{"report_id":"729ce3ac-214a-4ef8-922b-83625f2fbee1","version":6,"status":"done","tags":[],"date":"2026-01-19T00:11:16Z","url":{"schema":"http","addr":"1waica.life/","fqdn":"1waica.life","domain":"1waica.life","tld":"life"},"ip":{"addr":"194.67.193.1","port":0,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"1wqkor.com/cdaredirect","fqdn":"1wqkor.com","domain":"1wqkor.com","tld":"com"},"title":"Access denied | 1wqkor.com used Cloudflare to restrict access","dom":{"size":363,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (363), with no line terminators","md5":"fbf66960d45ce17a7b00f70c88a0647e","sha1":"37a45e20b6ee1094cd5f5b5f590de70750c8954e","sha256":"cf58460a3f58d3926bc755724a5ab291dd41325fe5e54964e7901a4985cb7d84","sha512":"3016ced7a8423a62dc800f228115be127f41e1d805569bfa554837a1f2b1bddbe7127e618cdb9dfd9ca9feed5ae6a52a07b0972df597ba49b6f92f5f22ffe2d0","ssdeep":"","tlshash":"d0e020ee2d75c9347aa4038e20f3e3dc1a646591b721da0442d9d8679f10fd34c5299c","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"1waica.life/","fqdn":"1waica.life","domain":"1waica.life","tld":"life"},"ip":{"addr":"194.67.193.1","port":0,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-23T00:11:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"1wqkor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"1wqkor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"1waica.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"1waica.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"1waica.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"essl-cdxs.edgekey.net","ip":{"addr":"23.33.119.73","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2001-10-04","domain_rank":782637,"first_seen":"2019-10-08T17:38:53Z","last_seen":"2026-01-14T15:57:27.263727Z","alert_count":0,"request_count":1,"received_data":102853,"sent_data":424,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fastly.cedexis-test.com","ip":{"addr":"151.101.2.6","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-07-09","domain_rank":69895,"first_seen":"2015-03-12T02:39:16Z","last_seen":"2026-01-12T06:07:35.42808Z","alert_count":0,"request_count":1,"received_data":103551,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"testingcf.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":581907,"first_seen":"2021-07-08T14:13:30Z","last_seen":"2026-01-16T06:11:32.813507Z","alert_count":0,"request_count":1,"received_data":103509,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ipv6-check-perf.radar.cloudflare.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1888099,"first_seen":"2022-05-30T08:17:29Z","last_seen":"2026-01-12T00:19:21.050594Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":432,"comment":"","tags":null,"fingerprints":null},{"fqdn":"1wqkor.com","ip":{"addr":"194.67.193.1","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"domain_registered":"2025-09-16","domain_rank":0,"first_seen":"2026-01-19T00:11:16.794145Z","last_seen":"2026-01-19T00:11:16.794145Z","alert_count":14,"request_count":7,"received_data":72799,"sent_data":6805,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"invalid.rpki.cloudflare.com","ip":{"addr":"103.21.244.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1629364,"first_seen":"2020-04-04T11:02:22Z","last_seen":"2026-01-15T16:56:53.676837Z","alert_count":0,"request_count":1,"received_data":311,"sent_data":416,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fastly.