwheel.com","tld":"com"},"ip":{"addr":"194.67.193.67","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:54:02.665Z","timestamp":1788296042665,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smrtwheel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 14:35:02 GMT","end":"Fri, 16 Oct 2026 15:34:56 GMT"},"fingerprint":{"sha1":"29:11:C1:5E:DE:62:55:1D:37:A0:6C:37:94:2F:D1:19:6D:F0:60:9D","sha256":"6A:B1:8A:15:B3:ED:C4:A5:0B:4A:25:90:F7:55:1A:1A:7A:64:A3:EB:2C:AF:69:80:39:C2:DE:6E:C7:8A:A1:A5"}}},"request":{"raw":"POST /visitorGame/89617691-60d0-48a8-89af-8f8b6b325bea-7/6c564985/en/517 HTTP/1.1\r\nHost: img.smrtwheel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 139\r\nReferer: https://1wfqxn.life/\r\nOrigin: https://1wfqxn.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":139,"data":"{\"api_key\":\"89617691-60d0-48a8-89af-8f8b6b325bea\",\"cid\":517,\"uuid\":\"fa557404-b690-4617-9766-11e916756e54\",\"ts\":1788296042625,\"src\":\"v-api\"}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 01 Sep 2026 20:54:03 GMT\r\ncontent-type: application/json\r\ncf-ray: a3472afcec95a0f0-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://1wfqxn.life\r\ncache-control: public, max-age=300\r\nserver: cloudflare\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 e16f7e277f02980794c00cd2fe44c0b4.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: VWgLjGhhOKtNucgqGkk-dOGf5J5W11HrpOm92Ip2_sURVIcCU0dckA==\r\nx-amz-cf-pop: ARN56-P4\r\nx-cache: Miss from cloudfront\r\nset-cookie: __cf_bm=supIQPyv3b7gJvGev7vJvFu1oo3oiVSuKfom341LLww-1788296043.0214124-1.0.1.1-H_imS4DYwRBycWHeAJikE4NnVhO0qg.u5F6HE8aR07VNYdNhquk0.lskTgi6wqMypJqwU88SQ9GiNAjtH94xe6nLVYjx0Q2XY4rgp9gsNONW2f2TSmPfKkUaD2X2nsdR; HttpOnly; SameSite=None; Secure; Path=/; Domain=img.smrtwheel.com; Expires=Tue, 01 Sep 2026 21:24:03 GMT\r\nserver-timing: cf-cache;desc=\"DYNAMIC\"\r\ncontent-encoding: zstd\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"supIQPyv3b7gJvGev7vJvFu1oo3oiVSuKfom341LLww-1788296043.0214124-1.0.1.1-H_imS4DYwRBycWHeAJikE4NnVhO0qg.u5F6HE8aR07VNYdNhquk0.lskTgi6wqMypJqwU88SQ9GiNAjtH94xe6nLVYjx0Q2XY4rgp9gsNONW2f2TSmPfKkUaD2X2nsdR","quoted":false,"path":"/","domain":"img.smrtwheel.com","expires":"2026-09-01T21:24:03Z","raw_expires":"Tue, 01 Sep 2026 21:24:03 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=supIQPyv3b7gJvGev7vJvFu1oo3oiVSuKfom341LLww-1788296043.0214124-1.0.1.1-H_imS4DYwRBycWHeAJikE4NnVhO0qg.u5F6HE8aR07VNYdNhquk0.lskTgi6wqMypJqwU88SQ9GiNAjtH94xe6nLVYjx0Q2XY4rgp9gsNONW2f2TSmPfKkUaD2X2nsdR; HttpOnly; SameSite=None; Secure; Path=/; Domain=img.smrtwheel.com; Expires=Tue, 01 Sep 2026 21:24:03 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32159,"size_decoded":5564,"mime_type":"application/json","magic":"JSON text data","md5":"0bb222481f6444c4eabaa9fd0c16c0eb","sha1":"1f2d20d002b022e6700614bff07958a986235aeb","sha256":"1bc890ab04770ddb97b97c79c7b38a82cf5ba3dd9edd1169d470e2fec44c283b","sha512":"7eddec227935a26b76c0b577f90e7b0a4a90981555b14fb2a51f41fcff22368a6227ed38487f11b2474cc09986b8d17fb87b13be9b7b4f77c9a2457b4f31c7f5","ssdeep":"384:i3SbRUNZPVQKf86ecBaRP9Q7WlRcPEd4dJWtvGLRcP4dwDMQlP8iEGpUMzntoKd/:iClUNZPVQKf8xyWtvG88ijp2lo","tlshash":"a9e28527d1402d7291e5156a7fc9bb2b19a3a11b2d01bf2439dc042c8fcd86fe97379a","first_seen":"2026-09-01T20:54:52.760967Z","last_seen":"2026-09-01T20:54:52.760967Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/api/web/v1/user","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.586Z","timestamp":1788296034586,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /api/web/v1/user HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; cda_status=pass\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 5\r\ncache-control: no-cache, no-store, must-revalidate\r\nserver: cloudflare\r\nx-cache-status: BYPASS\r\nx-trace-id: 179303a508ad97b2b97f28f83c691a31\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\ncf-ray: a3472ac82c7a56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"BYPASS\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5,"size_decoded":442,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"68934a3e9455fa72420237eb05902327","sha1":"7cb6efb98ba5972a9b5090dc2e517fe14d12cb04","sha256":"fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa","sha512":"719fa67eef49c4b2a2b83f0c62bddd88c106aaadb7e21ae057c8802b700e36f81fe3f144812d8b05d66dc663d908b25645e153262cf6d457aa34e684af9e328d","ssdeep":"","tlshash":"aa3000000000000c000000000000000000000000000000000000000030000000000000","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-03T01:23:25.8245Z","times_seen":80683,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/mask-input-DDfJfQJl.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.872Z","timestamp":1788296034872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/mask-input-DDfJfQJl.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"77b8e7776d97f11070813bf4e3b40cd6\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca8fb956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3551,"size_decoded":2177,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3145)","md5":"77b8e7776d97f11070813bf4e3b40cd6","sha1":"039dc856f2de9559575f8d6fdf99f4c7a5a51793","sha256":"f76d21c58eaf8b0b24bb70edc885cbf3191e662432c1eedbfd4787da43c00b5e","sha512":"fc463964a41ef16535d888f457c985b4d7594066d376e239b0f21ba0ee490503f23cc14dba990adc7c0f80f1e3dde3743e4ff1293628955e70f8d80055055929","ssdeep":"","tlshash":"4171a412755c60730bbb89a6f0fbd4a0ad649358e2f114e1089ef8281faddc4c51ff96","first_seen":"2026-08-28T05:09:58.575638Z","last_seen":"2026-09-01T20:54:52.763334Z","times_seen":36,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/date-input-BYQo5S4s.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.892Z","timestamp":1788296034892,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/date-input-BYQo5S4s.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"ce4d65849c00e5a4f9a1dba3d2d0156a\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca8fd156b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4194,"size_decoded":2624,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3882)","md5":"ce4d65849c00e5a4f9a1dba3d2d0156a","sha1":"e4352aeb6a278e77ca4325a9751c5c57c3ea8f29","sha256":"de797dd57ef83b8626174a8a73a1df25020e811a4c36d8b1b06bb4b5b08c9a82","sha512":"58ddcf3fe7d4aa6006c0f14d5338ad26a01141abfc505d0c17af5945ba081c48d677f932b17b66ad1e2cf91adee1dcb002ccaec4dd35fca077a249ab13c3fa95","ssdeep":"96:Ltn+JWUufh9ddJmy0qNKuQ20z3m3KUeu78BeXFj4:Ld+JWUu53dJmy0v28W3778G4","tlshash":"a881b68171fa4cf703b24899f0e69060ae340bba619981f0c45d8e661bffc84d66ff65","first_seen":"2026-08-28T05:09:58.497185Z","last_seen":"2026-09-01T20:54:52.764217Z","times_seen":36,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/accordion-sahtbj_q.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.976Z","timestamp":1788296035976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/accordion-sahtbj_q.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"82145bc270e6242c33362f6984e96368\"\r\nlast-modified: Tue, 01 Sep 2026 09:52:07 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 39172\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0da3b56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6442,"size_decoded":2721,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3858)","md5":"82145bc270e6242c33362f6984e96368","sha1":"d4e41c99634899df2a313d9ec26a85a8a20717e9","sha256":"2aac0e919ce3974204923d444dc26c20e4e4d0756fa9517463700ebb9c298e37","sha512":"33a12b9742c647f3e88a8ae74d3521c88fccf56982517aa162f474981b5b0a3104047cdf9f8a1fc14979371c47ef6ba83f86567125ba88413c924efa90fde8f0","ssdeep":"192:26QDUBXfXYDvUWw6RlvDrIdcborDtBdurU9yzMOl:26Q4VfXYbUWlRJrI2orDRuHMOl","tlshash":"f2d171707e8885746f23ec25b7982fbd80249ae5d84974edf123852823caff10e85b4c","first_seen":"2026-09-01T10:21:13.824693Z","last_seen":"2026-09-01T20:54:52.765082Z","times_seen":6,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/swiper-core-R1npE_02.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.525Z","timestamp":1788296036525,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/swiper-core-R1npE_02.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"9d5589b341fddbbbf30a8dafbc901725\"\r\nlast-modified: Wed, 24 Jun 2026 14:40:35 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nage: 5113532\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad44f0756b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69380,"size_decoded":23296,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9d5589b341fddbbbf30a8dafbc901725","sha1":"82f1ec6b37c8b63c9e1c829ffd16504955e9c331","sha256":"02fb2557c9d8fbf868e34cb91705b81a2c2c6302f597eafecac7eda6f8a53539","sha512":"61ff026a014964e63de29f3bb105fd0791ccc9887c59396481813d576d902be8aea6a38f80c41a4e3940c234f3018949e958a8992b2b044c70f8eabacc9d79c6","ssdeep":"1536:g3RBJ0tQYVXhuuBJ7ILPf/uxPxcY3I4sTMWHasN/jPBl6vHeUBNFkK:ghBJ0RhudD/2PxcY44YM","tlshash":"6c630989a164753682e326da53a5c502b3a54c54b449c4e8b1fc8c6f597e89c03feffc","first_seen":"2026-06-24T21:34:31.156988Z","last_seen":"2026-09-02T23:44:25.307531Z","times_seen":514,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-B30_LksK.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.535Z","timestamp":1788296036535,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-B30_LksK.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453646\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"69e21ee39ff634dd65405945a0bf81b8\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad45f2456b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":776,"size_decoded":795,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"69e21ee39ff634dd65405945a0bf81b8","sha1":"7d98018fd898493fa33789a10baaeb4ecd6c8b84","sha256":"363cd7abf610160b04b6afbef5fd58ad126510325fe2e18a501ea4c5ad2b3a8b","sha512":"d9af453592c68588dee061e2bc378e5487b6bb463597d9eaca38084bcdca3e08af2a008dd70ecfda3364208000f1acc2f39fa6e359f62237b077faaaf83a8789","ssdeep":"","tlshash":"7301284da168a77d94add5eea761c493c5fc20c2fe31c48087f90d284b900ca53e6a4d","first_seen":"2026-08-28T05:09:58.753556Z","last_seen":"2026-09-01T20:54:52.76658Z","times_seen":33,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/shared/fonts/coolvetica/coolvetica-latin-ext.woff2","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.594Z","timestamp":1788296034594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/shared/fonts/coolvetica/coolvetica-latin-ext.woff2 HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY\r\nSec-GPC: 1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; cda_status=pass\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 22 Sep 2025 15:36:01 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 1906043\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"05ed695ae85fef9088497eb060465a34\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac83c8d56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18104,"size_decoded":18583,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18104, version 1.0","md5":"05ed695ae85fef9088497eb060465a34","sha1":"5e25a99ba6a07c226c3b39afc54c4ab9c6f7b00b","sha256":"63a6e4cc712514dd1bf47007039cef38f1106b9ccb509e9ac010636a0925b98b","sha512":"d1032139dbb4f382ab83aa2cd16e6a59752de22cb47fea572aee14f14f4a8145c346cfd6f12aeb4e8919b96307e4050d6d7fc8cfd27c14df2f794c8a758a1ec4","ssdeep":"384:KTiHt3AX2x5gMNYLxWmE43E3FyTmcFQItZl4bEvcmLTVPDn7LUKxoFu21KZNP:JdAX45HNbU9juItZ/7PhUcZNP","tlshash":"0782d0e10e12ed12dfc56a3c12c4238899e7448cadb54d4b1c6525af83c53ee39b7a6a","first_seen":"2025-08-29T00:15:47.494978Z","last_seen":"2026-09-02T23:44:25.097215Z","times_seen":4351,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/api/translations/v1/frontend/user.modal.auth/en-001.json?v=0.4051.0","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.172Z","timestamp":1788296036172,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /api/translations/v1/frontend/user.modal.auth/en-001.json?v=0.4051.0 HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nContent-Type: application/json\r\nTraceparent: 00-a89ba894a4642ff2db3785be07592c7c-9e2d5ba69b8f5fc8-00\r\npage-view-id: a89ba894a4642ff2db3785be07592c7c\r\nX-Origin: 1wfqxn.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: public, max-age=300, stale-while-revalidate=300, stale-if-error=259200\r\nlast-modified: Tue, 21 Apr 2026 15:28:50 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nage: 559\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: UPDATING\r\netag: W/\"6a73c5a419d9dbddbe05ef8191f36aeb\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad21c1d56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"UPDATING\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3061,"size_decoded":1689,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6a73c5a419d9dbddbe05ef8191f36aeb","sha1":"0b01f8597e5f3faff54fd673266d0ed06a686fff","sha256":"736c2bd61aad0ef8dc5e7888d1c804f873189ab9058d29ee055c59c4811d3901","sha512":"bfa5fb7b332fcb56cad960b87c1db0cb8635298be189480ffc284742317644fbaf6a2850902ccd74c4bd516aa3208d6570f8763ec069073c41e9923c7e93446b","ssdeep":"","tlshash":"ce51638742320cb39bdb93e394487689396bc0a6b857183597edd56f21abec6db07003","first_seen":"2026-03-05T08:15:59.265652Z","last_seen":"2026-09-02T23:44:25.148693Z","times_seen":922,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/swiper-vue-DmDUDxw-.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.529Z","timestamp":1788296036529,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/swiper-vue-DmDUDxw-.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"f850d9e2bfe26f29701bc847981bfe56\"\r\nlast-modified: Fri, 17 Jul 2026 09:37:33 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 2325482\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad44f1256b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19070,"size_decoded":6360,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19069)","md5":"f850d9e2bfe26f29701bc847981bfe56","sha1":"fc5b16fb4029d6cd3b3c78374d083a7e406d2068","sha256":"38d6cb730d8cdda9e8c0da965068cf06913520a69afcbb6c6454e7bb5a871bf0","sha512":"6cd54761be8ccbda27e4576686395327c6b667cc5d768158e7e78cfde04f93f44bfe2b35b6a22aac941b5e042e8dbe410423189779244952fb2aa2b260116d94","ssdeep":"384:/yk/9ylA6wSIuEf3XSuv2oYb/YVNQECntIQpfvkcYDxhqhE5gBtdVp5k+mkd3uJt:qkVylA6wSIuc3XSuv2x4Cntb9YDzqhE7","tlshash":"e082969db218e56306f78d57c237831024649adde811f8d0a5ca7bba814fe98130fbb9","first_seen":"2026-06-24T21:34:31.166435Z","last_seen":"2026-09-02T23:44:25.36368Z","times_seen":514,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"optimize.v3.bundlecdn.com/unsafe/quality/plain/https://v3.bundlecdn.com/b02632/plain/route/sport.svg","fqdn":"optimize.v3.bundlecdn.com","domain":"bundlecdn.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.781Z","timestamp":1788296036781,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /unsafe/quality/plain/https://v3.bundlecdn.com/b02632/plain/route/sport.svg HTTP/1.1\r\nHost: optimize.v3.bundlecdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nOrigin: https://1wfqxn.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T01:18:14.47199Z","times_seen":18246362,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/api/web/v1/sdui/templates/css-variables?h=84ffd3e806606baf\u0026country=NO\u0026subdivision=02","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.584Z","timestamp":1788296034584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /api/web/v1/sdui/templates/css-variables?h=84ffd3e806606baf\u0026country=NO\u0026subdivision=02 HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; cda_status=pass\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=2678400, immutable\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npriority: u=0,i=?0\r\nvary: accept-encoding\r\nage: 1724\r\nlast-modified: Tue, 01 Sep 2026 20:25:09 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac82c7556b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":168496,"size_decoded":23761,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"926fba5f17adee26f6ea1c97d4ea1d8c","sha1":"a3bcf4bbc1e00d9789ad572dedc970864e096e53","sha256":"f32edcca9174c95039bb93a6e67161c0526e84768f903cb5a5b586605fa9ad68","sha512":"a54afb9afb72391bcf043843fd87906ea7ef0a943c1113813ba9cbb919098f20cce8b7f57540293145b87fc8bb994a0c646df3e37d4e3d430fbf37d5856b9265","ssdeep":"1536:iEZm5j6GDIjWYORq+CYPZXv3e/XzXvEfV+ZK5N05dTJpS0OI:5","tlshash":"72f30db8f990a03f676b287e935cf5799208bc05ce115edebb50900a7dc6de311d2b1a","first_seen":"2026-09-01T10:21:14.835404Z","last_seen":"2026-09-02T03:21:21.878135Z","times_seen":7,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/flag-C10gW2Eq.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.874Z","timestamp":1788296034874,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/flag-C10gW2Eq.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"7327d6e3014ffab07469915192db9171\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:25 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640185\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca8fbe56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1197,"size_decoded":1242,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (917)","md5":"7327d6e3014ffab07469915192db9171","sha1":"ff3adf284127b72389f28e759f8dbf1faa0b18bb","sha256":"a2e4637d1dacb3114a6bdace04e044b10780574dda6b2860477b21aca5d3eac4","sha512":"a0fc6ef2685def319f4e33320d54d36d2d484705f47004ef03f31de8a4a3c1d391a1bbb737625fc827a5e3eacc6807bb251fef96db78769eb3a8a42cbe93defc","ssdeep":"","tlshash":"3e21415a1e5781b8266f44dee933d1e4b9cc106a6765d4e082adac3ceb50fed4019a84","first_seen":"2026-08-26T15:23:23.92869Z","last_seen":"2026-09-01T20:54:52.770306Z","times_seen":42,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/calendar-CtMt1wrH.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.889Z","timestamp":1788296034889,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/calendar-CtMt1wrH.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"29b370c63f513310a83c2b78ec4741fb\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca8fce56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1174,"size_decoded":1146,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1173)","md5":"29b370c63f513310a83c2b78ec4741fb","sha1":"c7aecc7e20e1740e389d8ac6212e29aa57235817","sha256":"05a0b1069ee7490e3567e2aa8534701bf37670dc5a60d100f1957147629a701b","sha512":"de584a0367361b5f4c37c953e40a07eb4e7aea98ea3903d8f2f67f8a0de93f9265da969b2e4e6c33cc874d483e4783e2b0a1afd42be8ec72715a0ed93c29732c","ssdeep":"","tlshash":"de21eeb2571c66ac46db23bbcf19fca0934498e832079265d38e57e505cb156ef0f805","first_seen":"2026-08-28T05:09:58.555742Z","last_seen":"2026-09-01T20:54:52.771069Z","times_seen":36,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/menu-section-item-tab.vue_vue_type_script_setup_true_lang-V2qdYP2T.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.927Z","timestamp":1788296035927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/menu-section-item-tab.vue_vue_type_script_setup_true_lang-V2qdYP2T.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"0b8bf43914bdf3cacd07f42f33c741b4\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad089a356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13892,"size_decoded":4692,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9875)","md5":"0b8bf43914bdf3cacd07f42f33c741b4","sha1":"692a848c8d947dabf4d1008b53399b438bbbaa7a","sha256":"c6a9ec7d6e60a142e34d89cfdccabeab05baf2e7181fa7576dd1bf5edf6abe79","sha512":"b47e2be0dd8ed743f55c7e57d4e5ba295e7b89623bb14e1eff538dbd57f2643cba0c09a7b561016b264db9ab9f3dde203456da0dc89adc61a053589386dacd6b","ssdeep":"192:2JK0TcXQwDLEZvwR4Swfrax08rxFz1wbDtwxsLLrVOm1CfDwJzVewSpkpnpxfwYf:2JKvpDAPS0etiD2KLflz4hBQn87V3M","tlshash":"be52f6979b62ba36673b28d68c1560e8d504166fce891cf1bd7da4350fee9f1e24030a","first_seen":"2026-08-28T05:09:58.819705Z","last_seen":"2026-09-01T20:54:52.771826Z","times_seen":34,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"optimize.v3.bundlecdn.com/unsafe/banner_mobile_5x/plain/https://d1x0nzb6t1pnx3.cloudfront.net/banner-files/tupzSU5cyzLHoAStbXbQ6TV-X8iTjL_8ju_kY5-lhwErE_0yrwzBYVzveMaImi6u8ji24N6c1AnGKlGaIJApBnGXn3w90LnN5sZc.png","fqdn":"optimize.v3.bundlecdn.com","domain":"bundlecdn.com","tld":"com"},"ip":{"addr":"194.67.193.128","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:54:12.744Z","timestamp":1788296052744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v3.bundlecdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:02:01 GMT","end":"Thu, 10 Sep 2026 13:01:53 GMT"},"fingerprint":{"sha1":"1D:AB:1D:06:89:8B:28:BA:DC:EA:83:A3:78:E0:DF:46:B8:AA:3B:23","sha256":"EC:47:30:E3:52:BC:01:30:AA:00:6A:62:A6:81:61:5B:C6:62:D0:80:C0:46:1D:56:53:E2:A3:EC:FE:31:7D:F7"}}},"request":{"raw":"GET /unsafe/banner_mobile_5x/plain/https://d1x0nzb6t1pnx3.cloudfront.net/banner-files/tupzSU5cyzLHoAStbXbQ6TV-X8iTjL_8ju_kY5-lhwErE_0yrwzBYVzveMaImi6u8ji24N6c1AnGKlGaIJApBnGXn3w90LnN5sZc.png HTTP/1.1\r\nHost: optimize.v3.bundlecdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:54:12 GMT\r\ncontent-type: image/avif\r\ncontent-length: 71955\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"tupzSU5cyzLHoAStbXbQ6TV-X8iTjL_8ju_kY5-lhwErE_0yrwzBYVzveMaImi6u8ji24N6c1AnGKlGaIJApBnGXn3w90LnN5sZc.avif\"\r\ncontent-security-policy: script-src 'none'\r\netag: \"D9Az74RL9gkueTxjVwFXRFpiOCfPXl167QFFfof1qpk/RIjg2MGU5NWM5YTRiNjgzM2NlMzQzNzljZTk2NjY1Nzg1Ig\"\r\nserver: cloudflare\r\nvary: Accept, accept-encoding\r\nx-request-id: TALZmcrdPcv2KXJ63g26O\r\npriority: u=5,i\r\nage: 1493648\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: a3472b39aff22efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71955,"size_decoded":72751,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"448af22635740bdefdfcc6e378d7d542","sha1":"502e6908f643c03fe4693363f8bbf8c379b94470","sha256":"da442bfb6a37fad73cdf98026d8b2c25c00dc7dd7840796f9b8587f0f802878a","sha512":"8acad9a3c68961d34ad6401529f65e82b8dba42c11180da8b63e3d24dd99ed22327e299e1e8c51dfa8042e2964fdc5b39a773a6f4fcc5791f4990bc1c7d04f6e","ssdeep":"1536:uR4CXc2dUCR0qDakj8HFDmur4iFPNQiIHmlX0ouW1:ufXc2qU/j8Hdmuf1NQiIHmlXMK","tlshash":"8063026def966b1bd3036259187c2fa61263c64a351d6ba8f500b39df364352ba34e08","first_seen":"2026-08-16T05:36:38.01386Z","last_seen":"2026-09-01T20:54:52.772583Z","times_seen":58,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/social-button-BjcOjugV.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.825Z","timestamp":1788296034825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/social-button-BjcOjugV.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"8f63c104ac776f20f268d051ca9ea307\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:41 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 18116\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac9ae8556b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53636,"size_decoded":13584,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (47946)","md5":"8f63c104ac776f20f268d051ca9ea307","sha1":"ecd5396d14aa750868662303357cc8c42e6ace79","sha256":"0a22a3c64dc5fbb26619f4ee18cedd83b2f1b498767cdfbc017933459f0d5e19","sha512":"ba1c4550581eeaab7fb5b4d2e19e51e3c4846010a6e4757054912dea666c5cfab064b83bdfca410f97ac22bbaa1b25c0e865f73673899c3cf46b9a5e3d418a86","ssdeep":"768:Nd7eu4mYu4TrzjgYq5obZOQdusTXF3ZaJ3Za0Pmo0z:jH4m54TEJ5obH/XFpYp6","tlshash":"e533a5bcb320826d65078ba5cf245185074ff5bd7d560aa0272ddf38a6cbebdea47900","first_seen":"2026-09-01T20:26:35.143174Z","last_seen":"2026-09-02T03:21:21.912646Z","times_seen":6,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/notification-DxUPrFsg.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.916Z","timestamp":1788296035916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/notification-DxUPrFsg.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"2f6782f5f4da336f3f8a6a2f1eb63f0a\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0796956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":834,"size_decoded":1010,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (833)","md5":"2f6782f5f4da336f3f8a6a2f1eb63f0a","sha1":"088996a9f0ccb160013f84c85ce7da4394fb534d","sha256":"3769f1bc131223c83789e9de2bb3616278acf3a413d488a7dffed3d90fea317f","sha512":"fb82afdf77b14773c5ee1f92ff004a59e2f30dce5e6d60e7f595594d18cb58a45c4d49cc6e1962a2d294f89dbab041d0b3f7335397b3ffa97cbfd05cbc0669df","ssdeep":"","tlshash":"fb01e3c6413077ec9eb3da5df73868b2075f80fd36554150096fd374c24b564f946a24","first_seen":"2026-08-28T05:09:58.550394Z","last_seen":"2026-09-01T20:54:52.773991Z","times_seen":34,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-favorite-snackbar-Bb-AxuUT.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.553Z","timestamp":1788296036553,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-favorite-snackbar-Bb-AxuUT.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"606b339de8eba37b39983dcd083b0ab1\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:41 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 18114\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad47f5156b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1641,"size_decoded":1452,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1640)","md5":"606b339de8eba37b39983dcd083b0ab1","sha1":"73bca216fac7dc9caadebdde86ea3bb023c9d36e","sha256":"f2867c0cc5495c5d6b3136ea81fa9130acae3b88c182d53cfb85c4a5098d37fc","sha512":"2f52b868765f168440e734787b3c50ab786106a65c1fe595732e5febdfe732b22aab759a105cb77f68efafc9d1a165c0b503e2ef5a0cd6113e2cd342a56f45b4","ssdeep":"","tlshash":"32317447a152d1772810ecfce810d0a122ab5a49f7a5cec0e08f8e458a435edd22ff2a","first_seen":"2026-09-01T20:26:35.085813Z","last_seen":"2026-09-01T20:54:52.774693Z","times_seen":5,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-548949LWLW\u0026cx=c\u0026gtm=4e68v1h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:54:02.842Z","timestamp":1788296042842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=G-548949LWLW\u0026cx=c\u0026gtm=4e68v1h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Tue, 01 Sep 2026 20:54:02 GMT\r\nexpires: Tue, 01 Sep 2026 20:54:02 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 160571\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":467053,"size_decoded":161155,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"81f550f1b1bceaed2e4a5a41dd6d70d6","sha1":"068d0fa09feb3548beacb1e78d8bf756e790a393","sha256":"ce34b2241f0abd6835f523a7b43ddcafc351b5fc6afe2bc7800983ba85f0bd62","sha512":"fc47deb290f35be24b56d8dfffea48bc8a163a54fd4d5b53ed7bb3dffbae9134f113b8e5ef6e49e02728d6fe86ced712f8b82b4a82b461b0b6a393d64365dcba","ssdeep":"6144:7Nld0NBIWgm+LpwhukcrsA/2EgD3YjQI+fVm/u6XCmtBJD:giWp+akQIomHPvd","tlshash":"d9a41acdb3c674229392f578903f018bb27a69a2b44cc899f28adcd42d3465a5177f7c","first_seen":"2026-09-01T20:40:30.299817Z","last_seen":"2026-09-01T20:54:52.775428Z","times_seen":2,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-548949LWLW\u0026cid=203192958.1788296043\u0026gtm=45je68v1h2v894728184z8894400803za20gzb894400803zd894400803\u0026rcb=8\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115616986~115938466~115938468~118897920~118897930~119791748~120385423\u0026z=657567559","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:54:03.120Z","timestamp":1788296043120,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:40:49 GMT","end":"Mon, 02 Nov 2026 08:40:48 GMT"},"fingerprint":{"sha1":"AC:46:A3:8B:39:87:22:F5:32:ED:16:91:E0:7E:28:F9:39:7F:D5:13","sha256":"A4:B2:FB:D3:1E:80:B3:DC:DB:0F:63:1F:D1:60:FE:3F:E6:F8:61:9E:91:4E:FF:2E:A6:1E:2D:71:C9:D0:1F:75"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-548949LWLW\u0026cid=203192958.1788296043\u0026gtm=45je68v1h2v894728184z8894400803za20gzb894400803zd894400803\u0026rcb=8\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115616986~115938466~115938468~118897920~118897930~119791748~120385423\u0026z=657567559 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Tue, 01 Sep 2026 20:54:03 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":578,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-09-03T01:18:22.992612Z","times_seen":1052628,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":2,"connect":16,"send":0,"wait":40,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/countdown-Fe8ATHd4.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.964Z","timestamp":1788296035964,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/countdown-Fe8ATHd4.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"6e3f47c6124cad68c8460190d0b2fb25\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:25 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nage: 640186\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0ca1756b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5595,"size_decoded":2147,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3919)","md5":"6e3f47c6124cad68c8460190d0b2fb25","sha1":"178eac85c197fce7686f5978799f6354aa14df1c","sha256":"a9f883e0cb644d80d3e29fda244c3897ed9e55e5ac5e8866cee097e53ee3b661","sha512":"7a631996dcb6998e2570250761065e3dddebba878be889c309386be13c3fdc3f9fce6d05d1246f3788ccc8fd2c0aef9a5e67880a8bc854c68f29a7317096369f","ssdeep":"48:X+PwepMsA6YAmMfkNaKTUhk2FsXKkQxZuhcJnMac5MeRIx4BK9cPIK96MZ31K9Wx:XwpMt6/mcEt72gKBza3geMtyzjRUn4","tlshash":"08b1e2d0e9b0f93b6cb3d9a6735a736c89859c27c9168ad8c19d190c1af7de30bc5701","first_seen":"2026-08-26T15:23:24.060959Z","last_seen":"2026-09-01T20:54:52.777732Z","times_seen":40,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/experiment.esm-BCOmDQQx.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.404Z","timestamp":1788296036404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/experiment.esm-BCOmDQQx.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"e028137514a2983006cc5760c2862195\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:25 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640186\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad38e1756b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79641,"size_decoded":25722,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e028137514a2983006cc5760c2862195","sha1":"af18e30f881293fe0dcef10dc1a1457d03b72385","sha256":"d6f693772fc762a6ba9748c0ea82f77ef0a262bf0c92aec5637d02bb73f937c5","sha512":"9a7f3fe139424d90fe25a1434c6c22919ff3b4f2f47b3a2f53b7a8c67553baf01608a4927b2336d58a98eb83dd57b90dc2b1d6546e8658f72337e30abbb8c7d7","ssdeep":"768:vqjBqWR9Bk4ZyhV8itnJQMCmFRC8dpJKPwzKAom+n8kWoTq4wJmaYEMYiQ9f09SI:iFqa92tKMZUiKWKpns+aoQ9BM9aKVck/","tlshash":"2973e8d9f28ab4354386e4a8d03f1116a73f3918d90c81bcf52ae6d72eb85095237b7d","first_seen":"2026-08-26T15:23:23.995044Z","last_seen":"2026-09-02T03:21:21.876512Z","times_seen":41,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-CLzzTvQ4.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.601Z","timestamp":1788296036601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-CLzzTvQ4.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"963b2dc3bbb8180cb1b178972c856b76\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453646\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad4cfb056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1402,"size_decoded":1006,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1401)","md5":"963b2dc3bbb8180cb1b178972c856b76","sha1":"f5eeb7bf01536f238b1275aec4edb8ec1389d9bb","sha256":"43c50092a0daa58410f080149e56697eb159636a6b6d2bf2d04d9c33c0f510dd","sha512":"6918f31e354212f0b53328c36bdf1ec869e8edbe3f2118f490cfc70c19f8a168582289f4d548d380c2a034d92003d5f5deffacb3d64e0d86e7c0b298b74e4cfb","ssdeep":"","tlshash":"07214744e978a7b8cbbd829e2b024083e4b431c3fd34e491a7f51c7c6ed4481537b94a","first_seen":"2026-08-28T05:09:58.468484Z","last_seen":"2026-09-01T20:54:52.779463Z","times_seen":32,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bundlecda.com/?cda_arg=c8iRlRP_jHG7ZwnoGN7BtLkZg4Siz8acVMwmcMmt54jc8_He-nk-miSWJmDiGm85FMUKMvnR3FGb4HbrTDAntmyCmPelpztvS0KmsJEXxAr4X37dis7oD6PUdFQ0uzrKflQTGeQRufdFcfJ3DUH6i3vCCS6xpCEN72oNQfcUmXxnR2LEL20RcgTYdjdf_lTj5KOlUd9iYBQI8u8xMA_M0DqOVaUq7ighfXjC3tHx8_ZUgmDMMYADWsmdyhjAMZyBmRPeIJO_dBZp2n32CtBkrBNPHeuz-WF2oZL5Ank0sSE4MrgVTIo9_vi9J_8AbMZBCG5w6uwLmRMYMoKLe-B03VLYsGZiauyPoh_L7P_e4xMVNO7A92HrsYoB_UoVwS22ROyzYChYOxOgHU01OztC0bwY5KjzEvMEAEDi6eFTCG2LiAFiaVrmd_SH_hpWsSwORgcOsZ66N-Zq_MMvWMBBL4eORNS7thM0cJFKyJWBL1Q","fqdn":"bundlecda.com","domain":"bundlecda.com","tld":"com"},"ip":{"addr":"194.67.193.4","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-01T20:53:54.311Z","timestamp":1788296034311,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"POST /?cda_arg=c8iRlRP_jHG7ZwnoGN7BtLkZg4Siz8acVMwmcMmt54jc8_He-nk-miSWJmDiGm85FMUKMvnR3FGb4HbrTDAntmyCmPelpztvS0KmsJEXxAr4X37dis7oD6PUdFQ0uzrKflQTGeQRufdFcfJ3DUH6i3vCCS6xpCEN72oNQfcUmXxnR2LEL20RcgTYdjdf_lTj5KOlUd9iYBQI8u8xMA_M0DqOVaUq7ighfXjC3tHx8_ZUgmDMMYADWsmdyhjAMZyBmRPeIJO_dBZp2n32CtBkrBNPHeuz-WF2oZL5Ank0sSE4MrgVTIo9_vi9J_8AbMZBCG5w6uwLmRMYMoKLe-B03VLYsGZiauyPoh_L7P_e4xMVNO7A92HrsYoB_UoVwS22ROyzYChYOxOgHU01OztC0bwY5KjzEvMEAEDi6eFTCG2LiAFiaVrmd_SH_hpWsSwORgcOsZ66N-Zq_MMvWMBBL4eORNS7thM0cJFKyJWBL1Q HTTP/1.1\r\nHost: bundlecda.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 238\r\nReferer: https://1wfqxn.life/\r\nOrigin: https://1wfqxn.life\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":238,"data":"initurl=https%3A%2F%2F1wfqxn.life%2F%3Fcda_id%3D266040e8d95ecf3364146e6469396ded%26redirect_data%3DeyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026cdaId=266040e8d95ecf3364146e6469396ded"}},"response":{"raw":"HTTP/2 303 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: text/html\r\nlocation: https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\ncf-cache-status: DYNAMIC\r\nserver-timing: cf-cache;desc=\"DYNAMIC\"\r\ncf-ray: a3472ac68c72b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"303","status_text":"See Other","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T01:18:14.47199Z","times_seen":18246362,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/merge-translations-CrjSAD2p.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.859Z","timestamp":1788296034859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/merge-translations-CrjSAD2p.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"fe140f1120aec43ab8e53ce2395b0b5f\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:41 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 18116\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca5f9456b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147947,"size_decoded":44426,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (59740)","md5":"fe140f1120aec43ab8e53ce2395b0b5f","sha1":"21a923a8cc61d361695ee75d1b197414e7aaebd5","sha256":"5a66861ee3dccd6c54db04081ffa97c26fc00836726cfb35cdc7df007139d7c9","sha512":"ba27bd9d1dcdc04798d870a83c9c79fc3c0e29bcf20d7be72a2951254f09510191636278cc74496466807bb3caba0daa3c94fca4bf05a802dbb2266f2c3697de","ssdeep":"3072:TBnvmfSqTdyi2GZTXyPuXWIYXEHA6OPZbUm:TNmfSqTdyi2GZTXOu8fbUm","tlshash":"f5e35cc2ba5121b99fb74ed5e810108416b65f14a897c4fdb27e1ead01ced90e3b3b36","first_seen":"2026-09-01T20:26:35.038595Z","last_seen":"2026-09-02T03:21:21.87114Z","times_seen":6,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/copy-BfN4uTgq.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.003Z","timestamp":1788296036003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/copy-BfN4uTgq.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"080eb19bac739b76ea519c59f7e5adec\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad10a7656b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":968,"size_decoded":1018,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (967)","md5":"080eb19bac739b76ea519c59f7e5adec","sha1":"a602d70e83b7531771accea86783c0eca3c1470b","sha256":"0dd9b2b5c913959c9b46dbc737d0fdba915850a100476c50ceab40914124d52f","sha512":"ccd1d6b5b66e9a451f74f2b8fe6a9c975a88b6f6fbf3406cef3794f5ea05765b32c2cf8243872570c17dcf485f8900a48290ba6add0c48c50fad9c0d64b9ef2d","ssdeep":"","tlshash":"d211bdad1309377c80178d69efb94811c76f6cec36b184c945bd4fb5c1c289aea67e60","first_seen":"2026-08-28T05:09:58.383633Z","last_seen":"2026-09-01T20:54:52.781167Z","times_seen":34,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/fortune-wheel-floating-widget-Demm8p3U.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.632Z","timestamp":1788296036632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/fortune-wheel-floating-widget-Demm8p3U.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"0182641614b656895d40c4b51d42fbb0\"\r\nlast-modified: Mon, 31 Aug 2026 08:29:24 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nage: 130822\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad4f80356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6299,"size_decoded":2873,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3705)","md5":"0182641614b656895d40c4b51d42fbb0","sha1":"cadd9b47674b8a2958e63dfe5ff0998e62fa2a8a","sha256":"b5135f28a75602915da65e706f66cbe3f75056a41e0341b57d8675e71c4b3295","sha512":"9b2f567b81f03900e4498831e1cc24e80e485870370e0011544010d91cf795ede31650cfd1d31e99aec411f670ca27d80c8f372f3678b5113a93fcd2b536c4ac","ssdeep":"192:TVQjDjO9hDJ2tpVT0JculWsX2YR9ysZEJxoO8nefQOWcVHLsy2VdsASzjKVfP:TVQjXO3d2hTalMz1rr2z1X","tlshash":"c6d173319a1046bcd5734a8bbe432311602ccbebe8158ecaa76d679685c78e5437fe0d","first_seen":"2026-09-01T10:21:14.433444Z","last_seen":"2026-09-01T20:54:52.781897Z","times_seen":6,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-01T20:53:53.392Z","timestamp":1788296033392,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T01:18:14.47199Z","times_seen":18246362,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/closable-tooltip-header-CzjRHpAW.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.926Z","timestamp":1788296035926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/closable-tooltip-header-CzjRHpAW.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"b814ffb93a7d9b7bd4865146295cf47c\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0899f56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1713,"size_decoded":1412,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (953)","md5":"b814ffb93a7d9b7bd4865146295cf47c","sha1":"894f7fa934bacec7225c0047717380550857af4f","sha256":"4096924d817481e3acf808c4fd4a83a2895fe1f66e8bb2a8c0edee9bcb7c8698","sha512":"347f2266982b70eaa1773ea41ba4982bd1305fb2d0a68cf2896f2d7f396d7a450e3dc7a830be66599b0f83b270bd4444aeb47208f4bb6358bf4676befc83b709","ssdeep":"","tlshash":"e631741ae632db78e037902b262ce749f48854bb0e75aef8952a147c07ddeb5430ab41","first_seen":"2026-08-28T05:09:58.852134Z","last_seen":"2026-09-01T20:54:52.782759Z","times_seen":34,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-D4N-b4Hw.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.969Z","timestamp":1788296035969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-D4N-b4Hw.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"522997c09383e0d922e64675d22d6e10\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nage: 453648\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0ca2a56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2600,"size_decoded":1630,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1448)","md5":"522997c09383e0d922e64675d22d6e10","sha1":"1445fd9977efba73bd45fcc49f73f1b0c291a678","sha256":"8dcd783b9b5a8157a27e67df6afa9da776bf7597f65ec75c7156846e58861be5","sha512":"9bb01e37a8f5cf5802f30e8f819ffe709c34ac5f50e02e059e93c4b61ee14e0125a62f4ee437fddf6acb379bbb94b0d6c30f7a9100b1affdfac742bfc9353bd9","ssdeep":"","tlshash":"4b5110022e844d36826c0fcc5c0560e159f58f52e914c88ebfb30d7c3278da95029f7a","first_seen":"2026-08-28T05:09:58.620277Z","last_seen":"2026-09-01T20:54:52.783582Z","times_seen":34,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/plus-NsoYnfxy.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.992Z","timestamp":1788296035992,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/plus-NsoYnfxy.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"ebea6a613f1f572bfc40920541e0ec4f\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0fa6256b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":370,"size_decoded":755,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (369)","md5":"ebea6a613f1f572bfc40920541e0ec4f","sha1":"b44ae92700ef00a8675929c8f83d92544c4d81b1","sha256":"898c25fc1f044aac4abb18ea0752af6e5268d7418aa8dd241ce9c398c651aa17","sha512":"d3ff5611bf74cd0a3a427c4a0ef69ac4434d6747fb72af86f865a5a37389ef9fc0c114cdb2981db2ac7f156bcd84d3962fd11bcb56919488a1b83526342e1f53","ssdeep":"","tlshash":"cde0d8fd02491bbc801ac778d73d1c872b1505ef638d81f0964e563a02970e8a45f9b5","first_seen":"2026-08-28T05:09:58.781552Z","last_seen":"2026-09-01T20:54:52.784436Z","times_seen":34,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/api/MS-SMALL-THINGS/support-chat-type","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.266Z","timestamp":1788296036266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /api/MS-SMALL-THINGS/support-chat-type HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nContent-Type: application/json\r\nTraceparent: 00-a89ba894a4642ff2db3785be07592c7c-52c0d4c0af38c260-00\r\npage-view-id: a89ba894a4642ff2db3785be07592c7c\r\nX-Origin: 1wfqxn.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: cloudflare\r\nx-cache-status: BYPASS\r\nx-envoy-upstream-service-time: 0\r\nx-trace-id: a89ba894a4642ff2db3785be07592c7c\r\npriority: u=4,i=?0\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\ncf-ray: a3472ad2acfb56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"BYPASS\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":436,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0cedb6d9691ef6fb0778eebe8382a470","sha1":"a3cb4bf0dc17603a0298ea0b906452944425c7d5","sha256":"6a1d3150ddb13740b4071c26a2bfbaa88de5f8faab2e20f369381d50d7ae4a1c","sha512":"678b08c7f7662749132cd9148046287dd08f39f46105f13f11f55051a47dc6b36c6b1ae7e472ba741105aa7b0a088c67a363efc1bf756267eb5775ac65e896bd","ssdeep":"","tlshash":"436000000cf0cc000300000300c00c00c0000030f0c00000c0f0c0f0cc0ccc0330030f","first_seen":"2025-09-11T00:07:37.060633Z","last_seen":"2026-09-02T23:44:25.580336Z","times_seen":3999,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/api/PROXY-SERVICE-CDP/v1-landings-ListLandingsInfo","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.414Z","timestamp":1788296036414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"POST /api/PROXY-SERVICE-CDP/v1-landings-ListLandingsInfo HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 13\r\nReferer: https://1wfqxn.life/\r\nTraceparent: 00-a89ba894a4642ff2db3785be07592c7c-810357f7a1ae6b6e-00\r\npage-view-id: a89ba894a4642ff2db3785be07592c7c\r\nX-Origin: 1wfqxn.life\r\nOrigin: https://1wfqxn.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13,"data":"{\"hash\":null}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 18\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nx-trace-id: a89ba894a4642ff2db3785be07592c7c\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: a3472ad39e2a56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18,"size_decoded":391,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5150062760fd989e7672c0299888c1e5","sha1":"038361dd460366c01c923ad4e0fc8d833557638d","sha256":"e857bc61b7902c22c859af108f56fa9e0acdadf4169bd22ec67b61743618af31","sha512":"38f57996aa7ded61f5244c89bdb154495a819c3411d86a2d10e229aa89083b45a4e68c4a67a235c260291faf7b10025045d90d05646d820a06aaa0856a2d489e","ssdeep":"","tlshash":"087000a00000280028c83222c800000088280020002080a0082800002280202a820000","first_seen":"2025-06-28T00:22:08.248251Z","last_seen":"2026-09-02T23:44:25.242904Z","times_seen":1634,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-game-favorite-DN_6nPgN.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.549Z","timestamp":1788296036549,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-game-favorite-DN_6nPgN.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 01 Sep 2026 14:42:41 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 18114\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"5093806658381a6fd30b6518de80e8e8\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad47f4856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":792,"size_decoded":931,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (791)","md5":"5093806658381a6fd30b6518de80e8e8","sha1":"5e0a725dccbf2096cd0e21282874d76acdff3c05","sha256":"d02ae15ed9a6f6d73bec29ff7cd2b8328031b724c2802750d136a25b1f78799d","sha512":"9f1d4d5c6d0e3041e7de4cbf6e38e662cc9a4e94a90800fc9baa76b80b90b25ef67e6e8cb17e72b9e7b8bd04c168cc8c1fbf130190f312b23263ba047eefe234","ssdeep":"","tlshash":"e801c29ee897a2334ee4bdc86d4ad46060192165b5694d84a04f4cd41b835fdd0daa34","first_seen":"2026-09-01T20:26:35.16137Z","last_seen":"2026-09-01T20:54:52.787089Z","times_seen":5,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/app-install-widget-BCBXPULo.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.627Z","timestamp":1788296036627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/app-install-widget-BCBXPULo.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"71f3246f2b0c6f07c30214d3a23d1efe\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 18114\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad4eff756b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58517,"size_decoded":7503,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (47138)","md5":"71f3246f2b0c6f07c30214d3a23d1efe","sha1":"98fddf848683c8ff9e6e5413cfbcdb97a9c7a20e","sha256":"9fa78a1e0a73d0d62dec0658ceb5beba3181134bcece305fda31f2c1de283d5f","sha512":"a50430fd42939946d9a2336c6e8e7748c49604f16ecc2154344a12b507335530815ee0c0c508d9f547dd1c28f6187fee05129312938d1ada1e28b6f730ec1ca0","ssdeep":"384:9g2kg8WUMyLPkuZRPDJ9X0uxWv6ZxyZEJZp5tZlyZcCZD2Z2SZvyBdWr9KTZ9IZJ:9Dkv5bzkuDPDJ9k+sduatOJJyGf","tlshash":"eb43ee3065669808c6f7cc3331cd1f633d19501262a68227da291eb89dfbd7b63d5b3a","first_seen":"2026-09-01T20:26:35.165864Z","last_seen":"2026-09-01T20:54:52.788005Z","times_seen":5,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-writing-direction-D2pP13p1.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.870Z","timestamp":1788296035870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-writing-direction-D2pP13p1.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 25 Aug 2026 10:52:27 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640186\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"270a50344ad7c336659aa0b452737741\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad028b856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":380,"size_decoded":738,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (379)","md5":"270a50344ad7c336659aa0b452737741","sha1":"c5641cb64cc2679b7181f0c9329a1ee146614fc8","sha256":"6b4ce287394dda3309a32d434e8458296626ab0ad110546b8c79359d7077f65a","sha512":"e4684937a0301c3840bb35e573dfb233d2c9decb3a4b1b47fd70f796f549e1cbaca1f34c51ccbf8324d4bf377a824d38531ace89c8f4081acbc16152332df7be","ssdeep":"","tlshash":"13e068a2748052706b194d8dd528503481026f697a30aae1818a11a70637e84c9bfc66","first_seen":"2026-08-26T15:23:24.159639Z","last_seen":"2026-09-01T20:54:52.788957Z","times_seen":40,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/result-empty-hgnMQ8Hk.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.004Z","timestamp":1788296036004,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/result-empty-hgnMQ8Hk.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"c84437019a15b2bbd56d65db2e481fbe\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad10a7b56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3195,"size_decoded":1762,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1763)","md5":"c84437019a15b2bbd56d65db2e481fbe","sha1":"5d7bd2f53893762cb88c265b9d1974d1a617d802","sha256":"497bf9d3fee3af107338d6646d9701175d04d729a0718ad4643a4a82debfbd00","sha512":"64a932d65bea60ac830c9590abe04176663f2898968092c93f79911b297795388ed21a3e6d013bd53b930d498d27f6a6a2dfe1aa07d4ac1fd05c30433ef4d17e","ssdeep":"","tlshash":"1a616585fe20d36cf5335c567b2a601cf00cf52e569aa9f8d1aa860947df9e2070cb42","first_seen":"2026-08-28T05:09:58.530756Z","last_seen":"2026-09-01T20:54:52.789707Z","times_seen":34,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/welcome-message-widget-CAmtS7fA.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.643Z","timestamp":1788296036643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/welcome-message-widget-CAmtS7fA.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"67edb3de34b17a78cb49800fcfa94ad5\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:41 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 18114\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad5081856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9628,"size_decoded":3988,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5072)","md5":"67edb3de34b17a78cb49800fcfa94ad5","sha1":"8ddd625607825fe69a2727af5e5bfa28d761ed6d","sha256":"548e165806c36606d61e12c0bc71f2ae1bfc011287f95ed9b72e748752075eee","sha512":"2d24d1309dae0f8f548bc45ab9919499804cc88398897bfe609a1f6abd435bc091555a5705215a6011ea7b1edd4aa08842292623c5cedece9618d5ddb1c74af8","ssdeep":"192:MkKULRq1TvkXCrBJ8XnF5ziJD8tIRnWlTe5yZ3ZmS3j4MT3:MkrLaT8XCrBJwn7sACZATayZ3ZmS3j/7","tlshash":"0712a496e9598d3e80b7a15e3a49710c1468b7daa2237ed6dc3c0d7103ef8f02563b94","first_seen":"2026-09-01T20:26:35.048421Z","last_seen":"2026-09-01T20:54:52.790534Z","times_seen":5,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/billing-CXRxlN5l.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.764Z","timestamp":1788296036764,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /resources/v1/app/assets/billing-CXRxlN5l.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"ea23bde4c11f248ac55035b71001b67e\"\r\nlast-modified: Mon, 31 Aug 2026 08:29:24 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 130822\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad5c90656b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T01:18:14.47199Z","times_seen":18246362,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"optimize.v3.bundlecdn.com/unsafe/quality/plain/https://v3.bundlecdn.com/b02632/plain/route/freemoney.svg","fqdn":"optimize.v3.bundlecdn.com","domain":"bundlecdn.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.780Z","timestamp":1788296036780,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /unsafe/quality/plain/https://v3.bundlecdn.com/b02632/plain/route/freemoney.svg HTTP/1.1\r\nHost: optimize.v3.bundlecdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nOrigin: https://1wfqxn.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T01:18:14.47199Z","times_seen":18246362,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/api/web/v2/tracker/events","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:54:09.658Z","timestamp":1788296049658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"POST /api/web/v2/tracker/events HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 4251\r\nReferer: https://1wfqxn.life/\r\nOrigin: https://1wfqxn.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4ODI5NjA0MzEyNyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMTQlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=; click_id=fc118dc3-52d1-4272-a893-34b2875f81dc; visitor-id=f8b6e427-3bc5-4fed-9652-9a27a2c2250d; should_restore_hash=false; _gcl_au=1.1.755945686.1788296043; _ga_548949LWLW=GS2.1.s1788296043$o1$g0$t1788296043$j60$l0$h0; _ga=GA1.1.203192958.1788296043\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4251,"data":"{\"events\":[{\"eventSchemaVersion\":1,\"eventType\":\"page_view\",\"source\":{\"app\":\"web\",\"appVersion\":\"0.4051.0\"},\"eventContext\":{\"client_time_zone\":\"UTC\",\"device_type\":\"desktop\",\"device_id\":\"d82ee640-860d-42b5-a799-8dfc078913e2\",\"session_id\":\"1788296033728\",\"redesign\":\"redesign\"},\"eventData\":{\"client_event_time_utc\":\"2026-09-01T20:53:56.380\",\"page_url\":\"https://1wfqxn.life/\",\"event_type\":\"page_view\",\"event_cat\":\"page\",\"referrer\":\"\",\"country\":\"Norway\",\"custom_url\":\"https://1wfqxn.life/\",\"client_event_time\":\"2026-09-01T20:53:56.380\",\"client_time_zone\":\"UTC\",\"device_type\":\"desktop\",\"os_version\":\"Windows 10\",\"page_referrer\":\"\",\"platform\":\"web\",\"screen_resolution\":\"1280x1024\",\"is_webview\":false}},{\"eventSchemaVersion\":1,\"eventType\":\"fortune_widget_view\",\"source\":{\"app\":\"web\",\"appVersion\":\"0.4051.0\"},\"eventContext\":{\"client_time_zone\":\"UTC\",\"device_type\":\"desktop\",\"device_id\":\"d82ee640-860d-42b5-a799-8dfc078913e2\",\"session_id\":\"1788296033728\",\"redesign\":\"redesign\"},\"eventData\":{\"client_event_time_utc\":\"2026-09-01T20:53:56.772Z\",\"page_url\":\"https://1wfqxn.life/\",\"event_type\":\"fortune_widget_view\",\"event_cat\":\"fortune_widget\",\"referrer\":\"\"}},{\"eventSchemaVersion\":1,\"eventType\":\"burger_menu_banner_view\",\"source\":{\"app\":\"web\",\"appVersion\":\"0.4051.0\"},\"eventContext\":{\"client_time_zone\":\"UTC\",\"device_type\":\"desktop\",\"device_id\":\"d82ee640-860d-42b5-a799-8dfc078913e2\",\"session_id\":\"1788296033728\",\"redesign\":\"redesign\"},\"eventData\":{\"client_event_time_utc\":\"2026-09-01T20:53:56.979Z\",\"page_url\":\"https://1wfqxn.life/\",\"event_type\":\"burger_menu_banner_view\",\"event_cat\":\"burger_menu\",\"referrer\":\"\",\"banner_name\":\"appbanner\"}},{\"eventSchemaVersion\":1,\"eventType\":\"burger_menu_banner_view\",\"source\":{\"app\":\"web\",\"appVersion\":\"0.4051.0\"},\"eventContext\":{\"client_time_zone\":\"UTC\",\"device_type\":\"desktop\",\"device_id\":\"d82ee640-860d-42b5-a799-8dfc078913e2\",\"session_id\":\"1788296033728\",\"redesign\":\"redesign\"},\"eventData\":{\"client_event_time_utc\":\"2026-09-01T20:53:56.980Z\",\"page_url\":\"https://1wfqxn.life/\",\"event_type\":\"burger_menu_banner_view\",\"event_cat\":\"burger_menu\",\"referrer\":\"\",\"banner_name\":\"freemoney\"}},{\"eventSchemaVersion\":1,\"eventType\":\"time_first_load\",\"source\":{\"app\":\"web\",\"appVersion\":\"0.4051.0\"},\"eventContext\":{\"client_time_zone\":\"UTC\",\"device_type\":\"desktop\",\"device_id\":\"d82ee640-860d-42b5-a799-8dfc078913e2\",\"session_id\":\"1788296033728\",\"redesign\":\"redesign\"},\"eventData\":{\"client_event_time_utc\":\"2026-09-01T20:53:57.015Z\",\"page_url\":\"https://1wfqxn.life/\",\"event_type\":\"time_first_load\",\"event_cat\":\"time\",\"referrer\":\"\",\"token_ready_time\":2250,\"config_ready_time\":1549,\"lang_load_time\":2250,\"page_load_time\":2413,\"banners_load_time\":2886,\"is_mobile\":false,\"geo\":\"NO\",\"url\":\"https://1wfqxn.life/\"}},{\"eventSchemaVersion\":1,\"eventType\":\"casino_category_view\",\"source\":{\"app\":\"web\",\"appVersion\":\"0.4051.0\"},\"eventContext\":{\"client_time_zone\":\"UTC\",\"device_type\":\"desktop\",\"device_id\":\"d82ee640-860d-42b5-a799-8dfc078913e2\",\"session_id\":\"1788296033728\",\"redesign\":\"redesign\"},\"eventData\":{\"client_event_time_utc\":\"2026-09-01T20:53:57.266Z\",\"page_url\":\"https://1wfqxn.life/\",\"event_type\":\"casino_category_view\",\"event_cat\":\"casino\",\"referrer\":\"\",\"category_slug\":\"1win-games\",\"category_name\":\"1win-games\",\"vertical_index\":0,\"game_id_kit\":[\"v_1wingames:luckyjet\",\"v_1wingames:rocketqueen\",\"v_1wingames:blackjack\",\"v_1wingames:mines_classic\",\"v_1wingames:crash\",\"v_1wingames:mines\",\"v_1wingames:coinflip\"],\"position_index_kit\":[0,1,2,3,4,5,6]}},{\"eventSchemaVersion\":1,\"eventType\":\"casino_category_view\",\"source\":{\"app\":\"web\",\"appVersion\":\"0.4051.0\"},\"eventContext\":{\"client_time_zone\":\"UTC\",\"device_type\":\"desktop\",\"device_id\":\"d82ee640-860d-42b5-a799-8dfc078913e2\",\"session_id\":\"1788296033728\",\"redesign\":\"redesign\"},\"eventData\":{\"client_event_time_utc\":\"2026-09-01T20:53:57.268Z\",\"page_url\":\"https://1wfqxn.life/\",\"event_type\":\"casino_category_view\",\"event_cat\":\"casino\",\"referrer\":\"\",\"category_slug\":\"all-games\",\"category_name\":\"all-games\",\"vertical_index\":1,\"game_id_kit\":[\"v_pragmatic:gatesofolympussuperscatter\",\"v_pragmatic:sugarrush1000\",\"v_pgsoft:wildbandito\",\"v_pragmatic:thedoghousemegaways\",\"v_pragmatic:gatesofolympus1000\",\"v_pgsoft:treasuresofaztec\",\"v_hacksawgaming:lebanditmobile\"],\"position_index_kit\":[0,1,2,3,4,5,6]}}]}"}},"response":{"raw":"HTTP/3 204 \r\ndate: Tue, 01 Sep 2026 20:54:09 GMT\r\nserver: cloudflare\r\nx-trace-id: 473d01c9b88a4142601c53d8ae0f6eac\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\ncf-ray: a3472b265d8c56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":6652,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T01:18:14.47199Z","times_seen":18246362,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/lock-CgFTFImv.