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":208496,"first_seen":"2018-03-19T09:47:57Z","last_seen":"2026-01-14T15:57:27.373797Z","alert_count":0,"request_count":1,"received_data":103143,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"p29.cedexis-test.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2014-07-09","domain_rank":73363,"first_seen":"2020-07-30T11:41:39Z","last_seen":"2026-01-16T06:11:32.960974Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":423,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ipv4-check-perf.radar.cloudflare.com","ip":{"addr":"104.18.31.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":390604,"first_seen":"2022-05-19T15:17:14Z","last_seen":"2026-01-16T06:11:33.798931Z","alert_count":0,"request_count":1,"received_data":1036,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"performance.radar.cloudflare.com","ip":{"addr":"104.18.31.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":418040,"first_seen":"2022-06-29T10:44:51Z","last_seen":"2026-01-12T06:07:35.489104Z","alert_count":0,"request_count":3,"received_data":11544,"sent_data":1559,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"benchmarks.cdn-b.compute-pipe.com","ip":{"addr":"172.66.0.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-12-02","domain_rank":0,"first_seen":"2025-12-02T23:49:38.53422Z","last_seen":"2026-01-15T19:05:45.085702Z","alert_count":0,"request_count":1,"received_data":102761,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"benchmarks.cdn-c.compute-pipe.com","ip":{"addr":"104.18.28.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-12-02","domain_rank":0,"first_seen":"2025-12-07T06:49:16.589296Z","last_seen":"2026-01-14T16:15:28.732544Z","alert_count":0,"request_count":1,"received_data":102761,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"p36.cedexis-test.com","ip":{"addr":"138.113.181.188","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"domain_registered":"2014-07-09","domain_rank":85475,"first_seen":"2021-02-26T10:23:29Z","last_seen":"2026-01-16T01:30:25.192899Z","alert_count":0,"request_count":1,"received_data":102916,"sent_data":429,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cedexis-test.akamaized.net","ip":{"addr":"23.36.76.99","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2014-03-18","domain_rank":740410,"first_seen":"2020-08-26T07:30:59Z","last_seen":"2026-01-15T19:05:45.161744Z","alert_count":0,"request_count":1,"received_data":102887,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"valid.rpki.cloudflare.com","ip":{"addr":"104.17.231.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1618272,"first_seen":"2020-04-18T13:41:52Z","last_seen":"2026-01-15T16:56:53.599829Z","alert_count":0,"request_count":1,"received_data":657,"sent_data":414,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"benchmarks.cdn.compute-pipe.com","ip":{"addr":"172.64.148.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-12-02","domain_rank":707939,"first_seen":"2024-06-19T19:32:53Z","last_seen":"2026-01-18T22:10:06.875102Z","alert_count":0,"request_count":1,"received_data":102761,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"benchmark.1e100cdn.net","ip":{"addr":"35.190.26.57","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2016-01-26","domain_rank":69376,"first_seen":"2016-02-04T20:53:58Z","last_seen":"2026-01-16T06:11:32.997378Z","alert_count":0,"request_count":1,"received_data":102698,"sent_data":421,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"jsdelivr.