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.884Z","timestamp":1788296034884,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/lock-CgFTFImv.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"afe70efe706c03c4cf4a1c21bfc1c47a\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca8fc956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1113,"size_decoded":1147,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1112)","md5":"afe70efe706c03c4cf4a1c21bfc1c47a","sha1":"79215426bac5f963e33112260fa25f6fafc06cd2","sha256":"fed8f304a6406af0e086f4273bf869b2a7f830133bbbccefa95d9e3da58a019a","sha512":"bdc6ab998dff86a5d8ed785841cb5120a2abdf9f5a060758ff210c814e701e9b082bb6a7b105b54eca4f3697cc4707be50906e4f0077e7287acad45f7bb54134","ssdeep":"","tlshash":"132100e65328639c886fe83d8a3fed89430e94be3a2a41d54e1ec374909e060e507874","first_seen":"2026-08-28T05:09:58.376577Z","last_seen":"2026-09-01T20:54:52.791249Z","times_seen":36,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/messages-JryZL6QX.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.864Z","timestamp":1788296035864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/messages-JryZL6QX.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"1d7f98cc5ec7d4e1987485a93ef15f07\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad028a056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":586,"size_decoded":912,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (585)","md5":"1d7f98cc5ec7d4e1987485a93ef15f07","sha1":"61024dd6d474131e423422b21af317b9b76f71b7","sha256":"d1a29ab1807ba7a61cc67b303fb8d2b1ce6ba4561b398ff9c374708c2341df7d","sha512":"27791f156077a6cea8e45ab4f6fdf7c09d9a2f38af700c4abf0b6cf0620a004f040f44403ac92f8363472470b92f2664b70758deec54a8faae1206d3d781b83e","ssdeep":"","tlshash":"3cf04179036a286cb563808cd3780811870c049e3b8ac8cd1b1f8e628326ea0db4fa35","first_seen":"2026-08-28T05:09:58.476837Z","last_seen":"2026-09-01T20:54:52.791966Z","times_seen":35,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-h_aBb3DQ.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.956Z","timestamp":1788296035956,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-h_aBb3DQ.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"28ba03e7f5378977b335a59fbdc42f7c\"\r\nlast-modified: Tue, 01 Sep 2026 09:52:08 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nage: 39172\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0b9f956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2131,"size_decoded":1675,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1261)","md5":"28ba03e7f5378977b335a59fbdc42f7c","sha1":"3a4afdd9b22d485f2aa0302c849f066f4331ff46","sha256":"b7395ba70501af1d63a194e64e27849b3020f2fcdf5bd84025b64e0a70f46902","sha512":"702b0a31d45ee09ef384a8fee2300fa391243d81b6a6f364e3352d9aea6bb295203b3f159e8ffb3a757f3e524f9ca9471cd17ac3ed2fddddb7d994b9cc7463e5","ssdeep":"","tlshash":"e0416147a5411db203bc8ddddc1297d10ebc8b52e514ceddb8769c393290da84426b74","first_seen":"2026-09-01T10:21:15.131777Z","last_seen":"2026-09-01T20:54:52.792656Z","times_seen":6,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/title-DFpgr-se.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.961Z","timestamp":1788296035961,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/title-DFpgr-se.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"f4d3880ca73a61bf92574109c2dd2e13\"\r\nlast-modified: Mon, 31 Aug 2026 14:52:28 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 106642\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0ca0956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5286,"size_decoded":2351,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2815)","md5":"f4d3880ca73a61bf92574109c2dd2e13","sha1":"78410c17550d08d88ef294cdb0547334e2130a76","sha256":"11da725f691a30188d5c92d8d48ba354b9ad83a5890b92980888776e6d62ef5e","sha512":"e71d3bdf06d278ff197e6e3387f54e7bf4a737af746c784befa0c467ad2f54e666ea12055fe7bfe8beffb17699364fe297799955c71c6b625b13c75ba1ae608c","ssdeep":"48:uNqDBmOR74lDkwwo3VqxmIriQcHwsQjABVV9RvlDPIMw8VhPncunAKR94EDZAEfN:nPAkwQibHwssAnDRtDAwks1PVCqE4","tlshash":"d4b16205be01e12ce5bb1c563346b444b14c911a8fb55af991fa8bab1bf6dd04312b49","first_seen":"2026-09-01T10:21:15.097313Z","last_seen":"2026-09-01T20:54:52.793465Z","times_seen":6,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/api/translations/v1/frontend/support.modal.support/en-001.json?v=0.4051.0","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.766Z","timestamp":1788296036766,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /api/translations/v1/frontend/support.modal.support/en-001.json?v=0.4051.0 HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nContent-Type: application/json\r\nTraceparent: 00-a89ba894a4642ff2db3785be07592c7c-2c865825329fe94a-00\r\npage-view-id: a89ba894a4642ff2db3785be07592c7c\r\nX-Origin: 1wfqxn.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T01:18:14.47199Z","times_seen":18246362,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"optimize.v3.bundlecdn.com/unsafe/quality/plain/https://v3.bundlecdn.com/b02632/plain/route/home.svg","fqdn":"optimize.v3.bundlecdn.com","domain":"bundlecdn.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.777Z","timestamp":1788296036777,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /unsafe/quality/plain/https://v3.bundlecdn.com/b02632/plain/route/home.svg HTTP/1.1\r\nHost: optimize.v3.bundlecdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nOrigin: https://1wfqxn.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T01:18:14.47199Z","times_seen":18246362,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/language-icon-D-uDdp3n.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.925Z","timestamp":1788296035925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/language-icon-D-uDdp3n.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"778e2fca9c2ff27f724c21731a99ea0e\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:26 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640186\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0899b56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1540,"size_decoded":1266,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (947)","md5":"778e2fca9c2ff27f724c21731a99ea0e","sha1":"39a20433104dfc8d35e1b4ff7156863aec0689c6","sha256":"dd46982a46ac01462d696a52ccdefe8372924984d6dab49310fdb6d7ae9737a4","sha512":"8f6a5f48e3f4a0caa7764f805292a0006071d10cdeb2de6fc162390d94df54094033f83331320302ebd8119561a7a5fdd0f22027b65f212b835230d210511a61","ssdeep":"","tlshash":"eb31df1ba63251a5731b0846f0e0f975a06100abef22bf59c7ed4d387ae543c546629d","first_seen":"2026-08-26T15:23:24.376385Z","last_seen":"2026-09-01T20:54:52.79433Z","times_seen":40,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/game-utils-CAbqOn9a.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.556Z","timestamp":1788296036556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/game-utils-CAbqOn9a.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 09 Jun 2026 09:54:41 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 2049429\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"1e047b1ea65fd1a6fcde175d025a512b\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad47f6056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":782,"size_decoded":938,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (781)","md5":"1e047b1ea65fd1a6fcde175d025a512b","sha1":"5b18c36f4d8f95fd6210bd408cf98595d654df12","sha256":"a727d707e417f1f81a70c0644927d442a98006f6992d341658f9e51988122b0a","sha512":"c0f1d7770a6bef28f6ecca4c82711e29238098ff4ce140e88c2f9063d8ddfa70c16b53a6a453cafd01ec314fd7fedb20a750eeef88c0332a76b22d8d95e9b1bd","ssdeep":"","tlshash":"a701d5e9625998b842b146dff53e70b8b88132583803f0c5143ddd3699f6fc3515ee65","first_seen":"2026-06-09T11:00:46.170784Z","last_seen":"2026-09-02T23:44:25.204196Z","times_seen":625,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.bundlecdn.com/healthy","fqdn":"v3.bundlecdn.com","domain":"bundlecdn.com","tld":"com"},"ip":{"addr":"194.67.193.128","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wfqxn.life/","date":"2026-09-01T20:53:54.252Z","timestamp":1788296034252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v3.bundlecdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:02:01 GMT","end":"Thu, 10 Sep 2026 13:01:53 GMT"},"fingerprint":{"sha1":"1D:AB:1D:06:89:8B:28:BA:DC:EA:83:A3:78:E0:DF:46:B8:AA:3B:23","sha256":"EC:47:30:E3:52:BC:01:30:AA:00:6A:62:A6:81:61:5B:C6:62:D0:80:C0:46:1D:56:53:E2:A3:EC:FE:31:7D:F7"}}},"request":{"raw":"GET /healthy HTTP/1.1\r\nHost: v3.bundlecdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nOrigin: https://1wfqxn.life\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 2\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS, HEAD\r\nvary: accept-encoding\r\nserver-timing: cf-cache;desc=\"\"\r\nserver: cloudflare\r\ncf-ray: a3472ac61a354c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":351,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-09-03T01:17:20.27612Z","times_seen":374492,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/phone-input-BO9f-C7h.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.878Z","timestamp":1788296034878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/phone-input-BO9f-C7h.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"d3fe4bcfbaac0f4e4bc147073bc125bb\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca8fc856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129475,"size_decoded":38133,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (64609)","md5":"d3fe4bcfbaac0f4e4bc147073bc125bb","sha1":"c76f839eac6880d308216381805a51ecc93555f5","sha256":"9bdb3f9e176ce0c5a6b70b2ad7b763a7e42585a448cd3330b49098591007c9ac","sha512":"e3b3f212aaea7681d9c5c86d1b13ad63746fd0ac3eee444510ed1f53eba1e95d641e70df6e1874a08af89ae762f207f64042ed7ea64eba772e79fab5def29b09","ssdeep":"3072:TBOe03o4PwjKtwUMWbXcKMYVi5IqwECDP:TBBKyUMWjJMYVi3M","tlshash":"cec375b77a40ab6775b13f18cf06e28f9fcc8c92dc98a08c9ae7d9db1950821607d715","first_seen":"2026-08-28T05:09:58.603627Z","last_seen":"2026-09-01T20:54:52.796522Z","times_seen":36,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":69,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/arrow-top-BRP9gQTA.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.929Z","timestamp":1788296035929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/arrow-top-BRP9gQTA.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"8dcb8494bf3f5279a1afdfcc716f7c0e\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad089aa56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":393,"size_decoded":772,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (392)","md5":"8dcb8494bf3f5279a1afdfcc716f7c0e","sha1":"b7845580a3b5ed8586691c774641d1a5426a2074","sha256":"a4330596e977dd57cc46b458b5b1e98d75ccdcc86974ff8696aa60e4b2cc23e9","sha512":"001f5962e7bfa5ab54dea417fe9aae72cb68821e0f4dd66ea1d900744723decac066c99055e704114fb38de050e677ce5169edb4d412543b6dbdd8b196528821","ssdeep":"","tlshash":"d4e0d1bd015896f9442b4a78c23e0c95470d6ffa37c944d05a1e693a86931e4fc4f539","first_seen":"2026-08-28T05:09:58.582675Z","last_seen":"2026-09-01T20:54:52.797397Z","times_seen":34,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-xuAcHwP9.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.971Z","timestamp":1788296035971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-xuAcHwP9.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 25 Aug 2026 10:52:26 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640186\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"cef17d843652fef238beb66aaeec462f\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0da3056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":449,"size_decoded":802,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (448)","md5":"cef17d843652fef238beb66aaeec462f","sha1":"8b00cac5c1a3963fa1bb527d7d00e69d8b28a103","sha256":"ba948e93b681693014d449b00a55c866a1e7851d297e25f5292e185be3d5b285","sha512":"f0e00ea84f780ca2419bdb7fa4495fff9a8752b01e31f20940e24b544d9d912351884bce0e405e0e519aae67dad1d3c45f7852a3f0483ffb119e55b070f42167","ssdeep":"","tlshash":"1bf0a3b790068bf428bf89f5c52cd562566205d70741c3d152ff775127460e7611e20b","first_seen":"2026-08-26T15:23:24.174535Z","last_seen":"2026-09-01T20:54:52.798222Z","times_seen":40,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/progress-bar-C5vEPBJU.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.989Z","timestamp":1788296035989,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/progress-bar-C5vEPBJU.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"09f647e25a47eba18355cd3ed0b3e3c3\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:26 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640186\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0ea5a56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3308,"size_decoded":1825,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2208)","md5":"09f647e25a47eba18355cd3ed0b3e3c3","sha1":"b46117afa53d7fbf9f1e6837717b250e742d4e78","sha256":"58816e287b6bffb522dce977a266d767ef74373c8a2f3279e43818674c6d1876","sha512":"6dcd6de00e59fc251ea8c1c0b522f347a4ca3634c5e15869943ac58cca8cc660887b303eae66ea88df46ef049b59954cf85b84a5a3b2e2dfe0935d6a43bcef44","ssdeep":"","tlshash":"6f611f24cc245138b89a581807d4804663546d1ac63fee98bf7cd5a8d3d2fe71d8bfe1","first_seen":"2026-08-26T15:23:24.065535Z","last_seen":"2026-09-01T20:54:52.799049Z","times_seen":40,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/","date":"2026-09-01T20:53:54.249Z","timestamp":1788296034249,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=15TCttaZbU7__OcCWkTiRGRV3tL9qozMVuRAhCxDPUE-1788296033.449123-1.0.1.1-IK9TSE1UMZnbMe4R6ZrHF2RqPLMwo4Zz7kS8g7mqzGLbVPPFj7NRf.J0V.W0peESZno3ULzSyEKwBIwl.JsjwgEZOEIBT_EUrLL6.ZAMl3dES0ehtTg3v0_ija14WiTxKULHQqZ08o5S7mK7ZW4KLA; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/e694063b5082/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=gZinnsDQWXdVm6hovdrnVwcVT2_NoNY3YyBc35CPmBY-1788296034.2515638-1.0.1.1-CQertdLvLv0MxE5JF5eH_3oYg_QRk61G1eNoPnGv4oynEL2jR2uyK22r9cxnrn1JbIa9a4WWa3h3ZeHl8wc8Q6j_LsxizQDTe0Z13aYvGHZFPrlY45MFXpiEoYiBHruqPDtWOQtelQdLuPhJ_28N_A; HttpOnly; SameSite=None; Secure; Path=/; Domain=1wfqxn.life; Expires=Tue, 01 Sep 2026 21:23:54 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3472ac6092f56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"gZinnsDQWXdVm6hovdrnVwcVT2_NoNY3YyBc35CPmBY-1788296034.2515638-1.0.1.1-CQertdLvLv0MxE5JF5eH_3oYg_QRk61G1eNoPnGv4oynEL2jR2uyK22r9cxnrn1JbIa9a4WWa3h3ZeHl8wc8Q6j_LsxizQDTe0Z13aYvGHZFPrlY45MFXpiEoYiBHruqPDtWOQtelQdLuPhJ_28N_A","quoted":false,"path":"/","domain":"1wfqxn.life","expires":"2026-09-01T21:23:54Z","raw_expires":"Tue, 01 Sep 2026 21:23:54 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=gZinnsDQWXdVm6hovdrnVwcVT2_NoNY3YyBc35CPmBY-1788296034.2515638-1.0.1.1-CQertdLvLv0MxE5JF5eH_3oYg_QRk61G1eNoPnGv4oynEL2jR2uyK22r9cxnrn1JbIa9a4WWa3h3ZeHl8wc8Q6j_LsxizQDTe0Z13aYvGHZFPrlY45MFXpiEoYiBHruqPDtWOQtelQdLuPhJ_28N_A; HttpOnly; SameSite=None; Secure; Path=/; Domain=1wfqxn.life; Expires=Tue, 01 Sep 2026 21:23:54 GMT"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T01:18:14.47199Z","times_seen":18246362,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/get-captcha-enabled-DGcPoDlP.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.861Z","timestamp":1788296034861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/get-captcha-enabled-DGcPoDlP.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"82de50813279bd2c55a33b2b2979f2f4\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca5f9956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":555,"size_decoded":871,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (554)","md5":"82de50813279bd2c55a33b2b2979f2f4","sha1":"cc558cc588f9578b5a4e3b80890bfbef3d9c1afe","sha256":"c84a459a5a59d049b0a51922af05e89189a6b97389f11c09600846158aa8fce5","sha512":"33720db27f2b2772ad759581e58e602fb586eb04b3987d2630a01b18031fed5280dc5473e5b5e2268135e45c551aff5533a81a5503b606e228e4a3d14a1a1c3c","ssdeep":"","tlshash":"5bf026257449313c070f9c1cce35c55616594555f620d8de714a9fcd42c79d3810be36","first_seen":"2026-08-28T05:09:58.698253Z","last_seen":"2026-09-01T20:54:52.799834Z","times_seen":36,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/form-group-label-CuJCOnOy.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.888Z","timestamp":1788296034888,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/form-group-label-CuJCOnOy.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"a7e9c2f8499eb8227cffdc89a2a3aba1\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:25 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nage: 640185\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca8fcd56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1046,"size_decoded":1077,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (538)","md5":"a7e9c2f8499eb8227cffdc89a2a3aba1","sha1":"602c17136fe6f6868e67d63480fc78280a900555","sha256":"8a8be80c77c9494a4c1f1d26de101b3fb44deff4cdda55c5f6d73050c0cd4f0f","sha512":"d934f4bb3a69fdf099f899b383ac811979061b933a7e030c381fc51d9f7ab41e4c275b8305f3e1eea4779b649ecc94d64bc27c9b99e51a586485bef6df853b02","ssdeep":"","tlshash":"4b114291fab1d4f49a7f1c6b7e3ca1a49048a476171798d4c32e8d9c46d9ce24245f82","first_seen":"2026-08-26T15:23:24.085654Z","last_seen":"2026-09-01T20:54:52.800611Z","times_seen":42,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-BFVaf78N.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.882Z","timestamp":1788296035882,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-BFVaf78N.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"fecf651d801e94caf5efaa50e7bf1d32\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nage: 18116\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad048eb56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10051,"size_decoded":4664,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (8108)","md5":"fecf651d801e94caf5efaa50e7bf1d32","sha1":"91c8b0fa87c419df7a6a5124fc4062fd0e704de8","sha256":"a5627500c03ae89ba7cf86add0850ba29693d6e4df01a9e7c13434ddceb65480","sha512":"06b3c1c174d794bff6a23216387d132adc40e94f164e35a7c37915301418e20c7193c80c32485598accffb52a31cfc78859023c88835e2bae897e33db225300d","ssdeep":"192:3SaTaJ7VhammFoHSg1dE5TfrX38ywv8xaX0LQjqwvHeQ3uwhyMLVzIM:CaTq7q8yIEhfrX3mv8NQjB/3uwhqM","tlshash":"a022d540a099387463fe4e98dda484d046bd4b12b530c8edfe3e0e3eb586954a16bf76","first_seen":"2026-09-01T20:26:35.069616Z","last_seen":"2026-09-01T20:54:52.801459Z","times_seen":5,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/banner-support.vue_vue_type_script_setup_true_lang-B0i5x-uk.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.508Z","timestamp":1788296036508,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/banner-support.vue_vue_type_script_setup_true_lang-B0i5x-uk.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"403a54789c097a51220c13b629d67292\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453646\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad42eeb56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11752,"size_decoded":3325,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7659)","md5":"403a54789c097a51220c13b629d67292","sha1":"6349c383248545c0c43d67fc616014b79d2abdd1","sha256":"3fe2ec4986119ab9de817387d84762b0eef8c23357cec5f4791d20ef038c2f0f","sha512":"16aabc3a734e49e393dfbd91a2e28a59ace9523a826095cdb282697fd171e569ef1310e010fc2f5ccfc30e2a6ddb74277e4d998d5cba29462236e432210d1425","ssdeep":"192:OfHuwhnFujtINAwCyU7fU/3ixwkJuCqyzGrDDK47AZ5JuUqyzr9U+rEW6d:OPnhnFUt0ZCyU7cP/GuYGrL8BuSrTrO","tlshash":"fa329571fe70aa7cf7379c4aff1f0c58916cd525ea4aabe9d048635c03caab24155b02","first_seen":"2026-08-28T05:09:58.867751Z","last_seen":"2026-09-01T20:54:52.802234Z","times_seen":33,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-casino-preset-r3mZcdI4.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.588Z","timestamp":1788296036588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-casino-preset-r3mZcdI4.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 25 Aug 2026 12:35:08 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 634451\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"470933dbe4d25cde93c1c0d80558f60d\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad4af9d56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":290,"size_decoded":692,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"470933dbe4d25cde93c1c0d80558f60d","sha1":"414c3bc27fe54c4b88f90ac48d1d55d831ee6ef7","sha256":"186d1e454aad1cb870725c030c2da8b56f143efeed6a60cca8166fbfb2a99a61","sha512":"75ab9e13959d90e681c2d70a75819656123aeae6a2e9cb15575e7b05e4066e2652c7c71fe4164bfd6596990702a0602753495171327daa7ccd51be6164c50300","ssdeep":"","tlshash":"4ed0c2238952c671880ac9faf528d531503286e92bd1eb90c0ed6a315b820c1c05ef03","first_seen":"2026-08-26T15:23:23.905581Z","last_seen":"2026-09-01T20:54:52.803097Z","times_seen":35,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d21deilz814qgl.cloudfront.net/8fda6e6beeb736adf0d629-800x344.webp","fqdn":"d21deilz814qgl.cloudfront.net","domain":"d21deilz814qgl.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.238.66","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:54:03.235Z","timestamp":1788296043235,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /8fda6e6beeb736adf0d629-800x344.webp HTTP/1.1\r\nHost: d21deilz814qgl.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\ncontent-length: 49546\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Mon, 17 Aug 2026 11:25:17 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-disposition: inline\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 01 Sep 2026 01:39:08 GMT\r\netag: \"3765b5e456bfbb3c87ab6f96b0e9da0f\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nage: 69300\r\nvia: 1.1 183a9e2085d5a9255c6d0724cfd9ec10.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: 5aue0jzqp5TaIolW_WxrCOjGLEPdQ5KsNmTVGKDvAUVWTabx5U6pkQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":49546,"size_decoded":50111,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3765b5e456bfbb3c87ab6f96b0e9da0f","sha1":"a038160e466628f91f44ed872e2845beed23b3a6","sha256":"f70fbbe4a8c51b2a083cb577e548e0dfc2ddaf98873e4c63d2c7ad2294016ee9","sha512":"4c2c967611d7f202e0be2e635c14fb919275f546875e6a1cebb8063450bb107ba43bc99f55052fd22e8a4ecac8d6046166f0cca2686a0e01b927b0c50a6af2f8","ssdeep":"768:mRtte0pUSzFP+3lWdThUJiS4Ty40/Qv0tNfxIdd9Eilw5yuPenZHkgSh2oVgwCfp:mBlpK5ibNrv0tNmblw5bPenZHMgX","tlshash":"05230231df42ef9d93175102a9db95ca8b749bee39acd8ae4c4382c8813b54c582da45","first_seen":"2026-08-21T18:26:18.592115Z","last_seen":"2026-09-01T20:54:52.803922Z","times_seen":18,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":16,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flowmetric.life/api/v1/product-visits","fqdn":"flowmetric.life","domain":"flowmetric.life","tld":"life"},"ip":{"addr":"194.67.193.200","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.240Z","timestamp":1788296036240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flowmetric.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jun 2026 14:53:26 GMT","end":"Fri, 04 Sep 2026 15:53:13 GMT"},"fingerprint":{"sha1":"9A:77:6A:A6:89:74:A1:CA:A5:72:30:D0:EE:8A:76:AB:3E:DA:D2:59","sha256":"9F:F8:3C:32:C4:D2:78:C7:C4:CC:17:DE:91:65:DB:F0:E7:91:3C:9E:DB:E4:FC:C5:9A:25:63:CF:61:AD:92:FB"}}},"request":{"raw":"OPTIONS /api/v1/product-visits HTTP/1.1\r\nHost: flowmetric.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-unique-key\r\nReferer: https://1wfqxn.life/\r\nOrigin: https://1wfqxn.life\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://1wfqxn.life\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, x-unique-key\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nx-frame-options: DENY\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=7k9C8JccsCpKq4zX.XWgjObkJC4onbTLjTatM_L3y2I-1788296036.2590795-1.0.1.1-L6yQixWsYFSH_6nRKquRKQ3th891yn88MawkTYQ0q4J9PCcLgQi8sHkMfW1BoxnvOW.eEMkdS_ZC_5XfQcRPjs86sNzPlzPPd4SkLRUKGpUZsZ61qSD6Ok_1ymqkWTiW; HttpOnly; SameSite=None; Secure; Path=/; Domain=flowmetric.life; Expires=Tue, 01 Sep 2026 21:23:56 GMT\r\nserver-timing: cf-cache;desc=\"DYNAMIC\"\r\nserver: cloudflare\r\ncf-ray: a3472ad298c2b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"7k9C8JccsCpKq4zX.XWgjObkJC4onbTLjTatM_L3y2I-1788296036.2590795-1.0.1.1-L6yQixWsYFSH_6nRKquRKQ3th891yn88MawkTYQ0q4J9PCcLgQi8sHkMfW1BoxnvOW.eEMkdS_ZC_5XfQcRPjs86sNzPlzPPd4SkLRUKGpUZsZ61qSD6Ok_1ymqkWTiW","quoted":false,"path":"/","domain":"flowmetric.life","expires":"2026-09-01T21:23:56Z","raw_expires":"Tue, 01 Sep 2026 21:23:56 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=7k9C8JccsCpKq4zX.XWgjObkJC4onbTLjTatM_L3y2I-1788296036.2590795-1.0.1.1-L6yQixWsYFSH_6nRKquRKQ3th891yn88MawkTYQ0q4J9PCcLgQi8sHkMfW1BoxnvOW.eEMkdS_ZC_5XfQcRPjs86sNzPlzPPd4SkLRUKGpUZsZ61qSD6Ok_1ymqkWTiW; HttpOnly; SameSite=None; Secure; Path=/; Domain=flowmetric.life; Expires=Tue, 01 Sep 2026 21:23:56 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1058,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T01:18:14.47199Z","times_seen":18246362,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":102,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d21deilz814qgl.cloudfront.net/b69dfe26558197474f9255-800x3447.webp","fqdn":"d21deilz814qgl.cloudfront.net","domain":"d21deilz814qgl.