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":749085,"first_seen":"2021-09-09T07:03:10Z","last_seen":"2026-01-17T06:19:32.650175Z","alert_count":0,"request_count":1,"received_data":103359,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"1waica.life","ip":{"addr":"194.67.193.1","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"domain_registered":"2025-05-08","domain_rank":0,"first_seen":"2025-06-24T00:11:48.917152Z","last_seen":"2025-10-09T00:24:57.507659Z","alert_count":3,"request_count":1,"received_data":729,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"1wqkor.com/","fqdn":"1wqkor.com","domain":"1wqkor.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"a701cb2da1150f6bd84e98409d06129b","sha1":"5e19e6d1ab1d69ae3fc4edec86768e0377705dfd","sha256":"1e3587c451dfa5bb7734a3884cd7bf8ec9e833c55f361d8b1f54beebf1d31725","sha512":"5e38062c3716ed8f0225a929b82d40a0cad6813cd05393dda7abe48a75dcdee9a4cc68ee0c90523628b20f9cfde289bca24b6bde9c6861b383e8867dd6b4dc3f","ssdeep":"","tlshash":"31f0eb14ac981e35e660425cd2223f436b7c1a33e78aaae0a2df230405b676e118289b","size":573,"data":"","first_seen":"2026-01-19T00:11:21.496613Z","last_seen":"2026-01-19T00:11:21.496613Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wqkor.com/","fqdn":"1wqkor.com","domain":"1wqkor.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"ec054110f84fbd9b6a0e887fdc20210f","sha1":"bf9921d089495abe756082f8708973709898d7e7","sha256":"13249a9a85bd4c45118a12500b3096eedbb4d051a68b63c450b1f380846d9148","sha512":"1894e9460a94595a9f2ddd191464ee4679cf32972b1f7097deee1c83be637fab2f49cc8656810d60d05438d3849ed1e04ad6bbed355faa36f799dc3430d3f6ae","ssdeep":"","tlshash":"5fc080f354f404a764328044557f3645769141230d4931e4b950515c2f6d63fa0f51c4","size":164,"data":"","first_seen":"2026-01-16T15:26:35.2328Z","last_seen":"2026-01-19T00:21:23.659598Z","times_seen":132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wqkor.com/cdaredirect","fqdn":"1wqkor.com","domain":"1wqkor.com","tld":"com"},"ip":{"addr":"194.67.193.1","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"825e096e1a453fd687ae6e2e452cd25c","sha1":"c8944baeaeed14ef0bfff0816389db4a464c7b82","sha256":"4512e11f31eca1ce4a914e3d4a4b77b1cb680f94ddf50d8283c4da9ab9e62cbb","sha512":"45ca84df868cae7d7cfcc838847061f00e3b94075ca301a3e2690e7222349d4bf5ddda6f2c23e7a12d3027d286d1d7e14b95a115204a50424e25f9e112160366","ssdeep":"","tlshash":"9d11eda7f988193612cff6bb512bd3a431b920a23c2000f35c1688a5096dec6d936681","size":961,"data":"","first_seen":"2025-03-04T21:30:09.997158Z","last_seen":"2026-04-20T00:16:38.460329Z","times_seen":1368,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wqkor.com/cdaredirect","fqdn":"1wqkor.com","domain":"1wqkor.com","tld":"com"},"ip":{"addr":"194.67.193.1","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"56df91490fa1984fa82b297dcb23c22d","sha1":"2050f127b73f50d21eb9b0a2a3f2aea7d4372ba9","sha256":"275407540ae2d5516300e4027ce994e1c97f958d464e137d0fff116d7acf0f24","sha512":"537ac565ea049803015a3b15881913d8179eafc11f95ac99dfe0ee842ac3d496ea3c6e1c167274357b7443e32ea9efab72400b95798479c5a5c81c9aabc88e8b","ssdeep":"","tlshash":"bbe0dfbbbb192e3906efa67771aee74a3676c091acc05560092ccc940b3fec4d03a1d4","size":375,"data":"","first_seen":"2023-03-07T01:03:09Z","last_seen":"2026-07-27T04:20:17.188274Z","times_seen":533582,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