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.238.66","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:54:03.237Z","timestamp":1788296043237,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /b69dfe26558197474f9255-800x3447.webp HTTP/1.1\r\nHost: d21deilz814qgl.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\ncontent-length: 54376\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Fri, 21 Aug 2026 12:17:24 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-disposition: inline\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 01 Sep 2026 08:34:52 GMT\r\netag: \"f44781832545dceea35aa0cb492ec3f7\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nage: 44352\r\nvia: 1.1 183a9e2085d5a9255c6d0724cfd9ec10.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: JzsOyikA1IKx1_C7WzRj_v9S-8CBpjVN70aj7sRJjZg9ZQCoQH6Gpw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":54376,"size_decoded":54941,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f44781832545dceea35aa0cb492ec3f7","sha1":"137a4171e709f7d790cffd21aaedbaf7a04b97a4","sha256":"ef434fcb31a774f74e8f1344493a854e1584cca6a9b00678dbe4d370812e3241","sha512":"cca301f390dc72f09ddbd50d37c923ccd9111146acf0224aa7aba58a406cf77549f171c4f188956ee4e15d5d108e236d0477736f1cebb27f708e0b9c4191bfa2","ssdeep":"1536:C210jF3lmMgVvp6m231mq4Q3FF1WZCIF/ts:C2wdgVz0gQMt0","tlshash":"ad330225d98f9db09472d16a7fbb7e027a313ee5e4324145ac97394b36c0bc1b058623","first_seen":"2026-08-21T18:26:18.4561Z","last_seen":"2026-09-01T20:54:52.804705Z","times_seen":18,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":14,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/cdn-cgi/challenge-platform/h/b/jsd/oneshot/e694063b5082/0.5649730230376342:1788293719:ItV5m4TTQUkzwwLiV6URcP-YcENkkYT2rTieGkSAh2Q/a3472ac0eebdb4fa","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1wfqxn.life/","date":"2026-09-01T20:53:54.382Z","timestamp":1788296034382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/e694063b5082/0.5649730230376342:1788293719:ItV5m4TTQUkzwwLiV6URcP-YcENkkYT2rTieGkSAh2Q/a3472ac0eebdb4fa HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13818\r\nOrigin: https://1wfqxn.life\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wfqxn.life/\r\nCookie: __cf_bm=vZZGQ.gLmEmqQ2xYdc07fPRCOQg28ks6N14TAFJRG8M-1788296034.3040566-1.0.1.1-Cy9ArNwviQAKVyNKkwBP4U0vFQTaDIRTRikBDhPvl.joD3uLstBWASZR70WuqcqjmfWxnALKK42iHvaFjKVq6iV3kkVQ5LydlRryUQG9w2VHIaCqgSyByYZCln7.sp7qHZTOJc.xw0m1RAUDaw0pKA; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13818,"data":"gmtRuyxbS+goOoAlhF7C2vv$0JUpORnvYI$-RawVIqIvpIbw3qz9XLsSvPYH5I-T39oeJ+oc4MISeWZpnRIec4Jr2gI$qmNQI2aj126U9euXwdbVgC3sOXejKJjLp3edr8EPiO4oqEBJuh5Nv329T0KDtJOPyAOwj1rKuudxP$NucYmpM3HEgKDGGeX2BZU7y7KykbXiop4bU6tGX+iTXQLyyoDPhhXtCa9md$QPcczuBYzetauTTDvE$onLAMbopDP1DZ2sgv$n4E4KXAObkJ0XJFhtIBUpv363nxZ46yB5nHOcLi94UzghKRhDvR4s7eC62cXwP5bF$cnwknThbtQB1bKgSU7Ph1gLh0wPiC2mjZ-u7-wsyh-sbylw8OxV6vEICu2EiD$tg6F-R7$71NXWTY6ocMW7-JKN6B-EAyPGp-D10kOeI4w2ILIqruB1rAoPr2shBWvdZ3zu6MB0xMXdX2RvMpFzSmN5xwU-1yHWXwr0RJe+EMp+G+rgY2xkeHOkzORC092nz9avKRA9Wrg82xCLhuMpyBTkrhx4kW96xSqkhqXqUk$evPBcKnYx5cEwTM5Is7Jh2OEk27Vx7O8qltxwPoig8jOVFQKyjz2QG7N5VG78tVgkTHQALGWDjJFsvqDgThZXXMxaOyDwNvc2CKO1mxhpm05h+WNOYT--ntDydi3BSoS9clgXYvnEk2EDFd2zeW7Ap9o-IX8UaU9te-aogM$IFQ74M15KzFjj-pn$$t48Xuy3z0iHIuSP8UG8F4RbHKOOwgdO2MrgigTw$S5YPFOXI+UI0hAGeRZA1eBy6ru-grCoadbai5scgoIxeXZYIWqar-6HAbC5764l+CE3SehqFl-PlwIa50iybsBH$ZTXHLxjl$J+c19nsDt97TrbWFuleFDeIX5LZG7btjKNmDVD+B7aZcbdKoi7n+s9H3$utsQxHQLsYD3VB79SVrNCbD+Q-omZ8-2vXl61wM5YPG8WtlkrE-SyoAZrNASK2lzsa6eN-J9d5s8CQo+5VAY+rKtV$AJcitxo3vBha4Gi4aerbhRxLXgHI1BxARi3Ec1blGDUma6yxXPt1VeVeAWVqLpj4dN9b-nm5kmPng9Zd043pEy1VS9m-wLQXTsvYHF1njzgApunWcKg1c0lmZ7An0Br4YMVRBEORSRomUgMTheFFFbgzgErm2eHjQa+90BpJQTRg+k$C8gUO9MzUphZvbH+DxmqFhxDGCtig-5h4uSKGYznqU2Y8Cz2N7+QT-LAoNKINHK34EXPlGzwaNLc2SFamQysxuoeC70moH$UgDga63823T5hRlB1cUHMQopaBq3l0KFqmOPTKjZYAJK5hAurHhkTU+3e9YaK2ya3ILQpRDCCucZpFn-oCRKu$NDhVAxYc5FM0Kt4rpDicSSewUsGihr473G8WIk3yB$X53eLAyQzSp765Iio$+xJZbChCxYy2YPHaics9sQgrm$es3ODCNY5-zZnnaS4r3BHrAZi4irPKS1R4J9FsDuPgoSFJHmzZCsCPQcebRNiNCNzV3JwnyKiQxFdU6tENirXrkuiYmKixzSgSQdsXhq+CVJAMUhYGqOTisBDhYyjCFycbUF7J8QlbkJtd5bxX9hc2IFP280keTc9E1lb5w5zA8b$km+SAkAiGonkiKFOJzPognooD7EguBEMSg5F-MQs9zlPUcYiCrkvs+-gANABPEIPmvtSwVX39SgNs2$6hUpp053yOkwDz$o3Do3GJ7HRoeVlvzQRjjakW122cyCpn2nGAztUO2AIBsTQbWiWZXmmAWZGHaHWnwGKhgI2ROhjUxQVYWm-6gqnsBV98p36r4zWpm1S0TZILvZn2njZ$K$JiH01aYrs+DEqAig-5KI23m$vYgYUtb4URzv47dRPgujKWi0PDbLC2ZDLZjCRMW4dJalEjyMC3g5U6gdXPHrQbNGn0+j3qglRaMzXYrR7C8yHgJ4WempMwzE6o4QpYBeXEavCzbMDUShcD9y27LOyGB6GUDuLOZwtFdlJJdgPDT8vDwm9C7ieU-5o6jSBH8QIH+RoiAF74AncmUyhsaPU5Eg1xF5vJzpNU-JuipLQH-8ATShIB-QiSR8ZjclBL7Symlnyj2sVb3uCXtokbIEhWgppee4TYeAgRtVMWPaYn-JlBQ3YzQYcDRiDx+dqp-xFNN$yJuobXTREd+2oKtiXE$DUdc1YdlOx6cI5MxXaKs-wNRQ+kcj+ZDwDoSuGBwnNt$HIHoSCuMo2OJzKuAwPlw$Jyi9Ev1Q7TsWeiuLKGO2rRC7EXpOLWo1GZul5aROY7oWu7qWN9cC7Ex3DF3D49qC9oIDQ3wGV8sw-jXxD0rKxPP5ZYEkFt95WE6vKNRV3H-eKNjnghz9OK8LiMHWCslUrk2Q9xR3L0hYWFkBs+2kJXFgv19jxiR6gIHYTkCvFe9ogpNkCsUGiida5BGGSwW1tsZISca71tiG5GwRK4QUeOOhwT6asPsOvs61MWYTP2mF$wwD5Kvc5xJGP63Ytg9kxITCFYDJox-VtlT0wu2xHzBrwUcAZ+V5Jup$ID1wlrynl9EiZRVenxUgOQTUb99NZLiAnJL6ipaha26KcGcO9cEFiSJoY6hyEGL7jtrYs+YqPp1LKz88dv8kltK25NWxt2XW5HcvTwzgVs+tBo0aGI0dOeUw++bjZpRj+Uz3blhG4TBRqaiReOcaxsAttK16zkbvd96CYwY+rwGiBe8B1Wrotl8+reZivjht2V17+SeA3dSy55vnhxHH415xEw2c$TTGxkJQK1HmMWcj$wDPeHTAo9kZymSFCs5NqYZdg3wYZpwkxh1UMC-NlPvjV+rp6-9SEbs-UR0iRBaw0q49SGK1OXB8jH1t0BFKdhowBRs1AzxYrTxG58dBSm$M6wWEWIYzpbm782-wdLtjCrC4AWdTD6RFuIPO9t-vIm87pGtak5h5hPSwQUHMcXKnSr0VhV9euoi294GJkG8Vcl8gRy9tBZMhK+Wxp4aXQkncMXIeeC1LV25U6$1l-tW1moEvvl8UsyvM6cNlGgU0i6Hn8W+oO2dRoS32QWT3$3BKVoHV5Ev6dQYP6iZA$-BaC9HKoL7ELdzh0SaSsIaMbAUkcgjXqG$kJIuOu$lNZgHu1hI-IW1SSn6PaU3A37rFSbBF0724O9nFqpSuAIcnT61+xjnTV5n4NnOyANcScNDT+V2XzdGX5Lro2zeiUPFQC2RFEzvEP+dlzOVQ8+wSNcCBrEH-16v$6cTmdApsRJiVpV5m7L5O09dVJGam6QAjj9kLILPKJCa699Ix58PiknWm$v+krhz-Yhd3dnY9eZnrZBuYMt6UXeJeXm-Hl+BsabBKORldx+9pquBtvVwUmkCavQP7pNFKIhzKajBdTS7GEqJqv9UlUJ3UAd9T3M8S1-QvuP$pmHFOcv4rr3XGmpOr9h06oxJY26emmJsIbU91o+PjTCLz2Vol0Ob1oEktV3byRHdSJJiYOkoObLWqEE0Udvwky9kwYm8LwlRC7m8G3NAzWggG2WOhHClPVAsekKd8Wi$90bp2$QkOiLkFvdhZJ2z2EukQ9+32EQyWXR7-2a6cFAgYn8duwSw-LP-Lxe2vkPvxsz9BcOxcBH4u4KHaO2aMnsKGAtA0YoPtxB4MQ1TTzh8bJiudWYdJzYRn9Ct+7VbwTLrr2Kv4F0yvho$Vd134hMVFJ0N94Q6IrCJi+nRiKOllMHwRLbxlO4kT7LanP0PyKm$tpcTul9ZnI4ixwETJFzI9yTNvEsz2eWcrnG-VpdXLIr08hKUFLAMeocd4GksKU$T7RQeOgg6yQhbplmJ+Gh4oBZQnDZz+rAryQqLIa5z1D46axD4A72mcwO3ebrjS4AxCHbA6Seq6SAVep2zlo-RIoNm0bdxV0Eh4a6uu+3X1WjAc9J3sOaqJpKWSUA$jx8mcOhT4oj-vT+U6u5W6uL65htxjOR80aPkSqU+H9mLA7rs2up$JXb2cNBtqenD7r4gc$dRnWltjvcwxSpGEyeC742vPurXxCSp9n$MwspLLtVdK$iIxDRcW4azj4rK4qBHoc6SlLsyV4TaO3e8b3MtqTAQh7omrMR-6MEL9Olotnm6Q-eq3KaFY4pJ-5p8cwcRJs+mhu7WQvYL0QM6tDpAS3$pQqyieeLlYCiP0dsENOgoHrdbMzFGdTReOusWus0hUkE0RrgKyGG$84QBozpuAzAnCRVrmzttPDFE87vqByWU8d1reVsI7An3NqlyIUCcmRsim-tkU4LKyzHK$gFXJQZ9mzQLSwWin+o6BYGtMq760e0brStmIRP6SKqAc3niCIWioK7LgWxP8DB132RnCoRVJiVBv2KjCP41zzzgNY5pSGnZjHnN0Vr234l6NFleQogum5dKlBz3rv4Ssb-p9IQ-orvU59jy9NkPLUATQWANe0OMba9mWyUcALXUREaJE6m-263kKvTaOJTdi3WCYVHktblTKun4qUo0F3g4$whhPRB6+bbBR8V06ba0GaMR4Hg9FytD3yXklts3q9rZcUkVjZ5z$PRK+KBgE56c4Ee-AHHxcSYjazY$QRru0YHDJxz9vFwk+8XtgtS04hU27FPRcWaxaYeaPpMYKydc5CO9MDr3X0qMJ+wePMHz$cPuaoO29ZoswpD8tGkx-UUWNMk54Uc2PL-rLcDtmqDDV9UeGymae$IIWAY3Kqjtj+F-+kx7QBVWZ-2n4B+cm+yMFmcOrWwC9Yv+GT9$joq48YEluxlWd-vzh54U6IbwWJoTaQbd7q062jXz9e1ZzuRhbvapgquwoWeMbleUto27rrcUdQoylCTmu7HGYAYx6$R2QWkO089lh0raCtZ12PdGRqHSVOkoMWD3eRb$hIGRulweC5uesTAiKoch8A12pgky3wGda5P5dNppuD6aHXOnkQvyWMT3clzTkvzKQaIrvFg5zVOp54G+Qb2RQYELmQiKQqqztwutwYZ22X7lmKk$0up$YXYTZy17u6DwJ5+F0GVbMWxBMpwScbyipV28w6qloz4YxdZy2Es3RUSDYN5wyIRlXWwFeW75ReV3dasE-1om6jyc$$cWiZIHJbmbjaKW8IJ2mpYaaVUYQ$kNI7NqwHUAqQv62Phy4w3geK6HzxDMPTVE+MZukGDJRScAp9C7srG6gsEVLuRLTJl6OmCu3cpKoqmD7+SJqW5zYAJtVSGPpawOwUchWhq87r0PtcSc3A5ToqOxBVbWY07N9tFM-TL4k4ZIDzUbTMxElH2O9GYBPyjDNVDyQJ6-Uq2cGqNiP5RMeFXdnmkhi+Q2gmTUbR-DQOMT0KvgxuvtVj2TeRiEyi3tHIi-RYEdSETLs$50U5s3jYH+YqJx4hah1BCr20pGv9IGC$kkduxeBc$C6SkzEA-Wwx+K93CTEmid$rl9ebnRA+dQmUhHh9L-wm7ahQIBjpZUMyJU$TucsmREn7Hl4DGTLJNwFkDycztWHU9ZwnZuzV8yJ9YWRAXXKdSUh6rxvJebQAD4jZN9q9Ipz2tzBm98cvITvE-vhPxdt0Z29uQKEGl4Kt5l$F91PAe3WpjAw-cmoaqjuxLLrjNU5q7vgg2nc1uHKZurJAPTdxK0XOz$Qeabt5P4$SigUwyo6RrAZkaFVCSnFkEY4P-qY$YPnJqV-CyVy3wWjbSlNj7muT5EOSOw4-dBlNwSj8XDlIX0O8QxpSXh$o7RdjbupRS$uE-16+B9GA3VQRCkosHC$T1ILXqCv6AV5AU8ivCgtTZMozVEGydruyUj3JHUOEzrktOWDeI1EOr4w4XOFrRrcnAWP+rRqyWuMPYRg$S6ISz$IIs$3XQT8o4zB34h2kSCVVDP8sdNibYbQXnUostZe-hj2W59ADubhRL3nI57zIVd71liMgM5m2G3aXYHuvYQot76lelp-9SIbm73gtmjIQ+khR0tPn7$mBSudPYr80e$uqW5qNdorFXjWub4ScjbJmgYJsQ-t5T2gwUhp5Z1Ei8Pn--t3AC0TVk9u0NGQXkKp6KDE2ZiCbPmLa1H7aaBvnX$CcmUo4xIeKaK7V7s+emPuL2JwXTRgbQaXOD8YuDb5lIctleI-k-3GI4BnTsv$BaJIltBsbvzErS5UGmB1MlNrWFCKPwdMNjuo9-nVYtruHegAZP9K1FDrGIlkNrInPidlKIhu4J34CJsI+QNVcK6OONY4lwRd6nonKjgajPbs$Buuk3u+UeNC+yiO0ECBiyPV0FvLOb4VW97LbLIzxC6RANIIlTughqZ7Ee-9zWzG$zKiZQ7Xk4mh0bdPjzUv$Lm+wrcu4TRe4DXpZna0tB614GB3BaHg4rQNEFZoaDMwX7vVEXJDbrezzh9RwIxeYcuA$2QIWLN3uMjjHSEBl2XP2U3$95TSQHX$Lwlbhdl7SjUDLABQLEjUHKgr1rbg0ug39uItj94WetbHz0G95TUB1z+IHs$wuxYOsHVuAUq8mnw7rgI1AwormN88t8u+XrYyWyc0SYhQ1G-mHXrVmL4LyDsmPS+N+EyQyswj2V70it7rqsJ+Vn5mV14AT$txyr3AVyZgaNtWC97yZbYBDyB8qc8$VjdAk-L7iuC5OAkQaj9$9tCbnbgBnOArUKe7PGs6MdTyOAcoIgNZ2TbFSx$10PPPQnrt1MhsJAHk2So1PgT-$HW2G3llOqdQjlDQHN-nlFjPNr8D+D$GqpCvoP6dVn4OYrPZI7izQd4bFJxsVhWejI+bhW7AaTmlXEUWiKg4h-PC0SmJ-CMlhm5IEqIIGQDbxbrTbiGC6-byuAZtnnNoXyrDVwXwoKO-7gIzdpAgxS5Vehg49WQ-No2R$jZDnB4DR$HEbRptFxQ-ZqRCSokS1os-G5KjOoQg-0SyVjByHF$4gIzOqdl-RlYy0FzN4IWa$GqU9JBlyb8X$YcpUPWehHj0s9Kb5YUxGImWFFs1HLnD8snQl3aojvdCvBJRlrtw58Ps2oVsH-Bx6hGkQZwo75J3Wz2ltLja3nBlnoA+UgXrKQU4ZwCw1YHNmDLy+PHW5soF54PEPpk89o8GZeaT25PVVj0uI4TzO7idCR7hg+4ynX$XxiGNAMiWgQFX07pq0n6uAvHaBieG607Roi$7XpyDGogm8nBTKmj$8xX8dpqI3s-eiGxx9sA7TTYBDqAOyyaUHR$w48rs9-RLV9p3FkGW9VynlmJ0WNiAV8PVsCyODOmHuRC5HRX$KAuZO7bzMxaZ8S4588xbyADLo$5JQUtua5QhEwANZmvLkX0Qz7CPBQ9ZSP-wdKDZG6Hv61vtWFI4g50t$JP166sgjKZFWAlmZ3FFG+1oprqdvEQbGPnvijQegLq-bjgrD33lpkzBOFIkJ6wA2q56aSxhOcHSHiG5AGg0bIWb50doVuQNNhNiCPu$LS5ZbyZd6Fe1P+OEgKXB-7riwbd8OJXvqtlHdG69h0L6SBnD2cAKd$JV4CvSxzwtmZnj+r+1CBFkSJrFkx4jTMi5oxpBK0+rodclsoQhWFimlII0rEHE8NDJOFxkF6M9KH4STzj+hpS-rHQzFl9XyxQJ3lQv8d5YYqitFXMKydW5oeUu1RvsbkHERJhT6jJ$gTMlkhgvN4yE07Cko8bkcSX9T-p5QNAADskDvGcV+F0m8vodIh1yubB6zz-$FeAUz-6Dt+2rA-uWqYzGADAg-5N$6yCLV5WdvqLI5zeGRd62zRk5HltBCqoeK9vaTqlrc$9qQG6N7XLhTcoYezIJM54R+L22MALNdGYh-cZ+H1qKuz9qBAyBDRH9GsNLc3Nw+P8BvpNIZQk7YobkM8wZWKMmhDEmGOi$uZ9DW7h7kUrv7YLTn0updmjMN8AnQnUGHj15UAQXCzb$lUrDFaWEyQHPT0FT$zdD2E2U0oAm-pRpgxKOCsLUmwd$E0liuaUhTgAwe4Oh107$bRKQUmimstE0CiUVwMUVPmBOd$nALEnLWo$MtciGQo5OhjcSvQPQqu+s$tMGapkqDky5dsPZAHSEXgwVDSwAstOc8z-wVZSk2RJlGtrixeSiJdir6LGe2c8q$R17EgtJAO1yC1gT7z1c0s0ne-Mqw0q-C3p1tzqFq2ucJIKMCnIRoLQr8UDCW7mTVaTBIcLIZFxtLdVq+EkYaxQLO0BFFCzWX6Vxvqki0RLDa4006P0pEtYDd$mFDv2vxtlYQhI5XwzdNhqNYFdMp0pet$eY1LYPnuBpzhxzHPqKRnUSNL+QueLt6uO8caIb+Fglj+0mo0l+DmQtsIJU5+HHj4Sh4pY5ivw3w9cRkyaT1TFpH+RP$2NycCHYoGS3nXPCqVA4SN160QIJXhx1vqa4xvqP5p7qz1$72L7H+Jyx9pHr25BlDX9o7vKvkaMNIWPvQsPyGcW$MRThq4gAJ0ypJRiYVHDgotZpt+5lvx$wNC8C3uFd8ljlQbo9B3UilPguZDXO0o1QkxFdLNWO5ri6oiNTLA7SZS7GMriolPpKMFvuXI$xzVSGkh$ZAdsh0g9kSGoJ+R$2p4Q+bHR$NgwiK4hTnZGBaVpoK1WC8JTEHM9lnbLWh3TN-Swjc5S68dugbBT9pe86MywCA9ckVn0yMxClNeR$mK1rDZVwMrnKFyK-0i1l6qygtDLGOu4sYADZUG4lOWEteHNBq7GSNJ5$4d8weWsokaHpbLNsRiNWqv+N7vTKaIAOTYMbPqu0F3QRvJ8aAUtHWG$lb3s3yCExUdUBDNMEvUZA0Kvpp66n1Wn2acZTkCqcD1uYCsq8g0IxH6eqFcPc+phPEEstvpKEagPML4pq2Karg2KzRMTgxxNsJ2XPaBtPO8jFx1oq7AMjxYSSbz4BVs-8TNDvqto48zpCbx$jWBxCuLTGLrgNgo5tJ4tA4QRJRcR00sGqzP24qASYmpjFt8xrEgWegi9VA9oAlgP66SGAmpkSoVQWwUlBi5iRSiBD9bJNyX+tAmm9YFr03TETJQX0Zm3CqgtgI4x9$+D-ZaDD4q15PFVubXu9D0lXj4TsZetg+EoLj37yWz75gAhKeiNwEDDg3WVIZgrNFx5h8pDRJGs46AtQNlGcZFHGr7s2OyvY5QrCo7+5XlLA3vAsX$+CKWQgA3-3B+e0DNXv8ahGg1Es0XD9EQe7R+Qj+9w8PwRXxCpF3uJIcRWVnreOwQRxGauKjdaqbDwGH4i6-X2LXQoLATzt3SD0Olj6Y4S1hNnlvPJaBd$+ztDjFbNAVU2gS3irJnbH2IHvmxw$T+XDF5+0zWgF1av0B2XEEHIaojb1b5dwJPtQEKDzUxeD$N58EkWUBEI8IVw57-Q14GiZCuuIyi3l73LTKIn$GbLC3hFL1FpCURR-CXEkUJeL-VXPiub6m$erwk+8F8LGkGVZoHYc78FVPPTsoYlo9dVRk5ADtRiWvAwPLLe9P5VQCkPhE6RZCioROR6sQlqAwOm-3qJW$DNt3Y2LHSHDeA9ha$2wausFeBlacYTrCMhryCcUH0j58onOAUPYm4ZCB9QeU6G1AKcPrhMCSsIGOGi3i6HJZ2TPNuN6FNTLJvSzE3kxgbvOeXxop+qtE5clBlXa1ZWi8tunbtZhPeIGiAVZx+oUat55FlM$RPDxlEoz9ZLRyrVCq-1T-Y6gLPyed$Kqenws9-8VXOup$yJaDt6ylIROtdXjCjY0B5H++9wJDHYOgE1qeKoNcuUsZ+gbV66U3h-+qBBB8VRNCr88tra9lnHuiPVKzXEsAEk+jLOknGw3zacc9-aCDnQ5UA3ZptSbkeri+nZPHd2+jvtehGsXBZmDyLmeHQBpi$xuOx+SKE560yYQ-QBStxCWJKcwIKHamsNgUCYDYr0Fh3ntqSx9ym$mZGVaycurppBWKYlQ+YgjIg5FxuihibB6Sv0g4ck-XCFlqJiX2vuVZwiM$lz$Eg9ar0vI3EJ$JNYC85DuPr91Th5jlYcOp1TOa62ZlH2LUqORvP+qQvD3mmxK09UuYdYCTAgKuro9AZZl9PZYSWOVx3d3h1wSwJ-UeV81-YclMyB3haePOpNcRdIY-xNiRRv1TAi5xWQRk4jYWThJw4lZqZEUO+mJZYQQJpcbS6Ewguaqn7bxDKKaGurKacpHQqKjwrdlQe35G6jWvcnFm9vi+PjNQeu8KUD+qkYio-a3dlLYITMk8oZgD9an2G73p6hSWXElWzO64pR7dn+knC$ozCpL+dMxxBoL8LLHP43g+i6LXmQ1RtgO6iFFYaZnmdcJZFYmlA7ZqIKqrkzI-shBzu0E1n3Nn3dGYmG-8P8THibDgGhrNogwRaMY-YDAYiVcYFjV2nag+PBTDe1LnqorYkUzJaGMvldsWrms959LSv3ZHrR+JrCerFpQtM3+CsbQa58JK-RF93ViwJgwbU9yCTZPXoQ3d9C9X7wL0-ioLjWYC2BcxT2bbgg7GmVF3zK$EasF9709t2wLBacnQrUBxSGlDomJhTzihjN3PxD+Ju6cq4iST6Y+ZqAjP3crYdIWSKvio$dKuO8haZKcZ+NTe--4VGXCb1HSYp-GeqtFHYByK+y0XMERcCl$1pPYL5Ip7wXGsqpTplnGt3bvao6QmMKit9cEU32U5-g9nblaS0Iv5Gp++yo0+lk-uih9O0MLW0PyVK0N1G-K7RtsdRFo0r+ugi9eK5BawYxpg-NUQLwVKPiglB8hPoqzdna1E22YzqeDlkS8E73HtE9bmGjAhvUlL3n493nlxJ6Ze0UOzjEUT2iOXHrSzAD7ZoaN9hbxw+L9bjnCUBUoHdOxPIH58$4kygzk46drgXqdQppDOibQxUKZRCk8bIGCsQXJM5vH$XLvJsy4F5JASmi9EoEYu1TAJ16t1I7AURON5mUl8AEJ$XLtP5723laT6yvc3oeKKIE6tx0$QBqzqsLgS8CPVOW$cDHc3D9YG$JH7z7URMQOnMcxxeZNR-9A8MgU7RGAgts7C6NTxa+haoNY4DSt72NU1IARc7J2q3M15p+rgne5U2zOBTFOLdodFmryAwVmBu6XzB$Yzj5cO2VyFnvAsm+4-We9YJ9wg+KV1X2WCYK5oMlMr4vbIb4YZwrBtBQUoH3ujsr3cEMoVY9T8um1xtVY05T0LK6MQyQ1e5k3M-bHgupS7DUlD-XrYJGQOtZkTy3IIWgxZYkVHB16Dq-NNzcqaWwMY0-L0TA4MUHkca8-zlX6T3OM-1ZpziEOrdBVFs8nmVlwl0hTL6SEVln1V-+b6HTTzppU0hWa+5BijU5k1g3HoCI7X7NBRhzjTKLRhC0wuz+LhVYC20g8+CMK7IBY-MYuh8AUDOA28ciR+MRHJibNOxpESDaEDUtgoQoMg45yR98637sT-6Qv$ryhrLkBI06TkeZC4XnDrHgDKePA2IN94TCdOjEa8u$o7RJGwFS2ecU+jLLkIbMIZi8PhomhAkm$a3HbToA0O3Hg6MS13-BR$59HdNJ4w2xpOhQ1wS8O2FWBl2z$9ZQbC31vvriYQ5eusoUBvMegTx84mLv$6MRDSGik8BNDM7vHwKhTF$0WGBhkpwx9K01VjhSHZT5ymUnSthyliA8z4RBkLVAKCDJnxwvtv0$Ipwa9--RtAZsU8zycHTl2F-Obgt1ox+BqNGrwIrKqHqmOVP6wLrDkIj4$e+8Twbst$EK1RFQGKaqSORZGb$tFCtaopjdcIbLBkiTidSnLjF2UQ+XPOtglH21yqpl3Niz++JlhMSbAg7V8$LcFi8BBKCJYsUV-0diI33aWSCJoPJ4$o00Zlpaa-$XTDpLK$XipA+INn9J8jGdv+i-Zost-NsYdcxznCO35Pgaxnr+1I1i9sqQJN0O5gLgh0HkqDZtIn2+CXrad5FxzaXIhxhTRXKyG36V8AzZr+2D-eN2F4gtjj$s09y3oz-Jz9Y2Y$UUjDHCCuKA5mQ8BxZTWg+bN8RDQCGO-IC45$e$$U154Yypj24VtE3DNAEOgNVeqQezpVoF4r1AgDpBrw+b3skRPEqIbhnVdOUA2bPaKpywdMClopVAgsRhX7rVm3yJqMK--vjW$Yxg3dUVmVZgmhctDo$gYRYqPID4-wm07bbYba2u+Bi5EeqhHi6GcaN9xyR+-n-B35VHZCTUFM3U9HuQBkYzkJdBUjxFZby89aYy9v7qX9QvJaN6BLcvPbJG43Ee3q1r0d07K4KWLcqs1vaDLuQInwwkMBikKZBw8Frm4SRrUPyug5cJ--DM1I8e+3kWDIm97utt0w5V+SHt1OtaHp$iMugMU6KFBR8m$eBD9KYnyh5VS4X5DIzSAx4EiJvthB2P13qDHM8EgrXi$BWa94+h-wSaRzmTg1t7+$x8mk-piKDKKzz7L4WYNgssmBkpmvgCltRYpIcYZKrQEtKv6wu-EuwFKc6eNOthaJc1pA-+G44nSwgxy-gIhIKKoyWA3JQ3POSc63nU84449+AUW-oeL01WeizL2LnjHlyo$Ylk82qPhNrPaXi0-LyG+MQxbCwbY-CA2pAo1Un2qV3Z6ghlFyBszxR92qPjQM9JEWmYIy$o0ZhVm0Gexug-3Cui5mM4xZr7VW5qevWRog2EqVsWrKr4kjoeAFgBYhHPHQCRhZho-+RwOZXHKhIT71w4agKbHCMMzz2F2CkQP-MFjahJnK+AYjJEQNaElMLAEOuesxxjgJRLKqcqiFkLzVE-EWXNZzr64wy-6MpC0cwG-n0Uj40XQcmpCDHVyLC1upj1zX1KzV8o+CihSTzCxzbmOBw3sogtb9VURv-5EO$zSeO6rtPgSCP1LQ8aAnT4P8gWTDSYrrwtXlrB$D3ejPDeWk1ptxKN67romJ-eUOgBDui2tBP8DqbrqXi9PEwdiMY4sJgjO6$vl8yF0qL8Er0r1O-Hhk7cqCz6KurzKT43rSsOY6siOKCXX2nZIPX8j94uz22LBgej5G-cTMyE+Y8TJkd-$TR7MXs56FQb3DL7lZCID7TcUxBazy+nNl8lGZ3zoPL1LuSlEWo+3G6zo+DtcL-LdSK+EIskUVyhWi$pTQ8JqHs2DAxYbrN9avJ7oH9STkkkrEiX3S2eQ8dKLyCnVrgApV6oY1I7zJ8PdKk77KIKd+ArPwxAUu3x+WSl1wXnatU9lGBbnZmaaTh2eT4Vt0+OXjaw5l3mEpIbNQLV0YN0Ir68uG6Hqe-5GRtlojwiKhbOGzJiGNYLPVICLO9pQ0Ob5GxjT3e+kJHGP9AgUABKv+v8s3UTwxKaNRFTOhhMV7SZGbJ16h-Iw3i6tWQr0MR$T0KHGArZj8h4heX8GhuzegHINxQymLl5gZb-0s4D3nh8FLBkUbyxsQkYwXenUd9VXnwp0dnXRubVrk64M$w8o5HDEUYDOJFr7F0IS4-ZqLeZ5BJ31Y-E$9z2Ynm3TuqHbS0KKo0iDX56WXVVWQD3zsnSP8dmuwWCSTcUSGo5UudQLyZr+5mg8IVoW0x3atrlUGq-abxcjM6Z7LB7B4hJXGaEyLrritgzT6QpncaluAKDuDNgEkAm$h9IA9voFP8mEVOvsR2WC1rCTtbo80QsPSAgKh7aeMxYAjEZ95gEuicbu3SFzrr8AmVL9CZsOelY27FSLxnkMwkT$rc28jgnzwWQCWZ72GAuuzrW22tPwt-5-yMd8qR4ubclGrpq8rV1ZOdoXcb0lQwrYUqe4$8-pLVJJL6VaRzglC7j9JCrSGGxcvI-w84v7aec6ylWquq3utS-7eb+5Fl24zv0K4-jOMO8$CPPzNZ4oknGpda5eZo7XC2+NEgEck0+24mjbmwwguoJ6zxOzMz2DGqqx9szLhGhutYi57-Bjyzrx5rCPoJu118nM$Fsprlgpp3Ik3LApc+cG4Br1PW2AKbIAyOaTtubp8xpCEj8"}},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-chl-out-s: 6AfLnIQGsCggH0S8bg6+KsfP4Ybzleah0H2nSFVYDvSz2B/lRDttF9rRYKtoubPwIhex8qpf6bTPENbdxRkEk5bbm+boIhHN7LiEuACNPADo5RpcCB6DJBRosDheasH+Z/TlnD2w3TQqD7hN/B0KMbZEU7L+nHSvzatUDi4fpkmicrMkx5RkWemDNEmUASGtHkdGCfq2nIpYQ+xX8Q+R/BaxhVDVUU0wb/9lv69P4Qf6EErtc8I2sj5ygNfqXMl03cFKTMMGdF4ZiZ628EKAaA==$lTwF4kn0dULGwqB5heys9g==\r\ntiming-allow-origin: https://1wfqxn.life\r\nset-cookie: cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=1wfqxn.life; Expires=Wed, 01 Sep 2027 20:53:54 GMT\n__cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; HttpOnly; SameSite=None; Secure; Path=/; Domain=1wfqxn.life; Expires=Tue, 01 Sep 2026 21:23:54 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3472ac6ea4456b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"cf_clearance","value":"i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU","quoted":false,"path":"/","domain":"1wfqxn.life","expires":"2027-09-01T20:53:54Z","raw_expires":"Wed, 01 Sep 2027 20:53:54 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":true,"raw":"cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=1wfqxn.life; Expires=Wed, 01 Sep 2027 20:53:54 GMT"},{"name":"__cf_bm","value":"psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw","quoted":false,"path":"/","domain":"1wfqxn.life","expires":"2026-09-01T21:23:54Z","raw_expires":"Tue, 01 Sep 2026 21:23:54 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; HttpOnly; SameSite=None; Secure; Path=/; Domain=1wfqxn.life; Expires=Tue, 01 Sep 2026 21:23:54 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":16497,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T01:18:14.47199Z","times_seen":18246362,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/web-vitals-BshcK_5D.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.090Z","timestamp":1788296035090,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/web-vitals-BshcK_5D.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"70e63362378a8ff8d416f5735fc0e65c\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640185\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472acb58e156b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6050,"size_decoded":3122,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6049)","md5":"70e63362378a8ff8d416f5735fc0e65c","sha1":"7915bdbd4386d244e6ad0c6324897843ce2ebe67","sha256":"8c02ee6af6fd008410adcb29d93aa845d4aa638f0ee0e409c32ef65fd480d233","sha512":"678ae8687ade880b7660fa4e0359011051b49049bda43a3dd62249c13f82da47bc9fced6e5835a48aa4d2f32a7f232959bd1c054bc29c82fdc300b2b474f6a7a","ssdeep":"96:OS5uA0HKyCDY8iVMO7MSpyPyhlrU+Oke0nEZM7jS+S1Ip+f+HKtNLK04pa5Nx0WA:OnDKyCDBiVMZSAPy3U10EZM7jS+Sqp+M","tlshash":"d1c1c7f29b45113912ea87ebf0706182aa295ad1714780ccb23d6fd7181b8c756eff78","first_seen":"2026-08-26T15:23:24.125094Z","last_seen":"2026-09-02T03:21:21.92226Z","times_seen":43,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-cdp-popover-BN5DH5rt.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.847Z","timestamp":1788296035847,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-cdp-popover-BN5DH5rt.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_TLDTEST=MQ==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 25 Aug 2026 10:52:27 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640186\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"29e2cac8f716628706b5a68dcd78f566\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0084956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":485,"size_decoded":810,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (484)","md5":"29e2cac8f716628706b5a68dcd78f566","sha1":"3061faad2255a2a4412508f995491a8618e4cd57","sha256":"3d9f1525bcd363d9121c9f374d90dffe36b0af06c8d41be8b232aeb2032a4b63","sha512":"1ad921c6c6d54d6f4e78667dd4424d4a22f09cbc8aefb8daf13759bf1294156f0cb40d48d25734aeedeaad654a0d78836cea6ae8a579de40396a8f83e9e299df","ssdeep":"","tlshash":"56f09ef9f894a13087ec5ed5337c492624b65782baa6cec490de56114321840d3bbd07","first_seen":"2026-08-26T15:23:23.948199Z","last_seen":"2026-09-01T20:54:52.806394Z","times_seen":41,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/cdn-cgi/challenge-platform/h/b/jsd/oneshot/e694063b5082/0.5649730230376342:1788293719:ItV5m4TTQUkzwwLiV6URcP-YcENkkYT2rTieGkSAh2Q/a3472ac72abb56b9","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.876Z","timestamp":1788296035876,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/e694063b5082/0.5649730230376342:1788293719:ItV5m4TTQUkzwwLiV6URcP-YcENkkYT2rTieGkSAh2Q/a3472ac72abb56b9 HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13822\r\nOrigin: https://1wfqxn.life\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13822,"data":"gmtRuyxbS+goOoAlhF7C2vv$C-UpORnvYI$-RawVIqIvpIbw3qz9XLsSvPYH5I-T39oeJ+oc4MISeWZpnRIec4Jr2gI$qmNQI2aj126U9euXwdbVgC3sOXejKJjLp3edr8EPiO4oqEBJuh5Nv329T0KDtJOPyAOwj1rKuudxP$NucYmpM3HEgKDGGeX2BZU7y7KykbXiop4bU6tGX+iTXQLyyoDPhhXtCa9md$QPcczuBYzetauTTDvE$onLAMbopDP1DZ2sgv$n4E4KXAObkJ0XJFhtIBUpv363nxZ46yB5nHOcLi94UzghKRhDvR4s7eC62cXwP5bF$cnwknThbtQB1bKgSU7Ph1gLh0wPiC2mjZ-u7-wsyh-sbylw8OxV6vEICu2EiD$tg6F-R7$71NXWTY6ocMW7-JKN6B-EAyPGp-D10kOeI4w2ILIqruB1rAoPr2shBWvdZ3zu6MB0xMXdX2RvMpFzSmN5xwU-1yHWXwr0RJe+EMp+G+rgY2xkeHOkzORC092nz9avKRA9Wrg82xCLhuMpyBTkrhx4kW96xSqkhqXqUk$evPBcKnYx5cEwTM5Is7Jh2OEk27Vx7O8qltxwPoig8jOVFQKyjz2QG7N5VG78tVgkTHQALGWDjJFsvqDgThZXXMxaOyDwNvc2CKO1mxhpm05h+WNOYT--ntDydi3BSoS9clgXYvnEk2EDFd2zeW7Ap9o-IX8UaU9te-aogM$IFQ74M15KzFjj-pn$$t48Xuy3z0iHIuSP8UG8F4RbHKOOwgdO2MrgigTw$S5YPFOXI+UI0hAGeRZA1eBy6ru-grCoadbai5scgoIxeXZYIWqar-6HAbC5764l+CE3SehqFl-PlwIa50iybsBH$ZTXHLxjl$J+c19nsDt97TrbWFuleFDeIX5LZG7btjKNmDVD+B7aZcbdKoi7n+s9H3$utsQxHQLsYD3VB79SVrNCbD+Q-omZ8-2vXl61wM5YPG8WtlkrE-SyoAZrNASK2lzsa6eN-J9d5s8CQo+5VAY+rKtV$AJcitxo3vBha4Gi4aerbhRxLXgHI1BxARi3Ec1blGDUma6yxXPt1VeVeAWVqLpj4dN9b-nm5kmPng9Zd043pEy1VS9m-wLQXTsvYHF1njzgApunWcKg1c0lmZ7An0Br4YMVRBEORSRomUgMTheFFFbgzgErm2eHjQa+90BpJQTRg+k$C8gUO9MzUphZvbH+DxmqFhxDGCtig-5h4uSKGYznqU2Y8Cz2N7+QT-LAoNKINHK34EXPlGzwaNLc2SFamQysxuoeC70moH$UgDga63823T5hRlB1cUHMQopaBq3l0KFqmOPTKjZYAJK5hAurHhkTU+3e9YaK2ya3ILQpRDCCucZpFn-oCRKu$NDhVAxYc5FM0Kt4rpDicSSewUsGihr473G8WIk3yB$X53eLAyQzSp765Iio$+xJZbChCxYy2YPHaics9sQgrm$es3ODCNY5-zZnnaS4r3BHrAZi4irPKS1R4J9FsDuPgoSFJHmzZCsCPQcebRNiNCNzV3JwnyKiQxFdU6tENirXrkuiYmKixzSgSQdsXhq+CVJAMUhYGqOTisBDhYyjCFycbUF7J8QlbkJtd5bxX9hc2IFP280keTc9E1lb5w5zA8b$km+SAkAiGonkiKFOJzPognooD7EguBEMSg5F-MQs9zlPUcYiCrkvs+-gANABPEIPmvtSwVX39SgNs2$6hUpp053yOkwDz$o3Do3GJ7HRoeVlvzQRjjakW122cyCpn2nGAztUO2AIBsTQbWiWZXmmAWZGHaHWnwGKhgI2ROhjUxQVYWm-6gqnsBV98p36r4zWpm1S0TZILvZn2njZ$K$JiH01aYrs+DEqAig-5KI23m$vYgYUtb4URzv47dRPgujKWi0PDbLC2ZDLZjCRMW4dJalEjyMC3g5U6gdXPHrQbNGn0+j3qglRaMzXYrR7C8yHgJ4WempMwzE6o4QpYBeXEavCzbMDUShcD9y27LOyGB6GUDuLOZwtFdlJJdgPDT8vDwm9C7ieU-5o6jSBH8QIH+RoiAF74AncmUyhsaPU5Eg1xF5vJzpNU-JuipLQH-8ATShIB-QiSR8ZjclBL7Symlnyj2sVb3uCXtokbIEhWgppee4TYeAgRtVMWPaYn-JlBQ3YzQYcDRiDx+dqp-xFNN$yJuobXTREd+2oKtiXE$DUdc1YdlOx6cI5MxXaKs-wNRQ+kcj+ZDwDoSuGBwnNt$HIHoSCuMo2OJzKuAwPlw$Jyi9Ev1Q7TsWeiuLKGO2rRC7EXpOLWo1GZul5aROY7oWu7qWN9cC7Ex3DF3D49qC9oIDQ3wGV8sw-jXxD0rKxPP5ZYEkFt95WE6vKNRV3H-eKNjnghz9OK8LiMHWCslUrk2Q9xR3L0hYWFkBs+2kJXFgv19jxiR6gIHYTkCvFe9ogpNkCsUGiida5BGGSwW1tsZISca71tiG5GwRK4QUeOOhwT6asPsOvs61MWYTP2mF$wwD5Kvc5xJGP63Ytg9kxITCFYDJox-VtlT0wu2xHzBrwUcAZ+V5Jup$ID1wlrynl9EiZRVenxUgOQTUb99NZLiAnJL6ipaha26KcGcO9cEFiSJoY6hyEGL7jtrYs+YqPp1LKz88dv8kltK25NWxt2XW5HcvTwzgVs+tBo0aGI0dOeUw++bjZpRj+Uz3blhG4TBRqaiReOcaxsAttK16zkbvd96CYwY+rwGiBe8B1Wrotl8+reZivjht2V17+SeA3dSy55vnhxHH415xEw2c$TTGxkJQK1HmMWcj$wDPeHTAo9kZymSFCs5NqYZdg3wYZpwkxh1UMC-NlPvjV+rp6-9SEbs-UR0iRBaw0q49SGK1OXB8jH1t0BFKdhowBRs1AzxYrTxG58dBSm$M6wWEWIYzpbm782-wdLtjCrC4AWdTD6RFuIPO9t-vIm87pGtak5h5hPSwQUHMcXKnSr0VhV9euoi294GJkG8Vcl8gRy9tBZMhK+Wxp4aXQkncMXIeeC1LV25U6$1l-tW1moEvvl8UsyvM6cNlGgU0i6Hn8W+oO2dRoS32QWT3$3BKVoHV5Ev6dQYP6iZA$-BaC9HKoL7ELdzh0SaSsIaMbAUkcgjXqG$kJIuOu$lNZgHu1hI-IW1SSn6PaU3A37rFSbBF0724O9nFqpSuAIcnT61+xjnTV5n4NnOyANcScNDT+V2XzdGX5Lro2zeiUPFQC2RFEzvEP+dlzOVQ8+wSNcCBrEH-16v$6cTmdApsRJiVpV5m7L5O09dVJGam6QAjj9kLILPKJCa699Ix58PiknWm$v+krhz-Yhd3dnY9eZnrZBuYMt6UXeJeXm-Hl+BsabBKORldx+9pquBtvVwUmkCavQP7pNFKIhzKajBdTS7GEqJqv9UlUJ3UAd9T3M8S1-QvuP$pmHFOcv4rr3XGmpOr9h06oxJY26emmJsIbU91o+PjTCLz2Vol0Ob1oEktV3byRHdSJJiYOkoObLWqEE0Udvwky9kwYm8LwlRC7m8G3NAzWggG2WOhHClPVAsekKd8Wi$90bp2$QkOiLkFvdhZJ2z2EukQ9+32EQyWXR7-2a6cFAgYn8duwSw-LP-Lxe2vkPvxsz9BcOxcBH4u4KHaO2aMnsKGAtA0YoPtxB4MQ1TTzh8bJiudWYdJzYRn9Ct+7VbwTLrr2Kv4F0yvho$Vd134hMVFJ0N94Q6IrCJi+nRiKOllMHwRLbxlO4kT7LanP0PyKm$tpcTul9ZnI4ixwETJFzI9yTNvEsz2eWcrnG-VpdXLIr08hKUFLAMeocd4GksKU$T7RQeOgg6yQhbplmJ+Gh4oBZQnDZz+rAryQqLIa5z1D46axD4A72mcwO3ebrjS4AxCHbA6Seq6SAVep2zlo-RIoNm0bdxV0Eh4a6uu+3X1WjAc9J3sOaqJpKWSUA$jx8mcOhT4oj-vT+U6u5W6uL65htxjOR80aPkSqU+H9mLA7rs2up$JXb2cNBtqenD7r4gc$dRnWltjvcwxSpGEyeC742vPurXxCSp9n$MwspLLtVdK$iIxDRcW4azj4rK4qBHoc6SlLsyV4TaO3e8b3MtqTAQh7omrMR-6MEL9Olotnm6Q-eq3KaFY4pJ-5p8cwcRJs+mhu7WQvYL0QM6tDpAS3$pQqyieeLlYCiP0dsENOgoHrdbMzFGdTReOusWus0hUkE0RrgKyGG$84QBozpuAzAnCRVrmzttPDFE87vqByWU8d1reVsI7An3NqlyIUCcmRsim-tkU4LKyzHK$gFXJQZ9mzQLSwWin+o6BYGtMq760e0brStmIRP6SKqAc3niCIWioK7LgWxP8DB132RnCoRVJiVBv2KjCP41zzzgNY5pSGnZjHnN0Vr234l6NFleQogum5dKlBz3rv4Ssb-p9IQ-orvU59jy9NkPLUATQWANe0OMba9mWyUcALXUREaJE6m-263kKvTaOJTdi3WCYVHktblTKun4qUo0F3g4$whhPRB6+bbBR8V06ba0GaMR4Hg9FytD3yXklts3q9rZcUkVjZ5z$PRK+KBgE56c4Ee-AHHxcSYjazY$QRru0YHDJxz9vFwk+8XtgtS04hU27FPRcWaxaYeaPpMYKydc5CO9MDr3X0qMJ+wePMHz$cPuaoO29ZoswpD8tGkx-UUWNMk54Uc2PL-rLcDtmqDDV9UeGymae$IIWAY3Kqjtj+F-+kx7QBVWZ-2n4B+cm+yMFmcOrWwC9Yv+GT9$joq48YEluxlWd-vzh54U6IbwWJoTaQbd7q062jXz9e1ZzuRhbvapgquwoWeMbleUto27rrcUdQoylCTmu7HGYAYx6$R2QWkO089lh0raCtZ12PdGRqHSVOkoMWD3eRb$hIGRulweC5uesTAiKoch8A12pgky3wGda5P5dNppuD6aHXOnkQvyWMT3clzTkvzKQaIrvFg5zVOp54G+Qb2RQYELmQiKQqqztwutwYZ22X7lmKk$0up$YXYTZy17u6DwJ5+F0GVbMWxBMpwScbyipV28w6qloz4YxdZy2Es3RUSDYN5wyIRlXWwFeW75ReV3dasE-1om6jyc$$cWiZIHJbmbjaKW8IJ2mpYaaVUYQ$kNI7NqwHUAqQv62Phy4w3geK6HzxDMPTVE+MZukGDJRScAp9C7srG6gsEVLuRLTJl6OmCu3cpKoqmD7+SJqW5zYAJtVSGPpawOwUchWhq87r0PtcSc3A5ToqOxBVbWY07N9tFM-TL4k4ZIDzUbTMxElH2O9GYBPyjDNVDyQJ6-Uq2cGqNiP5RMeFXdnmkhi+Q2gmTUbR-DQOMT0KvgxuvtVj2TeRiEyi3tHIi-RYEdSETLs$50U5s3jYH+YqJx4hah1BCr20pGv9IGC$kkduxeBc$C6SkzEA-Wwx+K93CTEmid$rl9ebnRA+dQmUhHh9L-wm7ahQIBjpZUMyJU$TucsmREn7Hl4DGTLJNwFkDycztWHU9ZwnZuzV8yJ9YWRAXXKdSUh6rxvJebQAD4jZN9q9Ipz2tzBm98cvITvE-vhPxdt0Z29uQKEGl4Kt5l$F91PAe3WpjAw-cmoaqjuxLLrjNU5q7vgg2nc1uHKZurJAPTdxK0XOz$Qeabt5P4$SigUwyo6RrAZkaFVCSnFkEY4P-qY$YPnJqV-CyVy3wWjbSlNj7muT5EOSOw4-dBlNwSj8XDlIX0O8QxpSXh$o7RdjbupRS$uE-16+B9GA3VQRCkosHC$T1ILXqCv6AV5AU8ivCgtTZMozVEGydruyUj3JHUOEzrktOWDeI1EOr4w4XOFrRrcnAWP+rRqyWuMPYRg$S6ISz$IIs$3XQT8o4zB34h2kSCVVDP8sdNibYbQXnUostZe-hj2W59ADubhRL3nI57zIVd71liMgM5m2G3aXYHuvYQot76lelp-9SIbm73gtmjIQ+khR0tPn7$mBSudPYr80e$uqW5qNdorFXjWub4ScjbJmgYJsQ-t5T2gwUhp5Z1Ei8Pn--t3AC0TVk9u0NGQXkKp6KDE2ZiCbPmLa1H7aaBvnX$CcmUo4xIeKaK7V7s+emPuL2JwXTRgbQaXOD8YuDb5lIctleI-k-3GI4BnTsv$BaJIltBsbvzErS5UGmB1MlNrWFCKPwdMNjuo9-nVYtruHegAZP9K1FDrGIlkNrInPidlKIhu4J34CJsI+QNVcK6OONY4lwRd6nonKjgajPbs$Buuk3u+UeNC+yiO0ECBiyPV0FvLOb4VW97LbLIzxC6RANIIlTughqZ7Ee-9zWzG$zKiZQ7Xk4mh0bdPjzUv$Lm+wrcu4TRe4DXpZna0tB614GB3BaHg4rQNEFZoaDMwX7vVEXJDbrezzh9RwIxeYcuA$2QIWLN3uMjjHSEBl2XP2U3$95TSQHX$Lwlbhdl7SjUDLABQLEjUHKgr1rbg0ug39uItj94WetbHz0G95TUB1z+IHs$wuxYOsHVuAUq8mnw7rgI1AwormN88t8u+XrYyWyc0SYhQ1G-mHXrVmL4LyDsmPS+N+EyQyswj2V70it7rqsJ+Vn5mV14AT$txyr3AVyZgaNtWC97yZbYBDyB8qc8$VjdAk-L7iuC5OAkQaj9$9tCbnbgBnOArUKe7PGs6MdTyOAcoIgNZ2TbFSx$10PPPQnrt1MhsJAHk2So1PgT-$HW2G3llOqdQjlDQHN-nlFjPNr8D+D$GqpCvoP6dVn4OYrPZI7izQd4bFJxsVhWejI+bhW7AaTmlXEUWiKg4h-PC0SmJ-CMlhm5IEqIIGQDbxbrTbiGC6-byuAZtnnNoXyrDVwXwoKO-7gIzdpAgxS5Vehg49WQ-No2R$jZDnB4DR$HEbRptFxQ-ZqRCSokS1os-G5KjOoQg-0SyVjByHF$4gIzOqdl-RlYy0FzN4IWa$GqU9JBlyb8X$YcpUPWehHj0s9Kb5YUxGImWFFs1HLnD8snQl3aojvdCvBJRlrtw58Ps2oVsH-Bx6hGkQZwo75J3Wz2ltLja3nBlnoA+UgXrKQU4ZwCw1YHNmDLy+PHW5soF54PEPpk89o8GZeaT25PVVj0uI4TzO7idCR7hg+4ynX$XxiGNAMiWgQFX07pq0n6uAvHaBieG607Roi$7XpyDGogm8nBTKmj$8xX8dpqI3s-eiGxx9sA7TTYBDqAOyyaUHR$w48rs9-RLV9p3FkGW9VynlmJ0WNiAV8PVsCyODOmHuRC5HRX$KAuZO7bzMxaZ8S4588xbyADLo$5JQUtua5QhEwANZmvLkX0Qz7CPBQ9ZSP-wdKDZG6Hv61vtWFI4g50t$JP166sgjKZFWAlmZ3FFG+1oprqdvEQbGPnvijQegLq-bjgrD33lpkzBOFIkJ6wA2q56aSxhOcHSHiG5AGg0bIWb50doVuQNNhNiCPu$LS5ZbyZd6Fe1P+OEgKXB-7riwbd8OJXvqtlHdG69h0L6SBnD2cAKd$JV4CvSxzwtmZnj+r+1CBFkSJrFkx4jTMi5oxpBK0+rodclsoQhWFimlII0rEHE8NDJOFxkF6M9KH4STzj+hpS-rHQzFl9XyxQJ3lQv8d5YYqitFXMKydW5oeUu1RvsbkHERJhT6jJ$gTMlkhgvN4yE07Cko8bkcSX9T-p5QNAADskDvGcV+F0m8vodIh1yubB6zz-$FeAUz-6Dt+2rA-uWqYzGADAg-5N$6yCLV5WdvqLI5zeGRd62zRk5HltBCqoeK9vaTqlrc$9qQG6N7XLhTcoYezIJM54R+L22MALNdGYh-cZ+H1qKuz9qBAyBDRH9GsNLc3Nw+P8BvpNIZQk7YobkM8wZWKMmhDEmGOi$uZ9DW7h7kUrv7YLTn0updmjMN8AnQnUGHj15UAQXCzb$lUrDFaWEyQHPT0FT$zdD2E2U0oAm-pRpgxKOCsLUmwd$E0liuaUhTgAwe4Oh107$bRKQUmimstE0CiUVwMUVPmBOd$nALEnLWo$MtciGQo5OhjcSvQPQqu+s$tMGapkqDky5dsPZAHSEXgwVDSwAstOc8z-wVZSk2RJlGtrixeSiJdir6LGe2c8q$R17EgtJAO1yC1gT7z1c0s0ne-Mqw0q-C3p1tzqFq2ucJIKMCnIRoLQr8UDCW7mTVaTBIcLIZFxtLdVq+EkYaxQLO0BFFCzWX6Vxvqki0RLDa4006P0pEtYDd$mFDv2vxtlYQhI5XwzdNhqNYFdMp0pet$eY1LYPnuBpzhxzHPqKRnUSNL+QueLt6uO8caIb+Fglj+0mo0l+DmQtsIJU5+HHj4Sh4pY5ivw3w9cRkyaT1TFpH+RP$2NycCHYoGS3nXPCqVA4SN160QIJXhx1vqa4xvqP5p7qz1$72L7H+Jyx9pHr25BlDX9o7vKvkaMNIWPvQsPyGcW$MRThq4gAJ0ypJRiYVHDgotZpt+5lvx$wNC8C3uFd8ljlQbo9B3UilPguZDXO0o1QkxFdLNWO5ri6oiNTLA7SZS7GMriolPpKMFvuXI$xzVSGkh$ZAdsh0g9kSGoJ+R$2p4Q+bHR$NgwiK4hTnZGBaVpoK1WC8JTEHM9lnbLWh3TN-Swjc5S68dugbBT9pe86MywCA9ckVn0yMxClNeR$mK1rDZVwMrnKFyK-0i1l6qygtDLGOu4sYADZUG4lOWEteHNBq7GSNJ5$4d8weWsokaHpbLNsRiNWqv+N7vTKaIAOTYMbPqu0F3QRvJ8aAUtHWG$lb3s3yCExUdUBDNMEvUZA0Kvpp66n1Wn2acZTkCqcD1uYCsq8g0IxH6eqFcPc+phPEEstvpKEagPML4pq2Karg2KzRMTgxxNsJ2XPaBtPO8jFx1oq7AMjxYSSbz4BVs-8TNDvqto48zpCbx$jWBxCuLTGLrgNgo5tJ4tA4QRJRcR00sGqzP24qASYmpjFt8xrEgWegi9VA9oAlgP66SGAmpkSoVQWwUlBi5iRSiBD9bJNyX+tAmm9YFr03TETJQX0Zm3CqgtgI4x9$+D-ZaDD4q15PFVubXu9D0lXj4TsZetg+EoLj37yWz75gAhKeiNwEDDg3WVIZgrNFx5h8pDRJGs46AtQNlGcZFHGr7s2OyvY5QrCo7+5XlLA3vAsX$+CKWQgA3-3B+e0DNXv8ahGg1Es0XD9EQe7R+Qj+9w8PwRXxCpF3uJIcRWVnreOwQRxGauKjdaqbDwGH4i6-X2LXQoLATzt3SD0Olj6Y4S1hNnlvPJaBd$+ztDjFbNAVU2gS3irJnbH2IHvmxw$T+XDF5+0zWgF1av0B2XEEHIaojb1b5dwJPtQEKDzUxeD$N58EkWUBEI8IVw57-Q14GiZCuuIyi3l73LTKIn$GbLC3hFL1FpCURR-CXEkUJeL-VXPiub6m$erwk+8F8LGkGVZoHYc78FVPPTsoYlo9dVRk5ADtRiWvAwPLLe9P5VQCkPhE6RZCioROR6sQlqAwOm-3qJW$DNt3Y2LHSHDeA9ha$2wausFeBlacYTrCMhryCcUH0j58onOAUPYm4ZCB9QeU6G1AKcPrhMCSsIGOGi3i6HJZ2TPNuN6FNTLJvSzE3kxgbvOeXxop+qtE5clBlXa1ZWi8tunbtZhPeIGiAVZx+oUat55FlM$RPDxlEoz9ZLRyrVCq-1T-Y6gLPyed$Kqenws9-8VXOup$yJaDt6ylIROtdXjCjY0B5H++9wJDHYOgE1qeKoNcuUsZ+gbV66U3h-+qBBB8VRNCr88tra9lnHuiPVKzXEsAEk+jLOknGw3zacc9-aCDnQ5UA3ZptSbkeri+nZPHd2+jvtehGsXBZmDyLmeHQBpi$xuOx+SKE560yYQ-QBStxCWJKcwIKHamsNgUCYDYr0Fh3ntqSx9ym$mZGVaycurppBWKYlQ+YgjIg5FxuihibB6Sv0g4ck-XCFlqJiX2vuVZwiM$lz$Eg9ar0vI3EJ$JNYC85DuPr91Th5jlYcOp1TOa62ZlH2LUqORvP+qQvD3mmxK09UuYdYCTAgKuro9AZZl9PZYSWOVx3d3h1wSwJ-UeV81-YclMyB3haePOpNcRdIY-xNiRRv1TAi5xWQRk4jYWThJw4lZqZEUO+mJZYQQJpcbS6Ewguaqn7bxDKKaGurKacpHQqKjwrdlQe35G6jWvcnFm9vi+PjNQeu8KUD+qkYio-a3dlLYITMk8oZgD9an2G73p6hSWXElWzO64pR7dn+knC$ozCpL+dMxxBoL8LLHP43g+i6LXmQ1RtgO6iFFYaZnmdcJZFYmlA7ZqIKqrkzI-shBzu0E1n3Nn3dGYmG-8P8THibDgGhrNogwRaMY-YDAYiVcYFjV2nag+PBTDe1LnqorYkUzJaGMvldsWrms959LSv3ZHrR+JrCerFpQtM3+CsbQa58JK-RF93ViwJgwbU9yCTZPXoQ3d9C9X7wL0-ioLjWYC2BcxT2bbgg7GmVF3zK$EasF9709t2wLBacnQrUBxSGlDomJhTzihjN3PxD+Ju6cq4iST6Y+ZqAjP3crYdIWSKvio$dKuO8haZKcZ+NTe--4VGXCb1HSYp-GeqtFHYByK+y0XMERcCl$1pPYL5Ip7wXGsqpTplnGt3bvao6QmMKit9cEU32U5-g9nblaS0Iv5Gp++yo0+lk-uih9O0MLW0PyVK0N1G-K7RtsdRFo0r+ugi9eK5BawYxpg-NUQLwVKPiglB8hPoqzdna1E22YzqeDlkS8E73HtE9bmGjAhvUlL3n493nlxJ6Ze0UOzjEUT2iOXHrSzAD7ZoaN9hbxw+L9bjnCUBUoHdOxPIH58$4kygzk46drgXqdQppDOibQxUKZRCk8bIGCsQXJM5vH$XLvJsy4F5JASmi9EoEYu1TAJ16t1I7AURON5mUl8AEJ$XLtP5723laT6yvc3oeKKIE6tx0$QBqzqsLgS8CPVOW$cDHc3D9YG$JH7z7URMQOnMcxxeZNR-9A8MgU7RGAgts7C6NTxa+haoNY4DSt72NU1IARc7J2q3M15p+rgne5U2zOBTFOLdodFmryAwVmBu6XzB$Yzj5cO2VyFnvAsm+4-We9YJ9wg+KV1X2WCYK5oMlMr4vbIb4YZwrBtBQUoH3ujsr3cEMoVY9T8um1xtVY05T0LK6MQyQ1e5k3M-bHgupS7DUlD-XrYJGQOtZkTy3IIWgxZYkVHB16Dq-NNzcqaWwMY0-L0TA4MUHkca8-zlX6T3OM-1ZpziEOrdBVFs8nmVlwl0hTL6SEVln1V-+b6HTTzppU0hWa+5BijU5k1g3HoCI7X7NBRhzjTKLRhC0wuz+LhVYC20g8+CMK7IBY-MYuh8AUDOA28ciR+MRHJibNOxpESDaEDUtgoQoMg45yR98637sT-6Qv$ryhrLkBI06TkeZC4XnDrHgDKePA2IN94TCdOjEa8u$o7RJGwFS2ecU+jLLkIbMIZi8PhomhAkm$a3HbToA0O3Hg6MS13-BR$59HdNJ4w2xpOhQ1wS8O2FWBl2z$9ZQbC31vvriYQ5eusoUBvMegTx84mLv$6MRDSGik8BNDM7vHwKhTF$0WGBhkpwx9K01VjhSHZT5ymUnSthyliA8z4RBkLVAKCDJnxwvtv0$Ipwa9--RtAZsU8zycHTl2F-Obgt1ox+BqNGrwIrKqHqmOVP6wLrDkIj4$e+8Twbst$EK1RFQGKaqSORZGb$tFCtaopjdcIbLBkiTidSnLjF2UQ+XPOtglH21yqpl3Niz++JlhMSbAg7V8$LcFi8BBKCJYsUV-0diI33aWSCJoPJ4$o00Zlpaa-$XTDpLK$XipA+INn9J8jGdv+i-Zost-NsYdcxznCO35Pgaxnr+1I1i9sqQJN0O5gLgh0HkqDZtIn2+CXrad5FxzaXIhxhTRXKyG36V8AzZr+2D-eN2F4gtjj$s09y3oz-Jz9Y2Y$UUjDHCCuKA5mQ8BxZTWg+bN8RDQCGO-IC45$e$$U154Yypj24VtE3DNAEOgNVeqQezpVoF4r1AgDpBrw+b3skRPEqIbhnVdOUA2bPaKpywdMClopVAgsRhX7rVm3yJqMK--vjW$Yxg3dUVmVZgmhctDo$gYRYqPID4-wm07bbYba2u+Bi5EeqhHi6GcaN9xyR+-n-B35VHZCTUFM3U9HuQBkYzkJdBUjxFZby89aYy9v7qX9QvJaN6BLcvPbJG43Ee3q1r0d07K4KWLcqs1vaDLuQInwwkMBikKZBw8Frm4SRrUPyug5cJ--DM1I8e+3kWDIm97utt0w5V+SHt1OtaHp$iMugMU6KFBR8m$eBD9KYnyh5VS4X5DIzSAx4EiJvthB2P13qDHM8EgrXi$BWa94+h-wSaRzmTg1t7+$x8mk-piKDKKzz7L4WYNgssmBkpmvgCltRYpIcYZKrQEtKv6wu-EuwFKc6eNOthaJc1pA-+G44nSwgxy-gIhIKKoyWA3JQ3POSc63nU84449+AUW-oeL01WeizL2LnjHlyo$Ylk82qPhNrPaXi0-LyG+MQxbCwbY-CA2pAo1Un2qV3Z6ghlFyBszxR92qPjQM9JEWmYIy$o0ZhVm0Gexug-3Cui5mM4xZr7VW5qevWRog2EqVsWrKr4kjoeAFgBYhHPHQCRhZho-+RwOZXHKhIT71w4agKbHCMMzz2F2CkQP-MFjahJnK+AYjJEQNaElMLAEOuesxxjgJRLKqcqiFkLzVE-EWXNZzr64wy-6MpC0cwG-n0Uj40XQcmpCDHVyLC1upj1zX1KzV8o+CihSTzCxzbmOBw3sogtb9VURv-5EO$zSeO6rtPgSCP1LQ8aAnT4P8gWTDSYrrwtXlrB$D3ejPDeWk1ptxKN67romJ-eUOgBDui2tBP8DqbrqXi9PEwdiMY4sJgjO6$vl8yF0qL8Er0r1O-Hhk7cqCz6KurzKT43rSsOY6siOKCXX2nZIPX8j94uz22LBgej5G-cTMyE+Y8TJkd-$TR7MXs56FQb3DL7lZCID7TcUxBazy+nNl8lGZ3zoPL1LuSlEWo+3G6zo+DtcL-LdSK+EIskUVyhWi$pTQ8JqHs2DAxYbrN9avJ7oH9STkkkrEiX3S2eQ8dKLyCnVrgApV6oY1I7zJ8PdKk77KIKd+ArPwxAUu3x+WSl1wXnatU9lGBbnZmaaTh2eT4Vt0+OXjaw5l3mEpIbNQLV0YN0Ir68uG6Hqe-5GRtlojwiKhbOGzJiGNYLPVICLO9pQ0Ob5GxjT3e+kJHGP9AgUABKv+v8s3UTwxKaNRFTOhhMV7SZGbJ16h-Iw3i6tWQr0MR$T0KHGArZj8h4heX8GhuzegHINxQymLl5gZb-0s4D3nh8FLBkUbyxsQkYwXenUd9VXnwp0dnXRubVrk64M$w8o5HDEUYDOJFr7F0IS4-ZqLeZ5BJ31Y-E$9z2Ynm3TuqHbS0KKo0iDX56WXVVWQD3zsnSP8dmuwWCSTcUSGo5UudQLyZr+5mg8IVoW0x3atrlUGq-abxcjM6Z7LB7B4hJXGaEyLrritgzT6QpncaluAKDuDNgEkAm$h9IA9voFP8mEVOvsR2WC1rCTtbo80QsPSAgKh7aeMxYAjEZ95gEuicbu3SFzrr8AmVL9CZsOelY27FSLxnkMwkT$rc28jgnzwWQCWZ72GAuuzrW22tPwt-5-yMd8qR4ubclGrpq8rV1ZOdoXcb0lQwrYUqe4$8-pLVJJL6VaRzglC7j9JCrSGGxcvI-w84v7aec6ylWquq3utS-7eb+5Fl24zv0K4-jOMO8$CPPzNZ4okniFx$CztV9a7UXWhvOpbglMuZ5dZcEA5aE2zS8kvC7ZqZOH$ii$pnnVaPDH71iRiE7+4XyRWMTZ7GpdX5unuQutuCC+8wWMC-$XPmOVHbPmV$ExwtMhD62YlJ0moDxtyN7"}},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-chl-out-s: 6oLwtZgY8GO+WVWKjNCVRsEmTeXeXN5M/FQX7hXKh8OqwAMJQ0JIrCUiF6U2yHcnuXW2lNAfm4Uz5KDtA+fOLDx+RhRpiGfjjQBildumQoHagM6rNSVT1WJYztGwmeHiejVcroWVAvYRh8oOZK58Jgs8VVt//XbFLvDvM9GeLLruTj2lRXj9DAcA1pcRlBp6GA+tC04ElAISkmU1qA394/TWKCIytzZnEHi22ZvtaGnXI/JiDhKYw2nWkhZxYrQ5VBHeFWBRCx7E2RtHsgLkAA==$+6p74NK79Fpfbbm6QLNORw==\r\ntiming-allow-origin: https://1wfqxn.life\r\nset-cookie: cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=1wfqxn.life; Expires=Wed, 01 Sep 2027 20:53:55 GMT\n__cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; HttpOnly; SameSite=None; Secure; Path=/; Domain=1wfqxn.life; Expires=Tue, 01 Sep 2026 21:23:55 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3472ad038d256b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"cf_clearance","value":"lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0","quoted":false,"path":"/","domain":"1wfqxn.life","expires":"2027-09-01T20:53:55Z","raw_expires":"Wed, 01 Sep 2027 20:53:55 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":true,"raw":"cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=1wfqxn.life; Expires=Wed, 01 Sep 2027 20:53:55 GMT"},{"name":"__cf_bm","value":"Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw","quoted":false,"path":"/","domain":"1wfqxn.life","expires":"2026-09-01T21:23:55Z","raw_expires":"Tue, 01 Sep 2026 21:23:55 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; HttpOnly; SameSite=None; Secure; Path=/; Domain=1wfqxn.life; Expires=Tue, 01 Sep 2026 21:23:55 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":18451,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T01:18:14.47199Z","times_seen":18246362,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/plug-CwCRoaxn.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.930Z","timestamp":1788296035930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/plug-CwCRoaxn.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"89020871d93e7d330447fb5b23e36021\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad099af56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":398,"size_decoded":783,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (397)","md5":"89020871d93e7d330447fb5b23e36021","sha1":"40da465cbbdab4c14b096caa0cb27a4870360716","sha256":"7ca53c101294e7635384f698a342237a00047d975e4943d5c214470d4c4aa8f5","sha512":"102dd652155d3ba3d4de13559fc87127b1f062ca5c4a542c01e86f94708b727b9214c1f42448741bf10401243f8bfd6a17059e142e5b7f23fbdfff5f7ef5bb1d","ssdeep":"","tlshash":"93e0ab5b028c77bc4e1a8790c13d28d6437911ed278d8698860d133a024b071ea9b254","first_seen":"2026-08-28T05:09:58.792709Z","last_seen":"2026-09-01T20:54:52.807154Z","times_seen":34,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-CMkaqWIw.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.953Z","timestamp":1788296035953,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-CMkaqWIw.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"b5572bca29f5dda1880f2683395e6524\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 18116\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0b9f556b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8927,"size_decoded":4868,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (5620)","md5":"b5572bca29f5dda1880f2683395e6524","sha1":"8e89c91009e1622beadb3209262d9e21317e341c","sha256":"e7303aed8bdde21a0e1ba5f9203ea4a9fb2088da519b3e107bd64451a8b0ea3c","sha512":"465dc23852a0248ede9b179cc14325f40c63a1a5902e28a1b3530e2c0bf946c193737682aa6463f1fa7ca3506f6b5c9d8a8be2cec9f6ab926b8e1743ae764871","ssdeep":"192:XmaCBpKYTfJAqgI5esjfMmr7YnnGm/6IFouGsd8LdF:XmaCharG9rV7Y5jnedF","tlshash":"4a02c5856b102e7252ad4ccdef5a36d148f25bab9a00c08e7f756dbd3048c89d61aff1","first_seen":"2026-09-01T20:26:35.100376Z","last_seen":"2026-09-01T20:54:52.80792Z","times_seen":5,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/cdaredirect","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-01T20:53:54.212Z","timestamp":1788296034212,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"POST /cdaredirect HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 238\r\nOrigin: https://1wfqxn.life\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1wfqxn.life/\r\nCookie: __cf_bm=15TCttaZbU7__OcCWkTiRGRV3tL9qozMVuRAhCxDPUE-1788296033.449123-1.0.1.1-IK9TSE1UMZnbMe4R6ZrHF2RqPLMwo4Zz7kS8g7mqzGLbVPPFj7NRf.J0V.W0peESZno3ULzSyEKwBIwl.JsjwgEZOEIBT_EUrLL6.ZAMl3dES0ehtTg3v0_ija14WiTxKULHQqZ08o5S7mK7ZW4KLA; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":238,"data":"initurl=https%3A%2F%2F1wfqxn.life%2F%3Fcda_id%3D266040e8d95ecf3364146e6469396ded%26redirect_data%3DeyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026cdaId=266040e8d95ecf3364146e6469396ded"}},"response":{"raw":"HTTP/3 307 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: text/html\r\nlocation: https://bundlecda.com/?cda_arg=c8iRlRP_jHG7ZwnoGN7BtLkZg4Siz8acVMwmcMmt54jc8_He-nk-miSWJmDiGm85FMUKMvnR3FGb4HbrTDAntmyCmPelpztvS0KmsJEXxAr4X37dis7oD6PUdFQ0uzrKflQTGeQRufdFcfJ3DUH6i3vCCS6xpCEN72oNQfcUmXxnR2LEL20RcgTYdjdf_lTj5KOlUd9iYBQI8u8xMA_M0DqOVaUq7ighfXjC3tHx8_ZUgmDMMYADWsmdyhjAMZyBmRPeIJO_dBZp2n32CtBkrBNPHeuz-WF2oZL5Ank0sSE4MrgVTIo9_vi9J_8AbMZBCG5w6uwLmRMYMoKLe-B03VLYsGZiauyPoh_L7P_e4xMVNO7A92HrsYoB_UoVwS22ROyzYChYOxOgHU01OztC0bwY5KjzEvMEAEDi6eFTCG2LiAFiaVrmd_SH_hpWsSwORgcOsZ66N-Zq_MMvWMBBL4eORNS7thM0cJFKyJWBL1Q\r\nserver: cloudflare\r\nset-cookie: cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; Path=/; Max-Age=3600; Secure; HttpOnly; SameSite=None\ncda_passed=0; Path=/; Max-Age=3600; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\ncf-ray: a3472ac5d8f856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"cda_session","value":"68d2b92a-49d5-4414-b6ed-7339951b5454","quoted":false,"path":"/","max_age":3600,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; Path=/; Max-Age=3600; Secure; HttpOnly; SameSite=None"},{"name":"cda_passed","value":"0","quoted":false,"path":"/","max_age":3600,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"cda_passed=0; Path=/; Max-Age=3600; Secure; SameSite=None"}],"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T01:18:14.47199Z","times_seen":18246362,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/support-banner-BHreMl78.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.869Z","timestamp":1788296035869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/support-banner-BHreMl78.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"f5c3f1b65f665490b47008852e8891d4\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:41 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 18116\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad028b556b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5703,"size_decoded":2602,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3315)","md5":"f5c3f1b65f665490b47008852e8891d4","sha1":"04c40e708265e067222eb9d54384f555771dfd93","sha256":"5d66469713b526360c49ffbe7c51c6df4f04fc7f6644a18da8c0f4cb55f67cdd","sha512":"14909fb909a8269725dcd797a90631ac5a84e81da900431ba052cbd9ee4e4625a247aee6d3dd2a616b2c3c87f2bbd4f3ee58a770d916837dcc351bde45e0bd09","ssdeep":"96:UG24/cqWIRnv+qsGBk6/Z+DhPUc2tUzIJovwvG04mRTxjsVx8d9UmurU0zQNButj:UGvtWIRngGBku+DhPUc2tUzIcwe04mRi","tlshash":"4cc1a705ea30bb7cc5e7586f3315674a9455b2a68ee7cd8c8075db1847feae0c345309","first_seen":"2026-09-01T20:26:35.018411Z","last_seen":"2026-09-01T20:54:52.808737Z","times_seen":5,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/video-BoYY2GeR.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.940Z","timestamp":1788296035940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/video-BoYY2GeR.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"ac7477c9ba6ed64944a79e13bee6d384\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640186\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad099d156b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1110,"size_decoded":1187,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (818)","md5":"ac7477c9ba6ed64944a79e13bee6d384","sha1":"89e9e8875d621147480a7daa10bb8153dd7003a8","sha256":"d3e01311298ce81d08aacae810a9844479b93de38fca182c302490d33b4109a2","sha512":"3391ea6d3a6e99fd28247cd6e7be49f90037c9c8a3933be689162c13bdecc6d306700358eab3cc39e51f2a2ab5159b19beae60cdc5db574672e86ce855eaae92","ssdeep":"","tlshash":"481186126ca2c4b012dd24879c38e5a095e4517553a1a19091fece3a83f4fdc841fac0","first_seen":"2026-08-26T15:23:24.104342Z","last_seen":"2026-09-01T20:54:52.809584Z","times_seen":40,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-preset-to-route-casino-Yr3NfScM.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.570Z","timestamp":1788296036570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-preset-to-route-casino-Yr3NfScM.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 01 Sep 2026 14:42:41 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 18114\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"1b4b7e1c8971031fe68d4a5355266e9d\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad49f7b56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":606,"size_decoded":825,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (605)","md5":"1b4b7e1c8971031fe68d4a5355266e9d","sha1":"63b749e3cfdf5000c9536b4339a971ef92df3f2c","sha256":"62d94781c64d60b0037e2e74b98acd65d2d80922a80dbe386f8df66f572eb330","sha512":"37549c49cd17048279fc5a3c8315c5b801cd44ce8114796651e63de450646b5015d3a8ff1a6fbbe6c4f6427d3b49b0fa62516f01ec80c6c83b3e53c55743ffe9","ssdeep":"","tlshash":"85f0782bd588acb145248bece92cb8621433aee422dbe674e0cdc9142b50e467628b09","first_seen":"2026-09-01T20:26:35.082274Z","last_seen":"2026-09-01T20:54:52.810425Z","times_seen":5,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/infiniteQueryOptions-Kf6x0a2l.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.623Z","timestamp":1788296036623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/infiniteQueryOptions-Kf6x0a2l.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 39\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"36074a4ad1ee712f187f8a9017574356\"\r\nlast-modified: Thu, 23 Jul 2026 14:54:23 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 2202470\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a3472ad4efeb56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39,"size_decoded":537,"mime_type":"application/javascript","magic":"ASCII text","md5":"36074a4ad1ee712f187f8a9017574356","sha1":"09e567f710fc27c5a03f2396ae8dc1d9a88cc989","sha256":"146d9737b192711c6cb3ac1635aa88f9e409e813b163ab4d9b5ef6aa7243bced","sha512":"3732bd7f8aba0a9448ea0d35aa4f5c6b7c26e41f98e3b727e700ed02d4ceaf0d728136879946d18004f9ca8284220d60c15fe1a081d68662c628ef344290958c","ssdeep":"","tlshash":"c690044530c170745111313445377c05d114c45cc5d5d735c104454035100f0531fc0c","first_seen":"2025-09-20T01:00:19.497611Z","last_seen":"2026-09-02T23:44:25.304122Z","times_seen":3054,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d21deilz814qgl.cloudfront.net/9ddfee8f69cf5cfdbb5c50-800x34412.webp","fqdn":"d21deilz814qgl.cloudfront.net","domain":"d21deilz814qgl.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.238.66","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:54:03.234Z","timestamp":1788296043234,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /9ddfee8f69cf5cfdbb5c50-800x34412.webp HTTP/1.1\r\nHost: d21deilz814qgl.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\ncontent-length: 53622\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 27 Aug 2026 16:30:18 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-disposition: inline\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 01 Sep 2026 08:56:03 GMT\r\netag: \"902668d6164cb87fd5f787af072c72bc\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nage: 43080\r\nvia: 1.1 183a9e2085d5a9255c6d0724cfd9ec10.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: s2RiSv3zfOY_UAY6BamaB-Ij1QVVKAOIY0P9hdBZdoKPuTaKjkmC1Q==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":53622,"size_decoded":54187,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"902668d6164cb87fd5f787af072c72bc","sha1":"e2044609f94a32ef39bf1ddf8f3443ee729b2f8c","sha256":"4f0c9be8e35a350f74daacb407993380be6069289cc976cb0669737ac973c67a","sha512":"2c741993d4a83f0fcaa4237c8b0947597cf3351a68c0610fcd50cac927f87cad13b73a15433740f49ad86ef0c11b31f2492a65311a11c5a792948fe1f1f608da","ssdeep":"768:M1W/CIBwDTCx5MjBmuL3MVBYNp5l9P5unTrAxm1Dw07+333AxuMPdkZe/QlmU8g0:MymYOBjcVKnGSm1NiHQowST8oi2h196z","tlshash":"ee33029136b91a39cd706eb8816912380504c73fee410f526cdc46822a7e9febd797d7","first_seen":"2026-08-28T18:01:06.34451Z","last_seen":"2026-09-01T20:54:52.812076Z","times_seen":11,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":16,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/shared/fonts/coolvetica/coolvetica-latin.woff2","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.593Z","timestamp":1788296034593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/shared/fonts/coolvetica/coolvetica-latin.woff2 HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY\r\nSec-GPC: 1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; cda_status=pass\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 22 Sep 2025 15:36:01 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 5668093\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"5d8f526e0d7cfe6d8bfd4b41ed8687bd\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac83c8a56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18988,"size_decoded":19467,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18988, version 1.0","md5":"5d8f526e0d7cfe6d8bfd4b41ed8687bd","sha1":"7f9bd2cbff5fe407a25dc0e393ae5fd1c38034c9","sha256":"f79b337789aafa371a62603204a649f9ef6c2ce995b7d64c2b16d4ea70cdda5e","sha512":"02eaa1ed099a4f3819dc21aaa506f5ae6a5e95e9f54eab94afdcc2a289dd3c600ce071d6a1ed3715aa71e91e4cb302998e7f16ff232d9a4ff513df03336883d9","ssdeep":"384:iiZBam+gE9RyI+jICXw7ifDee8Qp3m9w5SuD4hZZu8ZqKr0LPGRUwL:R3+gpjICWiLx3pWpHsAr0LPGKM","tlshash":"5282d03035618436de5a30bc24a32fdd2f614ca46b938cf136e3a7ba4c273895585ace","first_seen":"2025-08-29T00:15:47.493986Z","last_seen":"2026-09-02T23:44:25.585449Z","times_seen":4356,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/socket-io-adapter-C69REO0G.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.790Z","timestamp":1788296034790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/socket-io-adapter-C69REO0G.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 25 Aug 2026 10:52:27 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640185\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"9a0df4f6fe1a0cfb1588764ea7333fb1\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac97e2356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":979,"size_decoded":1020,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (978)","md5":"9a0df4f6fe1a0cfb1588764ea7333fb1","sha1":"d9f297cfa50fa9fabab8b1c5414e091b82087e07","sha256":"7a8a3f9259617e56d12b6f3b630987865603f1e1b4979ca87c7d2fbd071c6118","sha512":"cb72a641ac15095a0889f0936ac4536e90b21919a2b6c6051aaf1cb5084e58a58c858726d7bc05edc14fe0e0b40d7e26b3b39b46ae08d619ebede2f2afe6588e","ssdeep":"","tlshash":"1611bdc2227662b93bbf15ee685090406500aab46781838d3b1c5fe1d03f5d4e59bfb6","first_seen":"2026-08-26T15:23:23.997053Z","last_seen":"2026-09-02T03:21:21.881495Z","times_seen":43,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/vip-badge.vue_vue_type_script_setup_true_lang-3qKTxSx4.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.935Z","timestamp":1788296035935,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/vip-badge.vue_vue_type_script_setup_true_lang-3qKTxSx4.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"39bd5e6ee82892cce577613c0cc30b88\"\r\nlast-modified: Thu, 23 Jul 2026 14:54:24 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 1639169\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad099c056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3390,"size_decoded":1918,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3389)","md5":"39bd5e6ee82892cce577613c0cc30b88","sha1":"956325be442ade4751621679a2d4ca29e195c2fc","sha256":"f031987c81a0586a3140cebfd66dfbdf1355a2edd1db616f7e7691585addb21a","sha512":"256e2900e4369679a581a31ab38be722d8ec2c59b29d2736a81bcadfe4624ab19d562a48c70f9173a8dc1e9b62389d74aaaadfe6b460e6d7452e9df2ac974e7e","ssdeep":"","tlshash":"40612454f7b0d2d5450b9bf9fe3b64a0117d38ba9bc09d90b3d27828dd9c0de58058d5","first_seen":"2026-06-15T08:07:15.700377Z","last_seen":"2026-09-02T23:44:25.123868Z","times_seen":823,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"optimize.v3.bundlecdn.com/unsafe/banner_mobile_5x/plain/https://d1x0nzb6t1pnx3.cloudfront.net/banner-files/0dC-hRRJEYJNOlGa7pT6jfPvUrTu52Xj24641_j2HrbAApnWHsym9h96M0N0n9y1i2jLJdqWv-mvL-i3quRoHmkD8WKW9e_2Vv00.jpg","fqdn":"optimize.v3.bundlecdn.com","domain":"bundlecdn.com","tld":"com"},"ip":{"addr":"194.67.193.128","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:54:18.071Z","timestamp":1788296058071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v3.bundlecdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:02:01 GMT","end":"Thu, 10 Sep 2026 13:01:53 GMT"},"fingerprint":{"sha1":"1D:AB:1D:06:89:8B:28:BA:DC:EA:83:A3:78:E0:DF:46:B8:AA:3B:23","sha256":"EC:47:30:E3:52:BC:01:30:AA:00:6A:62:A6:81:61:5B:C6:62:D0:80:C0:46:1D:56:53:E2:A3:EC:FE:31:7D:F7"}}},"request":{"raw":"GET /unsafe/banner_mobile_5x/plain/https://d1x0nzb6t1pnx3.cloudfront.net/banner-files/0dC-hRRJEYJNOlGa7pT6jfPvUrTu52Xj24641_j2HrbAApnWHsym9h96M0N0n9y1i2jLJdqWv-mvL-i3quRoHmkD8WKW9e_2Vv00.jpg HTTP/1.1\r\nHost: optimize.v3.bundlecdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:54:18 GMT\r\ncontent-type: image/avif\r\ncontent-length: 91310\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"0dC-hRRJEYJNOlGa7pT6jfPvUrTu52Xj24641_j2HrbAApnWHsym9h96M0N0n9y1i2jLJdqWv-mvL-i3quRoHmkD8WKW9e_2Vv00.avif\"\r\ncontent-security-policy: script-src 'none'\r\netag: \"D9Az74RL9gkueTxjVwFXRFpiOCfPXl167QFFfof1qpk/RIjNhMmNkNTZkMzcwMWM1ZjU3MjM5YjM5ZDRmMTY3M2M0Ig\"\r\nserver: cloudflare\r\nvary: Accept, accept-encoding\r\nx-request-id: b0iT0vQRRepkJ8qShnEcB\r\npriority: u=5,i\r\nage: 108333\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: a3472b5afcdb2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91310,"size_decoded":92105,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"2f26a2d606ee591ccfd956b2a149fcfd","sha1":"e23507579eae14c77a0155278aa0a06312006df3","sha256":"6626aeed164965f3d9dc23a08746c033f4d0aeb5061eeede330ee66953c12ba6","sha512":"22d72395565e5efbd09388e4dfb33ce33edd14377115fae1258646aba3663439b9e4e88990c8ecff96090e038d7865f35f43e76e0b8ffcb3d271a28890c0370c","ssdeep":"1536:1kwW6z8g0YEqRraxxKO+RkG5+x8wZX2q1zaWxsFE4j+5EiPxs8uQsctx2Qc:TXz8TXq9aESGsOwB2q1zaWxiyFPa6sc4","tlshash":"c2931249de887e1cfa10c3fe114ec9992d58ccb4a3e4239a6e61bd94375d982f0a5d0e","first_seen":"2026-09-01T10:21:14.506864Z","last_seen":"2026-09-01T20:54:52.815552Z","times_seen":6,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/arrow-back-Cb663Lss.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.808Z","timestamp":1788296034808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/arrow-back-Cb663Lss.