6c0e32ae671350586c89cfc37fb2d60","sha1":"08ba6e7163c2b5d07a0b250c7010f3501f6d8698","sha256":"973eba51d4f4cfd88e688369ca708cb07393bf67f8f2a50e019c2eea8a21132e","sha512":"c04b3e60ef1e854cce638789c4ec43d091096d4cd2d2f362706d17b8c98a40c5041c633179421ac3e1962afd6bfd4d1134defcfd7544543746ea333e28ba85fc","ssdeep":"","tlshash":"d6d0a7aa2e758a30679c024e61b7e3d82a6565926721990081c9cc5b6b21fd348b19ac","size":236,"data":"","first_seen":"2026-01-19T00:11:21.498647Z","last_seen":"2026-01-19T00:11:21.498647Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wqkor.com/","fqdn":"1wqkor.com","domain":"1wqkor.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ef3fd7ac302a3736e5c9ad7dc4f28be","sha1":"27f54a501e5ce2bc0c6723f719b40ee3b6f78e2f","sha256":"c47c506bc37818976e21277d300f9e7334b92ad8b50d20d8c598c493034d5940","sha512":"b6f40dbaca3a843acb5c1afa12eb292b7a018b425cf70016541820ce103a291b1191adcb5e0aa163edb9e9dd2c3a1e8917ec44268e913d040ce34af6751ac4b7","ssdeep":"","tlshash":"1b41a922483224af457c382bf2c7164e9de371e75a288ec1778c83c54f4ddb911ed2a8","size":2186,"data":"","first_seen":"2026-01-16T15:26:35.234673Z","last_seen":"2026-01-21T02:39:31.500803Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4bdbfc8f6cdd85dd28d96005a8af214","sha1":"d1d840ea1a8eaa1a6cce874bb40bf6a039f2e1e3","sha256":"30f12c7f150ec47610fa28692f025d7ac9245b9d7ac28f5d3b8898ee82a71966","sha512":"13e1c2423ec01633f38079cbccc72e89c7094a09afceaf9f783d5378fa96534a678b0f19cb7a73509647b24af9411f966f663f127b5bfc141bab9246f6ce55b2","ssdeep":"","tlshash":"77d0a7aa2979ce30679c024e31b7e3dc2b753591b721994081c9cc5b6a11fd308a19bc","size":236,"data":"","first_seen":"2026-01-19T00:11:21.499964Z","last_seen":"2026-01-19T00:11:21.499964Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wqkor.com/","fqdn":"1wqkor.com","domain":"1wqkor.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e95d511621f12fed1871b4fa540c249","sha1":"b12002efca5d473aad00da2c7c92f3b5afac0171","sha256":"93930094326fdbefafb51b60ebc26a1fd250963e78d9efeb1b09920d066599d0","sha512":"c7c2353cc26073192157588e81dbadc77bed886f07368742f6d6fb5c4fc7bc57c74c719df716e6300b44be53ec3890548664645f49b3f57d5d759035ab4e99ff","ssdeep":"","tlshash":"3fe0225a35c6b4298b93e4dd04f0d4a7527fcac08df051a9b4010c8925b950a7af368e","size":413,"data":"","first_seen":"2025-11-19T00:16:15.452388Z","last_seen":"2026-06-05T00:11:34.475188Z","times_seen":3314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wqkor.com/","fqdn":"1wqkor.com","domain":"1wqkor.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"629e01d5997841f63fe359f3f10f3166","sha1":"b5350410d0da436e240caac2d6e0eeb69d6c227d","sha256":"036799c4aa85ec53b7a2bc9b16082027dbf1424a35d0f0e791320bfa6252911d","sha512":"b6120e3d3f25decb4aac2f22de621a83b30d7d60f62adebc86765c4497d74bdcd51338ac498aea9b89f1293918d0c14c69ee06d1f7bec8d6dbccf385cdd7aebd","ssdeep":"","tlshash":"34f0a27973a1b12787384170cb7f3a11b1abb861b638f014d69a7a873162157c490bbd","size":587,"data":"","first_seen":"2025-08-20T00:25:04.567297Z","last_seen":"2026-06-05T00:11:34.477849Z","times_seen":3447,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"performance.radar.cloudflare.com/beacon.js","fqdn":"performance.radar.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.31.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"07385f81a31c8f0c475c6481290b4994","sha1":"ca9b922d4d2ca0688acfe89109144ab8a63457e1","sha256":"a2e6e40bac61c44227b899d6d0c1691f23209454d492c133b7da9f88e6444eea","sha512":"de42f2fe9a2a57000dc79ecf6a02dd3f4ba3936a2c03068b56e90b27e4cd2905e5b20670ed1f2e82bfe93f04aaae67d7232db7ea9cd2f5366091df8008200af2","ssdeep":"192:qWTavxSxKBV/oRks10BINTAPAWVZb7+ZRNVFBZyvPI8HqWLeTnFNmuQjmfE:q0avxSxKBV/0ks6usZWZRNVFBZyvPI8F","tlshash":"56120a7317680a42cf8604d1405af36f766bb14607c1969fb21fcc6b2268fd3b6e635a","size":9177,"data":"","first_seen":"2026-01-19T00:11:21.492647Z","last_seen":"2026-01-19T00:11:21.492647Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wqkor.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"1wqkor.com","domain":"1wqkor.com","tld":"com"},"ip":{"addr":"194.67.193.1","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2fed80d9fb86b4495ae3d27d5d5fecc","sha1":"7fdfa8b1e957076c98c196e25ed36e0582cf4de1","sha256":"7b1d6f1b237acc8bb9d4ccae6d81e149d47e89eba5ed3ca236082c9229fe80eb","sha512":"1086474f5936150012aacf44421eea38ea3eb11709d0a1c747b893260b78a973528faf731f509eb87f0b54bc2b677b5b7518b181ba7271336cfcbc0210af705e","ssdeep":"384:wHwkvBNUjd706MKhUICK2kAGwySstocLaLTmPj8Lpws9Tygmo/Kmo3lXHCr6inE5:rkvB6jd70zGlCK2DTE6y7UpwcygL+Vyg","tlshash":"5d9286ca74d6bb6d812630ec106b6dc7b5bebee52008a514d320d0f8b97570c69fbd68","size":20780,"data":"","first_seen":"2026-01-18T23:38:25.810066Z","last_seen":"2026-01-19T00:17:25.714102Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wqkor.com/","fqdn":"1wqkor.com","domain":"1wqkor.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"79aaa6bb1737d716b1af96a8fefa843c","sha1":"0806513a3b0f42e1441f42893aa80e0d6dfa83a1","sha256":"f7575929a60a72ae16f325f753f5a33aedfec6ddc45ae126a67f9b4c19b292b6","sha512":"1a0fdde9481521a459322e0b4ddfc705647fdfaa6af4d9e488f2cf41e4483c7b15cb1642fe2bc570353e238a3206b9fdbd30a266e3f3f3ba76bcb3b8cfeb7a13","ssdeep":"","tlshash":"ec2177f633e4f0bf83151a86d06f5117f3a9a9406148d4f4c26cec99b81448fc2b9bda","size":1212,"data":"","first_seen":"2025-11-20T16:40:15.934501Z","last_seen":"2026-02-13T00:22:55.877967Z","times_seen":3127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wqkor.com/cdaredirect","fqdn":"1wqkor.com","domain":"1wqkor.com","tld":"com"},"ip":{"addr":"194.67.193.1","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb2ee6e4b3d4e81bacdb2474d9b3c2f5","sha1":"6588855b25c975b224e0fd1b50ca1b3f36cd46ed","sha256":"3dd83a652b2e60d8dfc699cd2006f70007b826a92b49e61e9194bf422481ac05","sha512":"218d6f484d2b8bf503269bbe4cf5dd5dbde2b6d096e2ba635eb4e947a046dee06bfc43b013587b64974372520acd6e066a3fdd563055546b5e467fc38c6c8a03","ssdeep":"","tlshash":"e08004534030730005710307135555403335501030314c0473c141153d51d57c305340","size":38,"data":"","first_seen":"2023-03-07T01:03:09Z","last_seen":"2026-06-07T06:44:39.253612Z","times_seen":160741,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wqkor.com/cdaredirect","fqdn":"1wqkor.com","domain":"1wqkor.com","tld":"com"},"ip":{"addr":"194.67.193.1","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc927a89ca4b9c309d292fdbc9af6f76","sha1":"b1ee72e7a3e6beb5a0607802d3cfb617d53bb5b4","sha256":"9babc13a10a868b26817d5a3b2bfb64ab6bdeef1c5d8de328836238cf6c7819b","sha512":"05083374d3417c901473efb6ce2982dc90284d35269035c869f0762b7565116f0970a3156ceb472b43676d6edcee8b30c6bbe58d09744e211deb7ff50ed0ded7","ssdeep":"","tlshash":"d911c4793f1a5634dac5814b317fe7a93d3260617a129044c36ccc255d18e8714efcbe","size":921,"data":"","first_seen":"2026-01-19T00:11:21.503057Z","last_seen":"2026-01-19T00:11:21.503057Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"p36.cedexis-test.com/img/17653/r20-100KB.png?r=32681398","fqdn":"p36.cedexis-test.com","domain":"cedexis-test.com","tld":"com"},"ip":{"addr":"138.113.181.188","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wqkor.com/cdaredirect","date":"2026-01-19T00:10:55.