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"efc4a73173f95506d5faafefb0f67591\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac98e5656b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":437,"size_decoded":801,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (436)","md5":"efc4a73173f95506d5faafefb0f67591","sha1":"e15592c21e62a4dde92df914512fb1773e52d732","sha256":"0f8da5901b1cb33fdb3c15c2371b3bbf7aa7f87f5b2583bcc965329e8e1625d8","sha512":"5143289c6c972f81209e565897f3276b6c4fe13572845b3039f83045e38f67e4d2bd046fb3d44fd86a47bac9c91a3ddb537ed4dddb973f4a6e102bbd30112427","ssdeep":"","tlshash":"14e05c6c118958fcc9635ce0c17599150b0c61d9370bc8d7db0f003a4226ae1d4cb239","first_seen":"2026-08-28T05:09:58.646761Z","last_seen":"2026-09-02T03:21:21.92018Z","times_seen":37,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/api/web/v1/sdui/templates/by-types?h=047236b2706b19b2\u0026country=NO\u0026subdivision=02","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.111Z","timestamp":1788296035111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /api/web/v1/sdui/templates/by-types?h=047236b2706b19b2\u0026country=NO\u0026subdivision=02 HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nContent-Type: application/json\r\nTraceparent: 00-a89ba894a4642ff2db3785be07592c7c-167f36ca2e74beda-00\r\npage-view-id: a89ba894a4642ff2db3785be07592c7c\r\nX-Origin: 1wfqxn.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: public, max-age=2678400, immutable\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nage: 1723\r\nlast-modified: Tue, 01 Sep 2026 20:25:11 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472acb791556b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":384663,"size_decoded":49241,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"458dbb55cfb6e7e9124289e17d22300c","sha1":"683a7345ae1e44f7875542fa2ec27fc240da1c45","sha256":"d9c29de918f3ae0920c3403348ae84a47824e2f049d00450ae2cfed3434aa9f9","sha512":"8113b23a282abc19d4fdf1cbdd9dff9ee3a6c03b6d0ec08e111f966e006a7cf83fcd9b0aa24e09f3ca7d54071598005890f268551ae66777111ab0ff07b4a392","ssdeep":"3072:wVlqfCAWItJcYYt5ocIOPO9DHkmXxpoOU4K:wVlqjWItJcYg5ofpXxpq","tlshash":"1184222bd0844dbb9b928534b8db7602e1397c14d6c9c75d58edc738edc898ab1322e7","first_seen":"2026-09-01T20:26:35.11805Z","last_seen":"2026-09-02T03:21:21.926994Z","times_seen":6,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-BHWjyig2.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.886Z","timestamp":1788296035886,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-BHWjyig2.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"7e2998686cb8614be69fae13504cff1b\"\r\nlast-modified: Tue, 01 Sep 2026 09:52:08 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 39173\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad048f956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9090,"size_decoded":4214,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (7482)","md5":"7e2998686cb8614be69fae13504cff1b","sha1":"db2f19a2a5384c305b0d325a7def4b65552b31de","sha256":"49fe7f40b04e76e6e9f59e81f6480e6f2fda85154f6adc3fb5647d9c0383a1fa","sha512":"db496b1e6bbb6e4bdfa84adc04462e57e8c731e808e04a404d9d91c800338d5f409dcc75ca1a2526918e5cfb51c9567fe8eb0eb0fb638d74c165f57446e34e7a","ssdeep":"192:pe0Af7ZaXiaIHpsiFKGs6eQWqJPQ6JWve2RSR9lNU4Lt57PlTaF9yC:oVaXia8siFKG1zTJYpvHSRFU4L7569yC","tlshash":"7412c5a6e41c35f8027a4c94d89905d266bd4f457008d0dcbe3d6ebe6082f6059bbfbb","first_seen":"2026-09-01T10:21:14.912812Z","last_seen":"2026-09-01T20:54:52.818009Z","times_seen":6,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/more-vertical-VhUVzGPj.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.915Z","timestamp":1788296035915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/more-vertical-VhUVzGPj.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"a302b1125e3dcf70b348c4c8aeb4ee94\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0796356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2546,"size_decoded":1484,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (2545)","md5":"a302b1125e3dcf70b348c4c8aeb4ee94","sha1":"f7c8a09c011ef2328685d8ccd9c7fc8f86d820a2","sha256":"9393881d9e7f02549f1a53a97a1d7b581fc0f84d89a99adf1fba4a59724ff96e","sha512":"f73df2db698bc75ef6b05b42a3f8da0513923eb10a480b345c9d75616ac5ce0cad27f9773e0415c52b5a95452310ddc4b3835e5ac65cdbbb23667ea0df5af241","ssdeep":"","tlshash":"d351b9f8435d29bc91678b14cb199850020a65b7b68f41a0df0fe13b82835e8ff4753d","first_seen":"2026-08-28T05:09:58.79107Z","last_seen":"2026-09-01T20:54:52.818816Z","times_seen":34,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/games-grid-rTxh5MXx.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.962Z","timestamp":1788296035962,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/games-grid-rTxh5MXx.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"f1a90896c067f1909c503c9a9b61a0af\"\r\nlast-modified: Wed, 26 Aug 2026 14:38:18 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 536667\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0ca0d56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6883,"size_decoded":1998,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5249)","md5":"f1a90896c067f1909c503c9a9b61a0af","sha1":"c8f55548adef008c012b6f46af48cce5532e918d","sha256":"794d16ecd2a4b0e4f84c87b1c81de72f445f09597bc37edd1947a395d3d4230d","sha512":"a4a0b9ddc298a8ec39178bf15dbfffd9a1370ded85612cb6f9c752e5483429f098c851bf6c442a788d442159be96b18b3971becac0cc2791b128140fad7f973b","ssdeep":"96:9w9swMcMDSDoZ/RTzUi6Y4vhq8zKO598Wz30DF8mhNkf:cchGDc/Zz8XoIKO59xz30xvhNkf","tlshash":"0de1483a19a7e7354a3a216e9b7bf8dcf1281d390da2059062a5c0d637c5be30167f8c","first_seen":"2026-08-26T23:17:11.943762Z","last_seen":"2026-09-01T20:54:52.819648Z","times_seen":39,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-games-by-category-DknzVsBJ.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.622Z","timestamp":1788296036622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-games-by-category-DknzVsBJ.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"a0e9fd5761f106aec2a172dc375f8766\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:41 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 18114\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad4efe356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1565,"size_decoded":1393,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1564)","md5":"a0e9fd5761f106aec2a172dc375f8766","sha1":"0aaed558269c0509e0cbfaefc3d148ca53a12c12","sha256":"9e53d16acf2b188b2379e566bee5bf3b421383ca20c368ba5eb6284d727671d2","sha512":"e20eebc2607767473c99c5a62996d7e41d082fc6b933e647180e0866d695538fe5c3c31bbae2a41f68c392cd15546c1f72b516a04509ff46fe8633bf63e6f0ad","ssdeep":"","tlshash":"7f31956e5cd6a1f7c1addcdee42850658130512d36b2cec0919f5e9306476dee01bf1d","first_seen":"2026-09-01T20:26:35.010867Z","last_seen":"2026-09-01T20:54:52.820464Z","times_seen":5,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/get-masked-id-BtopzaVp.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.902Z","timestamp":1788296035902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/get-masked-id-BtopzaVp.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 47\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"e9bd7ad5724e1719897ab7463d2afa4c\"\r\nlast-modified: Tue, 31 Mar 2026 07:07:31 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 1809920\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a3472ad0693056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":545,"mime_type":"application/javascript","magic":"ASCII text","md5":"e9bd7ad5724e1719897ab7463d2afa4c","sha1":"0963bd110e52088f4fe198e76ff3b1c05dda4559","sha256":"5cc2102dcd1d849e08a5a45a84d8d197de1e8b2078697fafccef3f9dc3cb38ee","sha512":"dfca451c888f827a42036f55baa0ee05b9241965cbf359dd91f8b5e28cba501ad326f5c017740654f97de3069ac568da1654bb8467c1d84eee52e9600d92ba78","ssdeep":"","tlshash":"de900445140130f401750c5541f5cd70cf44074d73f113d1f4151101470f0c4110d531","first_seen":"2026-01-16T15:26:34.991782Z","last_seen":"2026-09-02T23:44:25.084003Z","times_seen":1488,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/minus-B-yo-KEd.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.991Z","timestamp":1788296035991,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/minus-B-yo-KEd.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"1727375c6ac968b46aba344b62470557\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0fa6156b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":279,"size_decoded":711,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"1727375c6ac968b46aba344b62470557","sha1":"3e060ca633a8d03f1d0c7f94926f137fe4d1bf10","sha256":"1157c67f37befa7935855009396d64cf9b9fe25cf0add666c5d5d61c5be053f3","sha512":"e04cc79100e1d837838be5a344f7b1ba1725229bb94715c94368cb1f188a92d36848a99bbb2f3277743088d1835611f128e43e3bad0f1bf770183e5bc705734e","ssdeep":"","tlshash":"43d02ba901892ff4893ac968c12d18e247554efd234980e4570f563743ab0f4984ff39","first_seen":"2026-08-28T05:09:58.42895Z","last_seen":"2026-09-01T20:54:52.822134Z","times_seen":34,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/x-white-DR6fWqRn.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.500Z","timestamp":1788296036500,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/x-white-DR6fWqRn.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:42:00 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453646\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"b6813a2d7b0723b81ab1df16855705dd\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad42ed756b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":412,"size_decoded":814,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (411)","md5":"b6813a2d7b0723b81ab1df16855705dd","sha1":"3a555c22afa11fefc1a2133e5255b85fff99e20d","sha256":"1d1f342f7c41008710b47298b7edb593f942405eddac781f1298199820c77453","sha512":"68c79f5956f3e6e56e77e3a5b0add670a7353724d074f179cd9d8b97d8168d84cfb8e1ce753274ccd00bc4d19e54eaa5006bd6144d514258392a9b8df66a076c","ssdeep":"","tlshash":"7ee0abcb208518b18b6c0e88e26c6ca6499029dc278e96c69a0a945392e90d0788df6a","first_seen":"2026-08-28T05:09:58.356164Z","last_seen":"2026-09-01T20:54:52.822997Z","times_seen":33,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/seo-text-DAsLASnW.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.595Z","timestamp":1788296036595,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/seo-text-DAsLASnW.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"f7cba86608a0699a202a56c2e44bf1ac\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453646\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad4bfa556b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8532,"size_decoded":3608,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4525)","md5":"f7cba86608a0699a202a56c2e44bf1ac","sha1":"aa98fa54a13e58c7085b7ebd080051e100f2f588","sha256":"f1e5b5e4ce4a30288ea52204f8b36e8c7aae90486eb7fee1734ec759fbfea056","sha512":"f78ac2cfa7f8b14a240b9fce8f40e86cd1145aa35f3cabae30577b182058b729361da5085a838bb5a109aca35ff6389f2fe09926f5a41614a348205d922b9611","ssdeep":"96:vQsm408/iPOTg5h6vFBOaCudN8iFMleb6iqt93Fr11O36/h7j5boWT8:Ysg8/sOTg5hUGGNRFueb6Hr1O3Utbr8","tlshash":"3902d9e1de11e67dd3338859a32f608c720cd86bce97c7e5d6a64b0c5ac9af1124670e","first_seen":"2026-08-28T05:09:58.78463Z","last_seen":"2026-09-01T20:54:52.82381Z","times_seen":32,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/api/translations/v1/frontend/tournaments.common/en-001.json?v=0.4051.0","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.776Z","timestamp":1788296036776,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /api/translations/v1/frontend/tournaments.common/en-001.json?v=0.4051.0 HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nContent-Type: application/json\r\nTraceparent: 00-a89ba894a4642ff2db3785be07592c7c-dda9a017aded24dc-00\r\npage-view-id: a89ba894a4642ff2db3785be07592c7c\r\nX-Origin: 1wfqxn.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T01:18:14.47199Z","times_seen":18246362,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/load-remote-module-nzX6ryby.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.840Z","timestamp":1788296035840,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/load-remote-module-nzX6ryby.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_TLDTEST=MQ==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 25 Aug 2026 10:52:26 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640186\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"911809a3d203bbf9f1ce0a8de60d3946\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0082b56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":869,"size_decoded":1050,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (868)","md5":"911809a3d203bbf9f1ce0a8de60d3946","sha1":"50ef71e172937824fee37918444af8b81942910b","sha256":"1fe4f5ddcb2480d399bbdea26fef41e0534047c60dfa7163dc522d13bd61f87c","sha512":"696f88fbe79c83fd086c5620a3e76517ed9974499c38d390d9a55ee05d5d3c2357050bc6553fe32e26b3d7bd4cc59ef53245bc6882fa84e7ae5a835cee8688b3","ssdeep":"","tlshash":"891186717232e034d3b548d926710650ec391331756a80d3f20d7e26379b4e68acafd5","first_seen":"2026-08-26T15:23:24.325764Z","last_seen":"2026-09-01T20:54:52.824671Z","times_seen":41,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/wallet-DJjcN-gS.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.907Z","timestamp":1788296035907,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/wallet-DJjcN-gS.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:42:00 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"5c4bf9e53602a2db7b972f5aeaf3f6c9\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0694356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":813,"size_decoded":974,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (812)","md5":"5c4bf9e53602a2db7b972f5aeaf3f6c9","sha1":"01d21c35d1f4b4cd771f8a0bff530773534ca771","sha256":"85915345ea03b9480c26e23a144a6c67f43f34cac817a59a88c1bcfda075f07d","sha512":"59f09ba07c4c9384cec9e164275872ef996ec1a7f0c65d7e510355acff3470405b93d9558e28051580107ab56d1469600e3cb378a5a3d27028a9cc986237bf53","ssdeep":"","tlshash":"8c01abbcd649159d5b1b83788b3c78f0931d14bc331a46909a5f22b1a04a5b4ca8f860","first_seen":"2026-08-28T05:09:58.590439Z","last_seen":"2026-09-01T20:54:52.825491Z","times_seen":34,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/modal-footer-BqYuj3k_.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.943Z","timestamp":1788296035943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/modal-footer-BqYuj3k_.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"4a6ebc568d481239626a0183531872d1\"\r\nlast-modified: Mon, 31 Aug 2026 08:29:25 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 130828\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0a9d856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1274,"size_decoded":1139,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (802)","md5":"4a6ebc568d481239626a0183531872d1","sha1":"ea93d717b8343c0f7062b3aa2b412d3bd55ba8bc","sha256":"fcc8eff667c0329301d9443c2bab9a1574908d971b33a104e6058b79a02b96bf","sha512":"62eb00942bcee6268ff51ca56945c2fb12df96a1ac22a01e0586c489314ab955b3ef22eb10b12e5ba12a2f38cba6673d4e395f3b3b3021714d10da4fc13306b9","ssdeep":"","tlshash":"3121e2497ff991fc094f5087e63b9ed89595a4716a81b8e1d838c43e0bcf9fb40c6a44","first_seen":"2026-09-01T10:21:14.711928Z","last_seen":"2026-09-01T20:54:52.826309Z","times_seen":6,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/setup-window-open-interceptor-BOxXEdUi.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.858Z","timestamp":1788296034858,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/setup-window-open-interceptor-BOxXEdUi.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"8c19e2df9aa65fa322866c1adc60c9fe\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:41 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 18116\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca5f8956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2077,"size_decoded":1719,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2076)","md5":"8c19e2df9aa65fa322866c1adc60c9fe","sha1":"e1bfd60b4daf05be2cd4e42a88736f8d4c2977f0","sha256":"808915bb81ccbbd428ecb126f9299d1ea7cc594b50be0da3ad490bec8d16e889","sha512":"07460cdab3fbb2fca6cba4f3bcf53748fa28711bd82e47053726c468137343aee1d625f78d73fd3452603c27ccb1c4021ca66a4ffd0be153ba737646c9cf8ae2","ssdeep":"","tlshash":"3441d6acb5b5a23c013859d8f4b492718408abb9b976d8d0f2de0f2c62cfdc38122f15","first_seen":"2026-09-01T20:26:35.068131Z","last_seen":"2026-09-02T03:21:21.896897Z","times_seen":6,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-BSzd24BC.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.892Z","timestamp":1788296035892,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-BSzd24BC.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"ea85d026608b3d83bd67603851e32e8b\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 18116\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0590756b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1555,"size_decoded":1303,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (998)","md5":"ea85d026608b3d83bd67603851e32e8b","sha1":"2022935c3f775f8ef2153dcec92b03f93f8c30dc","sha256":"0be8fca00c6bb867727062f9c4b179848cc0465b4378b6b6b897a6b67fbcc10d","sha512":"a1f39d6f6ed1674b729cb094d0ce9b6737ffe2e0006af26491b2c34845c83bcbba66035235779b5399f7654de1f3d3e333329e74cadc0f0019aa144577fe7454","ssdeep":"","tlshash":"b5314052884d5cbe117c4cf8fc1971a21aa847dab450e88efc7c0e7923929c4911ffb2","first_seen":"2026-09-01T20:26:35.147245Z","last_seen":"2026-09-01T20:54:52.828468Z","times_seen":5,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/language-picker-BkRm3gTG.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.489Z","timestamp":1788296036489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/language-picker-BkRm3gTG.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"0e32097da7d006296b9f57da66fdf7e1\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 18114\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad41ec356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2953,"size_decoded":1829,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2952)","md5":"0e32097da7d006296b9f57da66fdf7e1","sha1":"6bc78fff79770c7b0721d140093cc6a6f5f6fcbf","sha256":"dd245e6783cb02d705284114e111239a807db7f0f40c17a78d3a5b26b20a9d1d","sha512":"7b790b095104facfa1540d9f8bbdfad56357e27ce2946d3713353991f4503ebbfeab07e467c78f3042abb4271893cc1618dc040b9eebef31127626f5f9ac1850","ssdeep":"","tlshash":"f3513417dd1489b206aaccf6f027e2b1857756a393c4cbb5d1ef033a8b982bdc456407","first_seen":"2026-09-01T20:26:35.041886Z","last_seen":"2026-09-01T20:54:52.829252Z","times_seen":5,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bundlecda.com/static/1.txt?1788296034659","fqdn":"bundlecda.com","domain":"bundlecda.com","tld":"com"},"ip":{"addr":"194.67.193.4","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.827Z","timestamp":1788296034827,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bundlecda.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 16:04:24 GMT","end":"Fri, 23 Oct 2026 17:04:06 GMT"},"fingerprint":{"sha1":"C9:4D:CA:47:5B:41:EC:62:BF:F7:B7:7A:43:9B:22:DF:06:18:13:A5","sha256":"BB:8D:39:1D:AA:FA:1D:7C:89:13:18:08:1E:0C:73:C9:1B:D1:0E:55:F6:86:98:18:BB:12:E5:FA:31:2B:D7:7F"}}},"request":{"raw":"GET /static/1.txt?1788296034659 HTTP/1.1\r\nHost: bundlecda.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nOrigin: https://1wfqxn.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: text/plain\r\ncontent-length: 2\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\nexpires: 0\r\npragma: no-cache\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nserver-timing: cf-cache;desc=\"DYNAMIC\"\r\ncf-ray: a3472aca4d305695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":397,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"49f68a5c8493ec2c0bf489821c21fc3b","sha1":"c22b5f9178342609428d6f51b2c5af4c0bde6a42","sha256":"8f434346648f6b96df89dda901c5176b10a6d83961dd3c1ac88b59b2dc327aa4","sha512":"150a14ed5bea6cc731cf86c41566ac427a8db48ef1b9fd626664b3bfbb99071fa4c922f33dde38719b8c8354e2b7ab9d77e0e67fc12843920a712e73d558e197","ssdeep":"","tlshash":"c710000300000000000000000000000000000000000000000000000000000000000000","first_seen":"2023-03-07T16:51:11Z","last_seen":"2026-09-02T23:44:25.212109Z","times_seen":610,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/list-item-BhzgBJ-_.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.849Z","timestamp":1788296034849,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/list-item-BhzgBJ-_.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"2451e6bd119d5b75de3424f15c17a4c7\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:26 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640185\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca5f7e56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7989,"size_decoded":2726,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5169)","md5":"2451e6bd119d5b75de3424f15c17a4c7","sha1":"c7dabfd2235333f9b58b36d69764a00eb9d22b98","sha256":"3f71896b6aa850239245ebb9e769385fb56e6afd0c4088fe175e45215ddbfc72","sha512":"fa4a0ace62848ed22be99716f26c6592d9bb19f832ac021d4bae77972c8504cf609fc7d5e39de31fbbce4161e86ba83d7b686218e0246ad97dd110f811730bb5","ssdeep":"96:oBWwOs/hoTw7tPT8ngLpKJwvSNt5PYbPPJb7nUpUb0n:oIwf/hoU7tPcgLpKESNt5Qb5bDUpUb0n","tlshash":"d3f1405f9721ba7cc9e6b823a21f10b85a18e46bc97405f7c5150f3e43cb7e242b1b48","first_seen":"2026-08-26T15:23:24.18007Z","last_seen":"2026-09-02T03:21:21.869158Z","times_seen":43,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":56,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/badge-base-CA8XBWn-.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.865Z","timestamp":1788296035865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/badge-base-CA8XBWn-.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"46cd78ad3259c72326fd3b8b4af98f41\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:25 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640186\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad028a856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6474,"size_decoded":2021,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4347)","md5":"46cd78ad3259c72326fd3b8b4af98f41","sha1":"daaedf1f672f57f4d2e6eec8cea757d54b210789","sha256":"5753c876884819c77116707696e51e0f5f9bd7721573d378f25bf2c6857ebc1f","sha512":"15824fc9234e13ff8186360b48deb3ad66bda93b292aa92ddb85f5394d3ae4298df0d5ab753062deddd92530e2509689c8ef7418f97d2ad71ac2ff0638109910","ssdeep":"96:tyRoUNb5mfP2y0djbeki0JSKah/VQjGR04P:tyDbQOyijqKah/VQaP","tlshash":"c0d1ef5af210d579a7323ddabd18a0b8c044f4fdc9281ed9f1611c1d1ac2efb6247a8b","first_seen":"2026-08-26T15:23:23.891924Z","last_seen":"2026-09-01T20:54:52.8317Z","times_seen":40,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-D-1au1dZ.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.905Z","timestamp":1788296035905,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-D-1au1dZ.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"ebe5b85b6438003c30c9ac4cee6239dd\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 18116\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0693756b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":255860,"size_decoded":64381,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (44971)","md5":"ebe5b85b6438003c30c9ac4cee6239dd","sha1":"5e3b43d3441e34b028305f36b35d456879452c67","sha256":"0136fdeb7e92e3ef8212e21b03abdd66ee01341cab22ab479e58bd753bca5871","sha512":"ad60b24919f202f5ec879ae4aa5206c63f24e768154dd137b0d1d4dc1ebe53bab852c99129d04e1a371b58eb7eca61b34603dac843aeafd7865d1647720a8bc2","ssdeep":"3072:5CNEv+p/NywPMklC1gpGgGMHZEH5lbVj9bdf0NX:5C+vKNywPMklC1gpGgGMHWblYX","tlshash":"92444c91bf20aa7c9733640cd7491054a11d7bacda0699e6ba7e257f03cbff0c122b59","first_seen":"2026-09-01T20:26:35.130038Z","last_seen":"2026-09-01T20:54:52.832571Z","times_seen":5,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/avatar-DvuRI4_o.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.932Z","timestamp":1788296035932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/avatar-DvuRI4_o.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"04f3de1f6b7d8fcf7769566c3ea65779\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad099b956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3087,"size_decoded":1788,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1597)","md5":"04f3de1f6b7d8fcf7769566c3ea65779","sha1":"6ac1ebf7b4fa98e2181e529542fa5d95f1e97e3a","sha256":"287522507ea8f0a008420aa712e2bd61fb663b0c45a7e3021ae86c14b912170e","sha512":"90917a531c22e621a5c46c828c1298e4235672f17a8643a0eaaf3c40746015b7de6b415b07f1dbeac1bf3a2841aa98384fc734e01b5fbe2d5e33b197f2f22274","ssdeep":"","tlshash":"c55140138d154674aa1a9881ce28fbc4908d5cb6e7213551febb8e774fc4af7305a182","first_seen":"2026-08-28T05:09:58.724538Z","last_seen":"2026-09-01T20:54:52.833341Z","times_seen":34,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-countdown-B7uO1MDT.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.833Z","timestamp":1788296034833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-countdown-B7uO1MDT.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"387afe35b9f980000efa2a339de76298\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640185\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca5f6d56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1112,"size_decoded":1072,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1111)","md5":"387afe35b9f980000efa2a339de76298","sha1":"eeea0bb5f6974d41a18cbebebcffb6598861bc5c","sha256":"ed9885cddd2143bcdac3e2fe14a69458caa5d81bded2d7d29466623720b1a62f","sha512":"380aa52f45dd822b7c975c60679775ef868b6cdd4795ef7d25f7c946a957a28e6b612612c414c374aa13917ca1da240e4828f4c43f38ef741b3607c8fd655ecb","ssdeep":"","tlshash":"1021f0febb3ad0b1473985579620432052050b44308399efa24b4a1fcacbed9d7ea45a","first_seen":"2026-08-26T15:23:24.305197Z","last_seen":"2026-09-02T03:21:21.886203Z","times_seen":43,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/pulse-B5opmD8d.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.541Z","timestamp":1788296036541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/pulse-B5opmD8d.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"893e78d190b84828ddb6da4449cddc1f\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:26 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640186\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad46f3256b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1928,"size_decoded":1413,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1077)","md5":"893e78d190b84828ddb6da4449cddc1f","sha1":"13653145e293c226bb83ab71682151b4e6237e4a","sha256":"77515ac252e0824839a07cc69f4556652cac36714954a4c3d6bf9b75c3b6126e","sha512":"a5a3732290a6702d0b6a4de4e2d047f8f70af04f9be049e02babb59ea3505761302c87803c092bf048509c0363912a32ba9fa65f6704be8e5ce4358deeeae960","ssdeep":"","tlshash":"21412144e79d87e5b20a20cae56cdae0a07c542d57333ea983fd65bd0fd2ac481bd744","first_seen":"2026-08-26T15:23:24.07128Z","last_seen":"2026-09-01T20:54:52.835015Z","times_seen":34,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d21deilz814qgl.cloudfront.net/244db937c1233f876bcd66-800x34420.webp","fqdn":"d21deilz814qgl.cloudfront.net","domain":"d21deilz814qgl.