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p36.cedexis-test.com","organization":"Citrix Systems, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Wed, 18 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:E6:58:49:58:7B:8B:9D:01:C1:1A:52:19:AD:15:F4:FC:6A:DB:07","sha256":"2E:0C:28:1F:F6:62:E9:9F:9A:D8:F7:6F:0A:FE:BB:BA:BE:21:4A:F8:10:15:31:79:13:01:31:33:F1:A6:22:BE"}}},"request":{"raw":"GET /img/17653/r20-100KB.png?r=32681398 HTTP/1.1\r\nHost: p36.cedexis-test.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 19 Jan 2026 00:10:55 GMT\r\nContent-Type: image/png\r\nContent-Length: 102400\r\nConnection: keep-alive\r\nServer: PWS/8.3.1.0.8\r\nLast-Modified: Wed, 07 Sep 2022 08:47:01 GMT\r\nETag: \"63185a85-19000\"\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=2629743, public\r\nTiming-Allow-Origin: *\r\nX-Content-Type-Options: nosniff\r\nAccept-Ranges: bytes\r\nVia: 1.1 kf160:3 (W), 1.1 PS-ARN-01C8L93:16 (W)\r\nX-Px: ht PS-ARN-01C8L93ARN\r\nAge: 69117\r\nx-ws-request-id: 696d768f_PS-ARN-01C8L93_22922-35981\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102400,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 310 x 205, 8-bit/color RGBA, non-interlaced","md5":"f134fda98a277b1c8f20ab8fbe2fbd58","sha1":"a922796190a1f5bbb3c410c6ec591502050df04e","sha256":"27bce9e85eaf3567a4695ba2b612e32615394d80d0a3a2dcb07b1fbfdfababc7","sha512":"2b2e8338afb9b0ca9b5fa3d452dfd80368b5d17566120ae6351b6d03572e5a69cedb97f165fbc31ffb3addcc00506a3fc0761cf2404a5d9826a8448a7c4d9f17","ssdeep":"3072:fd/tI0TeVA5o0VgTuGmxrMRZ6aLxuC+Gtn5HBZ4I/:f81VAMuGMrMX6Mxu9+fCo","tlshash":"08a312846579cdbe5edc1d06ab21ed4ca2be53f66b5e367483100e054ff4fb49ab0288","first_seen":"2023-04-05T15:46:51Z","last_seen":"2026-07-26T08:29:33.087828Z","times_seen":3279,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":80,"dns":1,"connect":8,"send":0,"wait":9,"receive":10,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipv4-check-perf.radar.cloudflare.com/api/info?r=9398431","fqdn":"ipv4-check-perf.radar.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.31.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wqkor.com/cdaredirect","date":"2026-01-19T00:11:01.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"radar.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:11:48 GMT","end":"Fri, 13 Mar 2026 19:11:35 GMT"},"fingerprint":{"sha1":"31:C9:81:1C:12:EC:E5:14:BF:9D:0A:97:6B:50:25:B1:7B:CB:2F:07","sha256":"21:AE:F6:20:66:FF:98:E9:85:61:42:D5:E5:E1:A8:55:58:2D:8A:CD:40:76:47:18:A4:88:24:31:9E:39:0F:84"}}},"request":{"raw":"GET /api/info?r=9398431 HTTP/1.1\r\nHost: ipv4-check-perf.radar.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1wqkor.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 19 Jan 2026 00:11:01 GMT\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\ntiming-allow-origin: *\r\nset-cookie: __cf_bm=50fchjWD3Nkkofv57BSpdsOplC5q96AkFETcUPTvDtw-1768781461-1.0.1.1-ntL9GNUVy8OnJOA6xRnkf_1qBhVxkBrwJXuRx6h9juFfzESgo1ow5YNcnQMADjGFfIyQsLDrv1hRo5L0BxIwg1dsuAKFQbtx5xu1haBpv3Y; path=/; expires=Mon, 19-Jan-26 00:41:01 GMT; domain=.radar.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9c021cc91f1d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":222,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e563d0c9f1827eb2b952f53c6c090ef4","sha1":"912db497e94ef1f028624754543f49868e7f06e8","sha256":"83dc2817f29a76f33e491dd55a7a7101e9f29965c2fcad38e8c862d815edb27a","sha512":"ccea2ecd602b914a9a4c535c5fd0e4b1038392eb75a3b845712c1aa098a7f4605c0e31ebb469629773ad576ffaae42055a6282638441e40f467dc77a2a33d2fb","ssdeep":"","tlshash":"67d0a920a0584b338cf8220e2a6ea80217602e1f530232c21b932b428bdd8b330f232c","first_seen":"2025-06-12T09:42:11.901716Z","last_seen":"2026-06-07T06:34:08.59755Z","times_seen":2071,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":25,"dns":5,"connect":1,"send":0,"wait":24,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wqkor.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"1wqkor.com","domain":"1wqkor.com","tld":"com"},"ip":{"addr":"194.67.193.1","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wqkor.com/cdaredirect","date":"2026-01-19T00:10:54.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wqkor.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 07:45:04 GMT","end":"Sat, 04 Apr 2026 08:44:53 GMT"},"fingerprint":{"sha1":"2C:61:50:71:0D:E9:4D:A4:97:D5:91:9A:41:BB:4F:2E:0D:2F:32:7F","sha256":"9A:7A:9A:87:D8:E1:CD:C0:F9:B1:F9:54:FA:39:30:15:37:2A:27:68:22:1C:87:23:A6:E9:6E:D2:A9:60:A1:2D"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: 1wqkor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: app=redesign; cdn_cache_id=b7b4127636; click_id_2=34a252eb-04a5-4af5-9bb1-229f5537e4ad; device-id=ac6852f0-1f3a-41d8-8085-da692c0d729e; __cf_bm=t52cAS_ee57UwsZscQu5pqhWuxDstgoVvB2r59lnvXE-1768781454-1.0.1.1-jTs.VLO.8bkB2RGBbdKbcCVS66DHMkD1AHaZkeIda9E0WjO2EEHNJq4tIWqIJWdqpypAlebzSYiyakEzV7XsDgz8DvNVeya1lm05LLoLWA.0gO1mioOiPka7gCOJv5jU; _cfuvid=WY_tTj6LVl8SXASFiXNwe3H3YhHDmvC.4cvTJQo8Wmo-1768781454357-0.0.1.1-604800000; OTA_device_id=df07a232-af05-4c20-a4c5-97f018a805ea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Mon, 19 Jan 2026 00:10:54 GMT\r\ncontent-length: 0\r\ncf-ray: 9c021c9d8cd623eb-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20780,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T04:20:17.182226Z","times_seen":17555689,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"1wqkor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"1wqkor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wqkor.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?","fqdn":"1wqkor.com","domain":"1wqkor.com","tld":"com"},"ip":{"addr":"194.67.193.1","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wqkor.com/cdaredirect","date":"2026-01-19T00:10:55.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wqkor.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 07:45:04 GMT","end":"Sat, 04 Apr 2026 08:44:53 GMT"},"fingerprint":{"sha1":"2C:61:50:71:0D:E9:4D:A4:97:D5:91:9A:41:BB:4F:2E:0D:2F:32:7F","sha256":"9A:7A:9A:87:D8:E1:CD:C0:F9:B1:F9:54:FA:39:30:15:37:2A:27:68:22:1C:87:23:A6:E9:6E:D2:A9:60:A1:2D"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js? HTTP/1.1\r\nHost: 1wqkor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: app=redesign; cdn_cache_id=b7b4127636; click_id_2=34a252eb-04a5-4af5-9bb1-229f5537e4ad; device-id=ac6852f0-1f3a-41d8-8085-da692c0d729e; __cf_bm=t52cAS_ee57UwsZscQu5pqhWuxDstgoVvB2r59lnvXE-1768781454-1.0.1.1-jTs.VLO.8bkB2RGBbdKbcCVS66DHMkD1AHaZkeIda9E0WjO2EEHNJq4tIWqIJWdqpypAlebzSYiyakEzV7XsDgz8DvNVeya1lm05LLoLWA.0gO1mioOiPka7gCOJv5jU; _cfuvid=WY_tTj6LVl8SXASFiXNwe3H3YhHDmvC.4cvTJQo8Wmo-1768781454357-0.0.1.1-604800000; OTA_device_id=df07a232-af05-4c20-a4c5-97f018a805ea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 