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.238.66","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:54:03.236Z","timestamp":1788296043236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /244db937c1233f876bcd66-800x34420.webp HTTP/1.1\r\nHost: d21deilz814qgl.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\ncontent-length: 87664\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Tue, 04 Aug 2026 10:43:41 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-disposition: inline\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 01 Sep 2026 01:53:51 GMT\r\netag: \"9ef38ff9e1b3ae0a0a2ca699d8ecd514\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nage: 68413\r\nvia: 1.1 183a9e2085d5a9255c6d0724cfd9ec10.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: -UvXiUy1NRc_g9mr5rB0H-OLQ_RhzNKABGfZEHC-_ssCS5CBIHlyEQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":87664,"size_decoded":88229,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9ef38ff9e1b3ae0a0a2ca699d8ecd514","sha1":"756f2204dce3a9112c9f5a9663f9180865633031","sha256":"9a282c9f7410b2956195ee6029757e8ac0fc640fa85701da27eb7181b8796d1f","sha512":"82c33f49ae0d0fb097daa9476efca05c55e5ff2ef719d1df77399d93aeb72e13732e61c635b00770a26a7f2f91605bb54b6823e7dc6c6c78bcaf4875d76f3341","ssdeep":"1536:KyOafSPE6CAv1Fbn7XblXsD+noLR/msqu3MA6KCGWxHyFurYILsmDxYiEf06uuXn:KyJfSsAvbl5oFd7CG6S8cILsexYXLb","tlshash":"f8831230da8b44e9c35112eb7681f77e6ee6f89ffcf9d95e32a758653210a6ec810410","first_seen":"2026-08-06T08:10:47.366298Z","last_seen":"2026-09-01T20:54:52.835788Z","times_seen":42,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":15,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/main-W3tAz5ZB.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.588Z","timestamp":1788296034588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/main-W3tAz5ZB.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; cda_status=pass\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"d96ea8d1c7dec1f31f75e507a2bbb8a8\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:41 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 18116\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac82c7f56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":166045,"size_decoded":42626,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (33709)","md5":"d96ea8d1c7dec1f31f75e507a2bbb8a8","sha1":"97388b10d9104d1cddacce2c04e73cd9d40d0e0a","sha256":"2e9331bbe14a6cc5a7af079839fe2bcfa2e950314c4edc102c3eaccbd85d8af0","sha512":"d3f141e1bd10394c7d1f3777af57d1a457ac51e42f42d16a3352e2521cb8831ba8d702052094e688d33a8f12fcf15f35d62977dc2306edaf87bba1c266f954fb","ssdeep":"1536:tcVNQ4BM+kk16KPltLbh7UwyY1TfeEkkF4hWscREesFieCDsduatOJJ0:t2/HLN7UwyY1TfeEkkGIHGesFie60","tlshash":"04f31930219a6469c1f3cce3b1dd2a133d245565b05ac012e62d1de85efbc67a3e6f3a","first_seen":"2026-09-01T20:26:35.016523Z","last_seen":"2026-09-01T20:54:52.604681Z","times_seen":5,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/checkbox-D9zMaGaO.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.893Z","timestamp":1788296034893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/checkbox-D9zMaGaO.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"14c9fa136ad8ace418bc68a850fd67c1\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca8fd256b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5181,"size_decoded":2343,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3169)","md5":"14c9fa136ad8ace418bc68a850fd67c1","sha1":"aed55963420d9f714f1c20abd8cd52b8deff7eec","sha256":"d8112af36e1d4d151f07ecaec7c746f5850a573a0864bf39e9778b1bd4096391","sha512":"1cc58264466e8f31b8245a22540e3314976159bd48a292a9d837e67f1460d8a3ecf8bf8f5155532505ce334d946e2d13777acb3f8bb917295de22b6a79b591b5","ssdeep":"48:+K+JPSZLg1m4OBjsXYl9l9KTCgqIyssPvN5c5rD+NrbvIbvBzerxsexeGhSDner1:zISZLg1mjFsXY1nUu/Egx+GDK8VzQFY","tlshash":"60b1217aad11a47a6d37753a673cb24b4539201a8f221e7dd3d4c0394ade9da730ba0c","first_seen":"2026-08-28T05:09:58.360548Z","last_seen":"2026-09-01T20:54:52.836657Z","times_seen":36,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-B6UQ53dP.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.814Z","timestamp":1788296035814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-B6UQ53dP.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_TLDTEST=MQ==\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"4657ef109e65401ccb2d1e1ece69e8fc\"\r\nlast-modified: Mon, 31 Aug 2026 08:29:24 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nage: 130829\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472acfdfce56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4454,"size_decoded":2488,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3547)","md5":"4657ef109e65401ccb2d1e1ece69e8fc","sha1":"84a8c3466028f9d8741e1dfc2d12e3b360affcab","sha256":"3f7dc66acccf5785fdba0cfabc14449463547c302f4c8dfaca57c5c2583be578","sha512":"af2df908ed8e9218f1f812e77525b24b7c7037b3a7b14b2aae99b480f057e62e71cf6e206eef4123c265ba64df3c777231bcaea008cbe50a85f0899d784f80a6","ssdeep":"96:jUaTyQUPaTbjPbbXNbu4DF9f8MMNJV01+BIUdt1jNMh6Ps1in2aBb8/r4B:o8gajFasuMMNJV013UdLy6kovb8/MB","tlshash":"8a91a31b96648db901ad8ecdfb55247148f48bd2f134d8d5f26c4dbd16804a8c06bf6e","first_seen":"2026-09-01T10:21:13.684232Z","last_seen":"2026-09-01T20:54:52.837455Z","times_seen":6,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/star-BnHFF_Q9.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.937Z","timestamp":1788296035937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/star-BnHFF_Q9.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"44dea7c952b0a3abaad80ffa87f645c3\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad099c756b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":675,"size_decoded":934,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (674)","md5":"44dea7c952b0a3abaad80ffa87f645c3","sha1":"5d97238b33c0c340c375586f8c6f4987120c727d","sha256":"6cb96d2060e61188b590580fa932ebb42fc29c1c35c9644b3c21b520a3bb0472","sha512":"91a99bc28b56425199c952b72eea0ed5f18f77fbddf6319f5bc7041cec8237624ce6c18336cd574db8c78910d9a1f26f94ce42228df25353f8ee5d0b62dbe8a4","ssdeep":"","tlshash":"e801f9e614685abc8d2ad649c7379620234ee8bd374ac8c29f4fd37a81c74a0e507d60","first_seen":"2026-08-28T05:09:58.45348Z","last_seen":"2026-09-01T20:54:52.838291Z","times_seen":34,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/games-section-widget-DwnYt60X.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.547Z","timestamp":1788296036547,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/games-section-widget-DwnYt60X.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"104d569124fae2202987b975a3131a52\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nage: 18114\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad46f4256b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6672,"size_decoded":3605,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5826)","md5":"104d569124fae2202987b975a3131a52","sha1":"87546c7ff846cb13454e68327f4e495718e9d694","sha256":"227db725421b7f0395939d8c393e0d9fe2f553370ef1174f1fca8a694b0cf002","sha512":"cd6e035ce4b0ab0d13073a3d421ede5bd69ea02ed4a7d50a1bb7c583fb3bb57aa8d1253c291c112842ada52b34342f25d7131812287d69899de1a0374ddd9747","ssdeep":"192:VddwpaiJaWLtsgxQw9cu28ygFrEWWQ0Rmwm:VdWBLtHp9cL8ZOWW9Lm","tlshash":"5ed18346ea5459b284279dfee025e0b0ab3505a78799dee0d0ffcb710b9d9b4c01e60f","first_seen":"2026-09-01T20:26:35.096439Z","last_seen":"2026-09-01T20:54:52.839519Z","times_seen":5,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/plugin-feature-flags-CAskxUBy.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.795Z","timestamp":1788296034795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/plugin-feature-flags-CAskxUBy.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"afb98db2c2e4e4c4f9cb9edcca3ed977\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 453648\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac97e2e56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67392,"size_decoded":23791,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38691)","md5":"afb98db2c2e4e4c4f9cb9edcca3ed977","sha1":"a8268e88c62ca202e1edae604116b28bae5e2f62","sha256":"89ba8e8aebb7855bf346ead07a6cdcfe50a8e763cfb392b430eeef1251854d54","sha512":"95a89783e466811942a9019fe066558a52d9da59f2494163893ad5bd537e4aae4835833e4a91d200858489aebbf5ab655b9237929e26fb73e074e257d320705b","ssdeep":"1536:+zPdMxdVb8e10PfgdSUJ2nYvr20JnhwlXNxuhcOPXn:2MxdVb8FfgdS+v51hoXNxuhcOvn","tlshash":"b2634a40e3b0e13556b319d8f62d81a483385d64b41988f8f27e4e2916c7dd1b6abf3d","first_seen":"2026-08-28T05:09:58.596178Z","last_seen":"2026-09-02T03:21:21.918237Z","times_seen":37,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/plain/favicons/android-chrome-512x512-v3.png","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.156Z","timestamp":1788296035156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/plain/favicons/android-chrome-512x512-v3.png HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=UzbO4kJKVGsSmLPyyj5XAYqOnWZzVvznocTqp.dXqkM-1788296035.1265976-1.0.1.1-9QKZzWbRswoUXs4uuqKUOBHPJV5V.IB1plP6JrPyWUY2S38v2__sns1JPXzKBMF3br9Gep36lPg9gx.s48rMSPm.1KU7WhvE8fJOVftmQH1JiT29Hj07sq_hmKN19wvaut24LuY42GsHqficIZjhtQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 22 Sep 2025 16:18:20 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cache-status: HIT\r\ncf-polished: webp_bigger\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:85,h2pri\r\nage: 5173206\r\ncf-cache-status: HIT\r\netag: W/\"26760007c70c3a40cbdf8e981b13146d\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472acbb97d56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6722,"size_decoded":7313,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"752ff846470e9816667d49a50022ce87","sha1":"68b6c3a93a79702b3d43d2b3fe9c00417be36fd7","sha256":"0897987ad9d91201791748793b00e084fc2401318f1d990eff7d99117fab8000","sha512":"e168de7620d25ba497a5d18a9623e21d20ce91601d3695c31918ba0fa51d1c9558f0954aef3e64fe1b5b56d2bc38bdd321667bf6fe0898bc9adbfd8bc92c5048","ssdeep":"192:ygWSKUiK7EqYZDBhcrqdONuw4v1jU+gd9V1:yJePhMoqdOEbjz2r","tlshash":"63d18df9174cd5b38523baa7f55ca69474d2164381236eb3bc9201f50e7ca10b2be18d","first_seen":"2025-07-10T00:15:29.539976Z","last_seen":"2026-09-02T23:44:25.076273Z","times_seen":632,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/page-heading-D99oT0ZS.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.938Z","timestamp":1788296035938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/page-heading-D99oT0ZS.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"7101d07223512de7d451c765314d40f8\"\r\nlast-modified: Mon, 31 Aug 2026 14:33:49 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nage: 108754\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad099cb56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5791,"size_decoded":2290,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2974)","md5":"7101d07223512de7d451c765314d40f8","sha1":"9633baee484ab514e4b28fa81eb1b953e9b96d9b","sha256":"41c21f2cbbd7dc6cf680f1b290d7a99e620face1da2d2189933434cf189e8b9f","sha512":"8912f18f47824ebf1eccd7924534b53b985adf103448fa600d627cc0cc1fe929014a5d42210e3b67119fbb5f9438e8e501d74ffe06ff5b965e50fe338215cb29","ssdeep":"48:S2FuvK1mv3y7wCCxUPXxpSp7xGLyjyzzoukyoGdGiX3QdBI3V3o8GAgSkZH3QIjl:3+v8wUxI7Qtp3Qd+tt43Q6ibaxP","tlshash":"74c18449aa24ab38fe322c503769621db25cb81a4a9547fce5f64f5b07c39f1c721f05","first_seen":"2026-09-01T10:21:14.513983Z","last_seen":"2026-09-01T20:54:52.842461Z","times_seen":6,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-DRg7FJAv.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.943Z","timestamp":1788296035943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-DRg7FJAv.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 23 Jul 2026 14:54:23 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 2116730\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"ef83be97c8d8cded7efb9d0b2f7edf0e\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0a9d556b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":149,"size_decoded":630,"mime_type":"application/javascript","magic":"ASCII text","md5":"ef83be97c8d8cded7efb9d0b2f7edf0e","sha1":"4c9c284a7eeca8d6fc91b64046a2be5d02ec63a9","sha256":"4f9568000853130a37e55ce7c0692dfac5b2dfc11ed8a4b034188d0f87aacc60","sha512":"d11d3b854b3eb8d49cab81246c3eaec2ef19ef855fa8ec0a5424051c96c66c759f5481cee48c41e1a8e0b9a1869334994f79cd6750af651f1c79a5274e203fd7","ssdeep":"","tlshash":"e2c02b3118ad2ced3cc105ccf105407d4e0a25cf619061c2ee8ed303d8d7014643e820","first_seen":"2026-02-13T00:10:19.580155Z","last_seen":"2026-09-02T23:44:25.244707Z","times_seen":1020,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/seo-content-5XkGY-Vd.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.977Z","timestamp":1788296035977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/seo-content-5XkGY-Vd.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"ee61197e67e23900d0481b2d445bc7ac\"\r\nlast-modified: Wed, 26 Aug 2026 14:38:19 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 536667\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0da3c56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9091,"size_decoded":2510,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7730)","md5":"ee61197e67e23900d0481b2d445bc7ac","sha1":"070cbf66fb9db66a066ac1230157ea0a413faee3","sha256":"937e2a450e66448594395fcf09fc4ed2448a7e0a5b4749f5eb6eeb10f3cd097a","sha512":"ee25632e7547f1a69195c9f07f92db780f18f0b7575d8827103f0aa3ab9cc3cf9e7231c4fd233ef98d6c66f778fa7257ebeb2714dd497c0352662ac716a112c7","ssdeep":"192:gD9SJvSFgDr87TTWv+vJvIwI8AzviIPtnb+o3cTYbub4+Pk9+PkL+PkU+Pkg6CNI:G4FSFer4TTW2RwwI/zXPtnb+ocTY60+b","tlshash":"9012dd74bf31b068ebb34d59772ab85ca529fd1a4d4543fcd1ae460c87cbea20380b16","first_seen":"2026-08-26T23:17:12.008334Z","last_seen":"2026-09-01T20:54:52.844216Z","times_seen":39,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/game-history-section-lobby-DqWJpphc.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.585Z","timestamp":1788296036585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/game-history-section-lobby-DqWJpphc.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"b32704700ed7eb5c86d09352788e0f61\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nage: 18114\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad4af9656b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1675,"size_decoded":1288,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1674)","md5":"b32704700ed7eb5c86d09352788e0f61","sha1":"0969789f9cea836b198f97c1af5cda3aa327227f","sha256":"6e7323ae608c03564ecf226fbac7866780e784fd9fbeb4aace838382cf9c45cf","sha512":"e9ecf18a632bf1206d7229af84c7eb3de7eea5764d1daa3b00309c120d9bb086232560813535cc433779e77678513b8b42d477d77fb5d186d0e00a6b249c34c9","ssdeep":"","tlshash":"54317867d5505ab2046accf6e011f531e93786a303c0ebb9c8ef87750fa55b5c91940b","first_seen":"2026-09-01T20:26:35.065477Z","last_seen":"2026-09-01T20:54:52.845039Z","times_seen":5,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d21deilz814qgl.cloudfront.net/efd29643c7f1cee0bff064-800x3443.webp","fqdn":"d21deilz814qgl.cloudfront.net","domain":"d21deilz814qgl.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.238.66","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:54:03.239Z","timestamp":1788296043239,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /efd29643c7f1cee0bff064-800x3443.webp HTTP/1.1\r\nHost: d21deilz814qgl.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\ncontent-length: 58940\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Tue, 25 Aug 2026 09:10:21 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-disposition: inline\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 01 Sep 2026 10:00:03 GMT\r\netag: \"d261c21040f6e8d6aaff2866a4cdb607\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nage: 48928\r\nvia: 1.1 183a9e2085d5a9255c6d0724cfd9ec10.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: t_xLS3Z-LeHd4rvCWjc3KgGIyTZWXmhXe9n_k3aRPgS1TcHMqsHi0Q==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":58940,"size_decoded":59505,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d261c21040f6e8d6aaff2866a4cdb607","sha1":"36d172dc2f5be5292af4f7d7cb7990123358f8fc","sha256":"b55b157a9c01f17167d72f0f4c5da16304c16cfa3b6b766905c0c5f139e79b4f","sha512":"bd1f099e8d20665973b80d4d8a35eae9bb0cee154ea71e561281141e755dbf29546436c3102955b46ef6ee152b55bc3b58e3069365b754bea537b492f4d1cbcf","ssdeep":"1536:oNhzWN7wQnqXAXWEPeS+4Y8IW2lSxiyxdu5A3yAf1rxjCu:yzWtwQFWEPeS+4IlS8yxdmsyShl","tlshash":"7443022b11798d8138f6a7d95417c83bd760b7aaed0284f1d90870a3e6e1b362d413df","first_seen":"2026-09-01T20:45:30.816534Z","last_seen":"2026-09-01T20:54:52.845838Z","times_seen":2,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":16,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/cdp-html-content-z6IymT6M.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.855Z","timestamp":1788296035855,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/cdp-html-content-z6IymT6M.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"970031dff2fbfd4d9529602ac2edecae\"\r\nlast-modified: Wed, 26 Aug 2026 14:38:17 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 536667\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0187856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3470,"size_decoded":1683,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2396)","md5":"970031dff2fbfd4d9529602ac2edecae","sha1":"3fa6c6cad982d9bc367c71295be4f52ad84589d1","sha256":"5a78ceb6bbe6f9f0168d9769b4a3d95011934cb5c1bba11321f6c3071d96aa33","sha512":"a1e39a8d682d8b4404701818151740c92536b0dce016ba07ff8c1404964f8d09a05cbda167b09851185150347dd151d8517ca6fee083bf6cb1437ee309b51bba","ssdeep":"","tlshash":"1e61bd6dff34e0a8e6720cd6bb59316ee404e43b1c518afdd1964a0e9ac7ba25300f17","first_seen":"2026-08-26T23:17:12.086963Z","last_seen":"2026-09-01T20:54:52.847662Z","times_seen":39,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-B0yGsZwp.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.858Z","timestamp":1788296035858,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-B0yGsZwp.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"a1ba044e5b2a5aaa374b2bb838580420\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 18116\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad0188556b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33175,"size_decoded":11198,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17322)","md5":"a1ba044e5b2a5aaa374b2bb838580420","sha1":"16e108010ef7e85d06eb2ea94f7dde45d7010c32","sha256":"913cdb7cab374f19dbbf3119c9b4e61374548fe3d6c7bb57fe758e886872e74f","sha512":"00f176f96f5a01273613aff54f3e09b534cb2187f1f138fb05d7e07208d4320fa2eb9945965c567071e87383ee5be20881ba45bb2d08564efa8ec72ce0683a6f","ssdeep":"768:u1qK2D1vK0plmRNSwHiS6h+82L25jUMdTrUB8i7GPwDFektw1DZHihFMsRuQhaEg:u330plm0dPZzQhaEha6dmjVy9GEkCkx","tlshash":"1ce24ac1e13079791bb7c9dbb52514426454da99f440c8e8f23e1ef817dbec0a2a3f6a","first_seen":"2026-09-01T20:26:35.11157Z","last_seen":"2026-09-01T20:54:52.848557Z","times_seen":5,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"optimize.v3.bundlecdn.com/unsafe/quality/plain/https://v3.bundlecdn.com/b02632/plain/route/casino.svg","fqdn":"optimize.v3.bundlecdn.com","domain":"bundlecdn.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.778Z","timestamp":1788296036778,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /unsafe/quality/plain/https://v3.bundlecdn.com/b02632/plain/route/casino.svg HTTP/1.1\r\nHost: optimize.v3.bundlecdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nOrigin: https://1wfqxn.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T01:18:14.47199Z","times_seen":18246362,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/api/web/v2/tracker","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:54:09.660Z","timestamp":1788296049660,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"POST /api/web/v2/tracker HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 18724\r\nReferer: https://1wfqxn.life/\r\nOrigin: https://1wfqxn.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4ODI5NjA0MzEyNyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMTQlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=; click_id=fc118dc3-52d1-4272-a893-34b2875f81dc; visitor-id=f8b6e427-3bc5-4fed-9652-9a27a2c2250d; should_restore_hash=false; _gcl_au=1.1.755945686.1788296043; _ga_548949LWLW=GS2.1.s1788296043$o1$g0$t1788296043$j60$l0$h0; _ga=GA1.1.203192958.1788296043\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18724,"data":"{\"events\":[{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"boot\",\"type\":\"finish\",\"name\":\"success\",\"params\":[\"index\",2418,\"booted\"],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.547Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app-critical-event\",\"name\":\"event_fulfilled\",\"message\":\"ce-auth-buttons-rendered\",\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.797Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"api\",\"name\":\"request\",\"params\":[\"/api/FREE-MONEY/v1-bonus-pwa-amount\",1.154,200],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.838Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"api\",\"name\":\"request\",\"params\":[\"/api/translations/v1\",1.118,200],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.839Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"api\",\"name\":\"request\",\"params\":[\"/api/USER-SERVICE-API/api-v3-oauth-config\",1.12,200],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.839Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"api\",\"name\":\"request\",\"params\":[\"/api/translations/v1\",0.608,200],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.841Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"api\",\"name\":\"request\",\"params\":[\"/api/MS-SMALL-THINGS/support-chat-type\",0.596,200],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.843Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"api\",\"name\":\"request\",\"params\":[\"/api/PROXY-SERVICE-CDP/v1-landings-ListLandingsInfo\",0.472,200],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.844Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"api\",\"name\":\"request\",\"params\":[\"/api/MS-BONUS-BALANCES/v3-bonus-list\",0.473,200],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.848Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"api\",\"name\":\"request\",\"params\":[\"/api/translations/v1\",0.19,200],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.858Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"api\",\"name\":\"request\",\"params\":[\"/api/translations/v1\",0.127,200],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.863Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"api\",\"name\":\"request\",\"params\":[\"/api/translations/v1\",0.351,200],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.864Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app-critical-event\",\"name\":\"event_start\",\"message\":\"ce-sidebar-profile-rendered\",\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.867Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app-critical-event\",\"name\":\"event_fulfilled\",\"message\":\"ce-sidebar-profile-rendered\",\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.867Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"api\",\"name\":\"request\",\"params\":[\"/api/translations/v1\",0.321,200],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.879Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"api\",\"name\":\"request\",\"params\":[\"/api/translations/v1\",0.121,200],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.880Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"api\",\"name\":\"request\",\"params\":[\"/api/MS-SMALL-THINGS/web-v2-banners\",0.229,200],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:56.883Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"api\",\"name\":\"request\",\"params\":[\"/api/translations/v1\",0.223,200],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:57.021Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"api\",\"name\":\"request\",\"params\":[\"/api/FREE-MONEY/v2-raffle-getCurrent\",0.386,200],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:57.024Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"api\",\"name\":\"request\",\"params\":[\"/api/CASINO-3/bff-v0-categories\",0.296,200],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:57.026Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"api\",\"name\":\"request\",\"params\":[\"/api/CASINO-3/bff-v0-categories\",0.304,200],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:57.032Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"api\",\"name\":\"request\",\"params\":[\"/api/CASINO-3/bff-v0-categories-withGames\",0.327,200],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:57.033Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"api\",\"name\":\"request\",\"params\":[\"/api/CASINO-3/bff-v0-categories\",0.304,200],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:57.034Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"api\",\"name\":\"request\",\"params\":[\"/api/CASINO-3/bff-v0-categories\",0.619,200],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:57.348Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"api\",\"name\":\"request\",\"params\":[\"/api/translations/v1\",0.311,200],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:57.349Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"cdn-load-tracker\",\"name\":\"cdn_js_boot_total\",\"params\":[1261167,230],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:58.787Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"cdn-load-tracker\",\"name\":\"cdn_static_session_status\",\"params\":[\"js\",\"s\",\"HIT\",22,38.5],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:58.788Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"cdn-load-tracker\",\"name\":\"cdn_static_session_status\",\"params\":[\"font\",\"s\",\"HIT\",4,24],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:58.788Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"cdn-load-tracker\",\"name\":\"cdn_static_session_status\",\"params\":[\"js\",\"xs\",\"HIT\",204,47.7],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:58.788Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"cdn-load-tracker\",\"name\":\"cdn_static_session_status\",\"params\":[\"image\",\"xs\",\"HIT\",15,40.2],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:58.788Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"cdn-load-tracker\",\"name\":\"cdn_static_session_status\",\"params\":[\"js\",\"m2\",\"HIT\",1,43],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:58.788Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"cdn-load-tracker\",\"name\":\"cdn_static_session_status\",\"params\":[\"image\",\"s\",\"HIT\",26,21],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:58.788Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"cdn-load-tracker\",\"name\":\"cdn_static_session_wait_before_download\",\"params\":[\"js\",\"s\",\"HIT\",37.7,22],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:58.788Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"cdn-load-tracker\",\"name\":\"cdn_static_session_wait_before_download\",\"params\":[\"font\",\"s\",\"HIT\",22.3,4],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:58.788Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"cdn-load-tracker\",\"name\":\"cdn_static_session_wait_before_download\",\"params\":[\"js\",\"xs\",\"HIT\",47.1,204],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:58.788Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"cdn-load-tracker\",\"name\":\"cdn_static_session_wait_before_download\",\"params\":[\"image\",\"xs\",\"HIT\",39.9,15],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:58.788Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"cdn-load-tracker\",\"name\":\"cdn_static_session_wait_before_download\",\"params\":[\"js\",\"m2\",\"HIT\",38,1],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:58.788Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"cdn-load-tracker\",\"name\":\"cdn_static_session_wait_before_download\",\"params\":[\"image\",\"s\",\"HIT\",20.8,26],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:53:58.788Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"CDP_GAMIFICATION_BONUS\",\"project\":\"frontend-shell\",\"category\":\"tms\",\"name\":\"tms_volume_unused\",\"message\":\"[tms] TMS volume loaded but never used\",\"params\":[\"bonus.bonuses.cdp-banners\",\"en-001\",\"bonus\",5000],\"level\":\"warn\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:54:01.842Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"ROUTE\",\"project\":\"frontend-shell\",\"category\":\"tms\",\"name\":\"tms_volume_unused\",\"message\":\"[tms] TMS volume loaded but never used\",\"params\":[\"support.modal.support\",\"en-001\",\"support\",5000],\"level\":\"warn\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:54:01.880Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"CDP_GAMIFICATION_BOOST\",\"project\":\"frontend-shell\",\"category\":\"tms\",\"name\":\"tms_volume_unused\",\"message\":\"[tms] TMS volume loaded but never used\",\"params\":[\"tournaments.common\",\"en-001\",\"tournaments\",5000],\"level\":\"warn\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:54:01.880Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"CDP_GAMIFICATION_BONUS\",\"project\":\"frontend-shell\",\"category\":\"tms\",\"name\":\"tms_volume_unused\",\"message\":\"[tms] TMS volume loaded but never used\",\"params\":[\"bonus.bonuses.app-install\",\"en-001\",\"bonus\",5000],\"level\":\"warn\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:54:01.886Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"ROUTE\",\"project\":\"frontend-shell\",\"category\":\"tms\",\"name\":\"tms_volume_unused\",\"message\":\"[tms] TMS volume loaded but never used\",\"params\":[\"ceo.widget.welcome-message\",\"en-001\",\"ceo\",5000],\"level\":\"warn\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:54:02.024Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"app\",\"type\":\"performance\",\"name\":\"early_hints\",\"params\":[0,0,0],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:54:02.482Z\"},{\"url\":\"https://1wfqxn.life/\",\"sessionId\":\"a89ba894a4642ff2db3785be07592c7c\",\"traceId\":\"a89ba894a4642ff2db3785be07592c7c\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"category\":\"web_vitals\",\"name\":\"TTFB\",\"params\":[0.391,\"/\"],\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.4051.0\",\"environment\":\"production\",\"createdAt\":\"2026-09-01T20:54:02.485Z\"}]}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:54:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 37\r\nserver: cloudflare\r\nx-trace-id: dc1945a6ebefc900d3059860310c2ae5\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\ncf-ray: a3472b265d8e56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"DYNAMIC\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37,"size_decoded":378,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ffd908939b60f1154b33016c6d2e9c6b","sha1":"663ebb986e784df674df5ab579ad90c05517597e","sha256":"9c3b25f260defd6991608963a30a67cad0981ecce13e5975b1a6304887514d7f","sha512":"786fb75180a4545de1e3d9858f421255beed81a5f0efe626b0ef1b9fae8565b4bb633bf8241d114a998f78d1f345d63afbd628e5a310c3cdf937c7fca79c852e","ssdeep":"","tlshash":"6b8000002c028002acc0cc8a03838030bfb23fa0802f08e8028ee030ca2a0f8e08ec28","first_seen":"2024-04-13T04:25:13Z","last_seen":"2026-09-02T23:44:25.339337Z","times_seen":11087,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/api/fss/socials?h=2e759cfc61d7444a","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.678Z","timestamp":1788296035678,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /api/fss/socials?h=2e759cfc61d7444a HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nContent-Type: application/json\r\nTraceparent: 00-a89ba894a4642ff2db3785be07592c7c-35306a4ef9a368b7-00\r\npage-view-id: a89ba894a4642ff2db3785be07592c7c\r\nX-Origin: 1wfqxn.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: 1wfqxn.life\r\ncache-control: public, max-age=2678400, immutable\r\nserver: cloudflare\r\nx-cache-status: MISS\r\nx-trace-id: b2f341272e1ff1ddcfed2b8775204ec9\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nage: 471858\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472acefe3356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1353,"size_decoded":935,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3d6574b4a17565f46fa08f27e4b0f30e","sha1":"57ca33d495a093ba0c9c438eda4d2ebd774b3020","sha256":"86ccaa89ba63d9a2b1e6a5e9dc99cbb51935f580320332bec99038083fb5924b","sha512":"d28d5a43800bf9370d52b9b78de814c60cfd0438003d70c7e35f14166dbc535f2b45b53f70d66caa0eeaefda53def26d517850a20cc722386529830c829b20e7","ssdeep":"","tlshash":"83215592379d6d341f1b17e840c7763cd17a219fece8e5d3c649e922c0aebe161222d6","first_seen":"2026-07-14T18:39:42.772769Z","last_seen":"2026-09-02T23:44:25.283123Z","times_seen":365,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/modal.vue_vue_type_script_setup_true_lang-smr9Wkbr.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.805Z","timestamp":1788296034805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/modal.vue_vue_type_script_setup_true_lang-smr9Wkbr.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"ae0529fe72a6ba65391ea95e5e895ffd\"\r\nlast-modified: Thu, 27 Aug 2026 14:41:59 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nage: 453648\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac98e4c56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12251,"size_decoded":4823,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8629)","md5":"ae0529fe72a6ba65391ea95e5e895ffd","sha1":"d8752a7cb370d67685e2a291a1c3baa1a7ec6f76","sha256":"796c00e23b7713858ec8088ae16849505613e85465eb718ab9b3465fbb8d7862","sha512":"18d6c447ae78202ffe0b9b17fd814e29cf61a7c73cd43e41dfae5dca155127838899ac298105449eb4f53a58f86128843eab8923a11b2916264955a162c947f9","ssdeep":"192:aLsnVS8JMnyUjTj1IbYJi86sQzv6ZJp0lRCEDBK7FWECavO7SS1nWbfmnX3oMvP:G+XJMnyUjTj1JnLnGCMla2DX3oMvP","tlshash":"1942b5c6ddfc9231096f5547f16a8f10431c0b1ae2216c8272b89efd4bcbda62195a7d","first_seen":"2026-08-28T05:09:58.815225Z","last_seen":"2026-09-02T03:21:21.919542Z","times_seen":37,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-DBM-vbUb.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.602Z","timestamp":1788296036602,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-DBM-vbUb.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 25 Aug 2026 10:52:26 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640186\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"c1701fd486af54392bf8bb36a28dc99a\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad4cfb856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133,"size_decoded":607,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"c1701fd486af54392bf8bb36a28dc99a","sha1":"ac146c5a184e06d5389cf00ced0ac538eedb8d4c","sha256":"d915c223122a6aba5251b206371e239ecaec4a9e8dc69aa9ae6cf50f108e53c6","sha512":"b39ce07ccaf4d0e7553ec6d6071baa1016eed5ae28b4a60411e71100d5d4380546751fb0f3a5af35bcebed84e885280242dbe9698daa82efd232394e6fe6f917","ssdeep":"","tlshash":"e0c02b1f1032c53c02230cad3648da11b738c8700b30f980994933210385091831f003","first_seen":"2026-08-26T15:23:24.365577Z","last_seen":"2026-09-01T20:54:52.851155Z","times_seen":37,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://1wfqxn.life/v4/socket.io/?xorigin=1wfqxn.life\u0026app=frontend\u0026Language=en\u0026EIO=4\u0026transport=websocket","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.734Z","timestamp":1788296036734,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /v4/socket.io/?xorigin=1wfqxn.life\u0026app=frontend\u0026Language=en\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://1wfqxn.life\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: avq9XqKqAOJIAfDVKgjg5A==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T01:18:14.47199Z","times_seen":18246362,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/test-manager-CSqV8aPt.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.786Z","timestamp":1788296034786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/test-manager-CSqV8aPt.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"62dda8416b3360e02489e9aa7e784e30\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640185\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac96e2056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9900,"size_decoded":5182,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4183)","md5":"62dda8416b3360e02489e9aa7e784e30","sha1":"ef67b0037cd211947590e6aaae249ec6f4b89058","sha256":"75a9a6b15fa30838882c7f780272e542af22653928c6fb8cd2c7ae0a3c5757f1","sha512":"a8443ff56373ff980352439837ac8728c5ad3ed0123a84bd0872860596cfcb64f8e6370e0bd25907cb25c6409ddd577a01f60e28635061b78f18e176ba6886c7","ssdeep":"192:6aDhqDGYRDDxxOs8PMmZf4Ngw4BML7eBYtBPNITO6h0sPuRkHE0EsjzmElDLXYE:6aDIDGYRDDxxOpPMmWNLwGKBYtBP8O50","tlshash":"7b121afb3545b03583f502abb0a69001b3355491b20be590f1ad59de3de34c9836bf5e","first_seen":"2026-08-26T15:23:24.271298Z","last_seen":"2026-09-02T03:21:21.931423Z","times_seen":43,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/api/translations/v1/frontend/common.config/en-001.json?v=0.4051.0","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.109Z","timestamp":1788296035109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /api/translations/v1/frontend/common.config/en-001.json?v=0.4051.0 HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nContent-Type: application/json\r\nTraceparent: 00-a89ba894a4642ff2db3785be07592c7c-e38a9060b6856294-00\r\npage-view-id: a89ba894a4642ff2db3785be07592c7c\r\nX-Origin: 1wfqxn.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: public, max-age=300, stale-while-revalidate=300, stale-if-error=259200\r\nlast-modified: Thu, 27 Aug 2026 15:45:27 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nage: 559\r\ncf-cache-status: UPDATING\r\netag: W/\"7166ab22beb0d22438a7834d81240635\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472acb791156b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"UPDATING\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14159,"size_decoded":4736,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7a7b4f35f3df3af0b9ed1aadf725e75c","sha1":"0f00fc3bd722d9dfdd54c3d3077b68ca53e5a142","sha256":"775a2bee6abea295eecd5d9ac812470f0aa4166ff396571dcef9054b5d396284","sha512":"95c1e24f8528d34e66b3c72dd44b319fce0bf03f320179da5844933e07eb977469a506e04c1663fae86efc5e7b4fb2adf0d31e51e92d0ce349e592a47cd7d79a","ssdeep":"384:rKHlxfuHZs5hhhXwAdDx5Klz8Dr0qbLZHXcb8pADsUJ5SUmbCoG:rKHlxnJZMARMbn9S2oG","tlshash":"6952642995401ef8478dd7c86bc3ad7964fed9a1388d6c29afdc436d078fb50e0a3681","first_seen":"2026-08-28T05:09:58.616473Z","last_seen":"2026-09-02T03:21:21.908622Z","times_seen":37,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/cdn-cgi/challenge-platform/h/b/scripts/jsd/e694063b5082/main.js?","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:55.202Z","timestamp":1788296035202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/e694063b5082/main.js? HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=UzbO4kJKVGsSmLPyyj5XAYqOnWZzVvznocTqp.dXqkM-1788296035.1265976-1.0.1.1-9QKZzWbRswoUXs4uuqKUOBHPJV5V.IB1plP6JrPyWUY2S38v2__sns1JPXzKBMF3br9Gep36lPg9gx.s48rMSPm.1KU7WhvE8fJOVftmQH1JiT29Hj07sq_hmKN19wvaut24LuY42GsHqficIZjhtQ; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=1wfqxn.life; Expires=Tue, 01 Sep 2026 21:23:55 GMT\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3472acc09fc56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ","quoted":false,"path":"/","domain":"1wfqxn.life","expires":"2026-09-01T21:23:55Z","raw_expires":"Tue, 01 Sep 2026 21:23:55 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=ya9q0THQ4.OT8_dhkHqTvWriP_pQg_A981a26hNKOxQ-1788296035.2057922-1.0.1.1-RY2ENVdA_udEW3fb9UOD0e3qID8Ph8HaYTrjPBpUfHmskN9B3rkzU.ukZ6jNzE1ikHWERjqVN9NqF8szJxeijpEszx8iWd_SWgckKvPmRDSiEqTDKtXQfoamSNmZh23R2FCuvtA5j7_IxUtoReDzMQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=1wfqxn.life; Expires=Tue, 01 Sep 2026 21:23:55 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":20963,"size_decoded":10241,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (20963), with no line terminators","md5":"c5ed963f8e1846880d471a62583c0cd1","sha1":"0c34324d286d9bd52c7eeea589f550854fb42583","sha256":"b34f6a48dc81ca0fedb0849aa536aa1622ba4ea71c7800711afb3d8ab47ac365","sha512":"c7855c2ccc544265a15c639d00224ec15b17ec75146c39594c068d5bb06700655f99fa75ed2282825e154a8bd7a813a38235a582082ac84f9f239f6bb7c5a238","ssdeep":"384:EbgM1dkMs99TEDCqoZM6XwTNBZVr7UT1Dh5XdzKmXDbmlVqJyS2Lwddpky:EBXkFtzpZM6XwBnVr7C1F5Xdu5l4owlb","tlshash":"ec9294cdbacfbac473437079456b70cea6696c81d46c45bcd332a4d4fa6478b622ad0c","first_seen":"2026-09-01T20:54:52.853863Z","last_seen":"2026-09-01T20:54:52.853863Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/cdn-cgi/challenge-platform/h/b/scripts/jsd/e694063b5082/main.js?","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/","date":"2026-09-01T20:53:54.300Z","timestamp":1788296034300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/e694063b5082/main.js? HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=gZinnsDQWXdVm6hovdrnVwcVT2_NoNY3YyBc35CPmBY-1788296034.2515638-1.0.1.1-CQertdLvLv0MxE5JF5eH_3oYg_QRk61G1eNoPnGv4oynEL2jR2uyK22r9cxnrn1JbIa9a4WWa3h3ZeHl8wc8Q6j_LsxizQDTe0Z13aYvGHZFPrlY45MFXpiEoYiBHruqPDtWOQtelQdLuPhJ_28N_A; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=vZZGQ.gLmEmqQ2xYdc07fPRCOQg28ks6N14TAFJRG8M-1788296034.3040566-1.0.1.1-Cy9ArNwviQAKVyNKkwBP4U0vFQTaDIRTRikBDhPvl.joD3uLstBWASZR70WuqcqjmfWxnALKK42iHvaFjKVq6iV3kkVQ5LydlRryUQG9w2VHIaCqgSyByYZCln7.sp7qHZTOJc.xw0m1RAUDaw0pKA; HttpOnly; SameSite=None; Secure; Path=/; Domain=1wfqxn.life; Expires=Tue, 01 Sep 2026 21:23:54 GMT\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3472ac6699456b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vZZGQ.gLmEmqQ2xYdc07fPRCOQg28ks6N14TAFJRG8M-1788296034.3040566-1.0.1.1-Cy9ArNwviQAKVyNKkwBP4U0vFQTaDIRTRikBDhPvl.joD3uLstBWASZR70WuqcqjmfWxnALKK42iHvaFjKVq6iV3kkVQ5LydlRryUQG9w2VHIaCqgSyByYZCln7.sp7qHZTOJc.xw0m1RAUDaw0pKA","quoted":false,"path":"/","domain":"1wfqxn.life","expires":"2026-09-01T21:23:54Z","raw_expires":"Tue, 01 Sep 2026 21:23:54 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=vZZGQ.gLmEmqQ2xYdc07fPRCOQg28ks6N14TAFJRG8M-1788296034.3040566-1.0.1.1-Cy9ArNwviQAKVyNKkwBP4U0vFQTaDIRTRikBDhPvl.joD3uLstBWASZR70WuqcqjmfWxnALKK42iHvaFjKVq6iV3kkVQ5LydlRryUQG9w2VHIaCqgSyByYZCln7.sp7qHZTOJc.xw0m1RAUDaw0pKA; HttpOnly; SameSite=None; Secure; Path=/; Domain=1wfqxn.life; Expires=Tue, 01 Sep 2026 21:23:54 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":21509,"size_decoded":10503,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (21509), with no line terminators","md5":"dd5cd481a352b0311e6d6db8695e988f","sha1":"f20bf1710722993027719d2b596cf40c1635254e","sha256":"327fc686ce3a10a906a4c2d28c745296659acbb47c7bce111481f53d0607a419","sha512":"5e1bfe2a907c62c0352b6d8eb99e6737d59f72d5849289c2b308971c2f7907c159aa793b0484db3097058d3b8aea8b15539a130b81693f77e396e9b61a23bfab","ssdeep":"384:ZxPdk5d0PjIUZwtnNjMMHCixFfx9YRq+nonjWqiarfuKMjgtTznk+sLolf:nPdk6lZWNjMTq+nojLZr2zj+Tk2Z","tlshash":"5ba283ca79d7bed5b3037435841b74cfa63a6c85d02c58b9c331a4d4f9a478ba22ad4c","first_seen":"2026-09-01T20:54:52.857135Z","last_seen":"2026-09-01T21:01:05.374331Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/api/USER-SERVICE-API/api-v3-oauth-config","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.169Z","timestamp":1788296036169,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /api/USER-SERVICE-API/api-v3-oauth-config HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-001\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nContent-Type: application/json\r\nTraceparent: 00-a89ba894a4642ff2db3785be07592c7c-729f37e53fd66aca-00\r\npage-view-id: a89ba894a4642ff2db3785be07592c7c\r\nX-Origin: 1wfqxn.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: BYPASS\r\nx-service: user-service-api\r\nx-trace-id: a89ba894a4642ff2db3785be07592c7c\r\npriority: u=4,i=?0\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad21c1756b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"BYPASS\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1626,"size_decoded":1031,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"04d2e04dfa6d56b2172d951efa8342ae","sha1":"6f2cead5574ead73b8ee09b5a4d781940c142061","sha256":"7c2cee693b263c80d5f74ac14c01f3de6aafb2f5a1d0ec3db7cc1057d214de65","sha512":"83c07cf49bf065984a5122b500d1b3d0da6d8b18f873b12cdca1b4e54f475fa368fcf8368ada2047f1dc62612be93e7160299ee638788b762ec3609153118b7d","ssdeep":"","tlshash":"6d3166e3917c2d76de51d3c3c541b37a860d0477a92d9afc6817f2840492363127b2db","first_seen":"2026-09-01T10:21:13.62458Z","last_seen":"2026-09-02T23:44:25.080051Z","times_seen":8,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/bonus-banner-hLtYb_db.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:56.534Z","timestamp":1788296036534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/bonus-banner-hLtYb_db.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=Y23fnqAXNygjIqTlAqWyyMJSpOHeUbflQmlV85IkUzU-1788296035.8789804-1.0.1.1-WsxNCT5Ll0LcYM8B8kHKCDjACdu3zR5lSLLxRNmW_dWtZEVwx5SCeJnY6IBGz5Pjcn.i0UAx4zjx5LXQHKlXwZiKDvvC7kfNPYJf0_ysvindL7pH3ey8feg_ypFO.WSoFxWVvDeAYpUhcdROLq7ITw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=lXVA8YCw_VNRfFJepbHLgDYpxTVUw_6n1mkOSh5_D.k-1788296035-1.2.1.1-3IlwpNrERuk1q_ciWsPh91ZBeA8hSPreNhLOGr4cY_BKlwkQaXmp8Ah28GPQ6DcQ0F5nHEtWGvYY12scDjANsIBiNBtNH8GOHFHdhhObsYh3vLhursI1ielMTGq7aynfWHiRtnz5BpxTTCD9I.FEkE5Us0hah2iCCUX4DJQZldj0ZnhPN6xgOUUu8JzZ9AXBBxNTR2jN40wA_POGOV2mkjt2duxQZHw3nFre3MLo7bqm8sdlF6fTel2zhBM5_n98EQYZX9_j7KU7cDKz2hgZ42XFFHfaPl7.M.aOXbswIiEyf4yJDM5uF1cDSugJGaH0NPflz3ValSZxIeKn6xJaeKDa0fJxmNEHzSCaYUUNvN14mwYUS_.KbZfQwDzexBC3sgFMyKMcY5In9T6E9gYVqqkpqEEJEv3ftm0fJCTW1u0; referer=https://1wfqxn.life/; project_locale=en-001; visit_domain=1wfqxn.life; session_visit_domain=1wfqxn.life; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIxZTBiZmE1Yy1kOTZkLTQ3OWQtYmE2ZS1iNmExNmNiYTBiNzclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzg4Mjk2MDM2MDQ2JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"af92197069887a2c8af2c908f01f081a\"\r\nlast-modified: Tue, 01 Sep 2026 14:42:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 17853\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ad45f2056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55694,"size_decoded":6351,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (47138)","md5":"af92197069887a2c8af2c908f01f081a","sha1":"3df9ffbb00d7a9bcb4129b248ea58cf763fc07b9","sha256":"567ed78bed1b543528fa443b95ab46ad5257af1285657e6b7cc60d618d07afa6","sha512":"b3b6eb93a8f8dab4d8e81193a5b9cec139ca33b1224066027881b38b89b6bb902df654c09cb93b2dde41a4a05a4d4c422b52c6e3355e57820407dd7a816baf71","ssdeep":"384:itqLV5Z7yFWq6ZxyZEJZp5tZlyZcCZD2Z2SZvyBdWr9KTZ9IZM+Zlze874vBwZm6:itqpr+duatOJJyGf","tlshash":"6c43de3065669808d6f3dc3331cd1f233d19602262b65216ca1d0ab89efbd7b63d5b3a","first_seen":"2026-09-01T20:26:35.10347Z","last_seen":"2026-09-01T20:54:52.860939Z","times_seen":5,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/index-DjRPrGkf.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.792Z","timestamp":1788296034792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/index-DjRPrGkf.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"43a4a8aa61c98891517fb6221ee8748b\"\r\nlast-modified: Tue, 25 Aug 2026 10:52:26 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640185\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac97e2a56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3200,"size_decoded":2011,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3199)","md5":"43a4a8aa61c98891517fb6221ee8748b","sha1":"cd074f56df636107b8728e42baef1c022798bfea","sha256":"092f0d5c723c9e3fb61efd065bfcf65beee5780c926fcb704524eeb2c075a0ff","sha512":"5432e9e220868839cf7066577ceaba00a8cf3f34e8c2ff7f5a950b2fdd7ca0f749b103d7d2589c85bef8b0e67b0a0f8ba7bf7e6515328110bf7768c44fdccf81","ssdeep":"","tlshash":"4161645c9391d03057ed44996b791621baf11389b27994e8f2b82cb8f407dc2c0adeae","first_seen":"2026-08-26T15:23:24.150003Z","last_seen":"2026-09-02T03:21:21.915826Z","times_seen":43,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/use-i18n-sWjWVZEk.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.799Z","timestamp":1788296034799,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/use-i18n-sWjWVZEk.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 25 Aug 2026 10:52:27 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 640185\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"8b40e76a434dc9a0c974cdaa1d3bc305\"\r\ncontent-encoding: zstd\r\ncf-ray: a3472ac97e3e56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":226,"size_decoded":656,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"8b40e76a434dc9a0c974cdaa1d3bc305","sha1":"bc0e4540b07422306f7a3a643c6157f6047e619e","sha256":"4f73b75f986e6e95a4481161d8061a8a7ddae3c2e51646559554ad1222786719","sha512":"9fc3c7ab4095e92496a136b9bbe3953176bf2c5dc75895238a628973eb0b1ba1712ab6a26f5c59941ecbaed15d7819da8f3351fcde56e2fb3de7f34c94ff574d","ssdeep":"","tlshash":"73d097824080c37023c88cc4d2209020432040c2772aac91b18f10378b9428ec1e8653","first_seen":"2026-08-26T15:23:24.004487Z","last_seen":"2026-09-02T03:21:21.929195Z","times_seen":43,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wfqxn.life/resources/v1/app/assets/hint-Bx9ATtIj.js","fqdn":"1wfqxn.life","domain":"1wfqxn.life","tld":"life"},"ip":{"addr":"194.67.193.77","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wfqxn.life/?cda_id=266040e8d95ecf3364146e6469396ded\u0026redirect_data=eyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzg4Mjk2MDM0MTI1LCJkb21haW5DaGVja0R1cmF0aW9uIjozODd9\u0026auth_secret=MHrk9CEGsQkVDQszCD9KwpbkLmV90nrWTxi9OyzNbM7jvrYvBM3PW0LfW_mv-TuflKRgqecJg3NIetRPGb7eGxiyDF2Vg2SfXm2MwkaSD93Iw7JKDyZ20Vd7LYaYnGIQpYNPk-T5xcbyqPv6CrnZm403MIDJZ0njf8rN_rqTgIpsHRkUF1dsPG8nNzzk9p8TC-dC2cnO--90S27kHcqLZFgbH8byS46GcXC-nmqzNU6u9UbYWUn56wNweSH4sDla9QMsOngdyl0\u0026cda_params=lWHuglxaLu3JBYKVIz7-dbEziYyNMj_ZU6ukAdOJmrqFadCISihAvpMH2u9i_mCZilRLuBhJhoSiAe3QQbEKMvp_ggK4_d7FoM5Vh3pNFXmR0SJ0jpksVIwzvSR7tgnyuiS--0lP9-TP4TF3Bv48NkHG9pZQlqVjJdjhoHxS4-ZmoBk_-WwN1lV0bxhntP1hXGhBU132bljLmmGlS_ScwlOjMkVM1JHiaNY52oKi5LIhG5y1MYOIan-hA1DLtO4L5624XNcMpA4G9SPqprenrgcFBLopOG5V3hhufY8hFoFi2X_SSVlUFrc1RBNc7uZZHJxckcNkqE8sVXUNHknqHs_tGBxw57LWp5hWvnMbCo0Zfa_qgO0QSYUEgUeDQkzh1DZ1EHU5oTBPQyJjeam-TSAfdRGmSmXvB1O_Rz93TErIb47K44LTiSdbwkI5erwi6a-dWuFIfPJfJPbt8NApBPJ25aM3hds-UO4aLfYi3K9pcAGp5snRL_DkYbT1l_rzvume-l4zuf0gK8t4rQejGQ\u0026token=49bbfb33-d3d7-4e99-ba05-b90ce33fe59f\u0026cda_arg=FS7lR3lJ6H00aRddrzfbwdiIZGLU7NhMtKO-fQQg2VJYEMaGLw98HpwE-p9w5u5ZFewpWVIM9evI_Qz9QVKheTKlxlI4DSKHPdb7atnDhRMEF1XU3rHkCi9y0IzYjC0FoCEc6SSnXiRYn5x1guDDwNGGIskE_7JPEPYK-qxf5g6hpag4ym8LNMA54EzJmz3hLYnx_HKaVG_DEeO6rs8-0J6vfUnxOVi9iV19Djg8bwqG6zmja1KyvkEtBsgSqWGQUYj-pJ7tNTqT4G2_ZdTF9ENdizZxIx33Jtx_YukTDVY","date":"2026-09-01T20:53:54.862Z","timestamp":1788296034862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wfqxn.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 08:59:54 GMT","end":"Thu, 24 Sep 2026 09:59:50 GMT"},"fingerprint":{"sha1":"1D:AD:E2:83:5F:1F:AB:5C:E6:22:0D:F7:6E:61:55:FE:3B:B8:55:81","sha256":"47:29:86:E2:65:9A:DC:BC:EE:B0:9E:DB:40:B6:6B:49:9A:72:0B:6F:C5:CC:D0:BB:87:6A:25:42:E9:1C:4C:16"}}},"request":{"raw":"GET /resources/v1/app/assets/hint-Bx9ATtIj.js HTTP/1.1\r\nHost: 1wfqxn.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1wfqxn.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __cf_bm=psTqqrmD3pwSehtsGht8ulOfOj1I6_VN3Xz18WCbMRI-1788296034.3854196-1.0.1.1-OprIHGZfVrUcLLIuu2pgJle47gywA7dfD9yA2SeJaTR7fkdZg0..XGJTqC0k8ke1TEGhBwOb0rv9VFolHSVCbPv1BmY2.ScIQX7Kcb3Aqv7VyIsbZ8uOhLExfQiLRTVVrVdR0fVo0ji9n4SEu.QCGw; cdn_cache_id=b7b4127636; click_id_2=4fb742de-0444-42f5-b244-57f9bf068fc0; device-id=6a73e39d-9cf1-4ee6-b29a-f35a1b323306; OTA_device_id=d82ee640-860d-42b5-a799-8dfc078913e2; cda_session=68d2b92a-49d5-4414-b6ed-7339951b5454; cda_passed=1; cf_clearance=i4seEY8tfU63.57aiTjYybYzOK.XLY3Qf0yKpcbGuyY-1788296034-1.2.1.1-zTswSGvTJjKXwfubYwBtlCNutXFe4cY_86rDZYi26X.mY5X_HBbr9HtJ7tPkEmXsUPs6ZhKKyCrHI_cASVv2Xz3ExFCOfQc2NfZiMjCcD7IivXnuAOQHH3lYIT20ZdkEk45XfsW9dLo58A.yw45lXO8wmK.HQU1yHabmKnzLYLMtfkJRNXh7ZyntLwxsZw48x.lV.nxITmRlHVbAk0PbX2B_ae0AnA86.gzWP6yOUPh4o1cQ8j48Kt6nSnmirGENQbCLrCUPmC4I4Ma973Ny2RSoMgQnjNpk9SfsDx.xc134mAB9LwWZWKwau6287eEicI0wfCOmCDWF9t6dV.JBB4nCRUjS2ZelxKIVNBZzi9f3K0cMbiP1tHYov4LNGeHO88fXDj5976Ol3uxABqKV9YiZjGtUDplYxhcTN5UozdU; referer=https://1wfqxn.life/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 20:53:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"7de726c747ddc1b64097d8e62f3348b9\"\r\nlast-modified: Wed, 26 Aug 2026 14:38:18 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 536757\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3472aca5f9c56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cf-cache;desc=\"HIT\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1983,"size_decoded":1411,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1007)","md5":"7de726c747ddc1b64097d8e62f3348b9","sha1":"56494c97ba23dd02ca92c0dc74057e4b15c3e27f","sha256":"3bde3cb2a161941f56b1e96a87a9ac3bd36b6901ff2d1ed9f24152b038c072a7","sha512":"29d0e8bbba77e950c322f4be9ca6a6451ca1798b4a0a56873fd3f012256ccf150e35d82d4feccdc9c6eff3ec6f95633069ddea54eb01697e477f88f924c2bd4e","ssdeep":"","tlshash":"59416315fbb594b595f74d59bb1e60a8c024f4b5035a54ecc26fc44887ebd62d3c1b02","first_seen":"2026-08-26T23:17:11.935566Z","last_seen":"2026-09-01T20:54:52.863525Z","times_seen":41,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-01","alert":"Phishing Block","trigger":"1wfqxn.life","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"1wfqxn.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}