19 Jan 2026 00:10:55 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9c021c9dcd1c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20780,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (20780), with no line terminators","md5":"b2fed80d9fb86b4495ae3d27d5d5fecc","sha1":"7fdfa8b1e957076c98c196e25ed36e0582cf4de1","sha256":"7b1d6f1b237acc8bb9d4ccae6d81e149d47e89eba5ed3ca236082c9229fe80eb","sha512":"1086474f5936150012aacf44421eea38ea3eb11709d0a1c747b893260b78a973528faf731f509eb87f0b54bc2b677b5b7518b181ba7271336cfcbc0210af705e","ssdeep":"384:wHwkvBNUjd706MKhUICK2kAGwySstocLaLTmPj8Lpws9Tygmo/Kmo3lXHCr6inE5:rkvB6jd70zGlCK2DTE6y7UpwcygL+Vyg","tlshash":"5d9286ca74d6bb6d812630ec106b6dc7b5bebee52008a514d320d0f8b97570c69fbd68","first_seen":"2026-01-18T23:38:25.810066Z","last_seen":"2026-01-19T00:17:25.714102Z","times_seen":6,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"1wqkor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"1wqkor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invalid.rpki.cloudflare.com/?r=32028183","fqdn":"invalid.rpki.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"103.21.244.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wqkor.com/cdaredirect","date":"2026-01-19T00:10:55.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invalid.rpki.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 13:14:59 GMT","end":"Thu, 26 Feb 2026 14:14:37 GMT"},"fingerprint":{"sha1":"9C:3C:53:19:F0:60:C3:0A:DC:4D:69:BA:C0:EF:56:5B:7A:4C:2B:D6","sha256":"E8:31:16:DF:33:0B:DA:6F:3B:D1:8E:85:28:CD:40:5F:00:DC:0F:CB:4A:D6:4E:16:78:EB:BD:68:66:8B:0F:9A"}}},"request":{"raw":"GET /?r=32028183 HTTP/1.1\r\nHost: invalid.rpki.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1wqkor.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 19 Jan 2026 00:10:55 GMT\r\ncontent-type: application/json\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9c021c9f495d56a8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d98c115f7617c6b5cfc6441ef9674c5e","sha1":"06d8f3f69b633c89171c1f0407b7fc6553b6a415","sha256":"bb65f5571fa5dea0a8d2c614d66e1b0eb5b9b12a2bed2e0fbd001a55f928f700","sha512":"eed53e95894db4fba20b3656820f49e8f7b70ad00e6b633906a5a4dc0dc62f598e2f7f72cf0685cfe04b78d5791bac6d1fa1fdeaafd4bc9abb7aa782286df2bd","ssdeep":"","tlshash":"b8a024c1437c17c71513404c00500d7775f545101055704c0c1c3c4c11c54f3700570f","first_seen":"2025-04-02T02:20:49.301257Z","last_seen":"2026-07-25T13:40:16.943772Z","times_seen":653,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":21,"dns":1,"connect":1,"send":0,"wait":27,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"performance.radar.cloudflare.com/api/beacon","fqdn":"performance.radar.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.31.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wqkor.com/cdaredirect","date":"2026-01-19T00:11:02.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"radar.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 21:26:20 GMT","end":"Fri, 13 Mar 2026 22:26:10 GMT"},"fingerprint":{"sha1":"61:33:68:07:38:0B:09:B8:A9:14:2E:DE:63:8A:A7:29:C1:41:B4:0F","sha256":"D8:84:8C:19:BD:0E:11:4F:E2:19:78:1A:D1:AB:0A:FB:05:61:E7:6A:B9:37:9E:82:83:BB:CB:DC:A2:A5:53:12"}}},"request":{"raw":"POST /api/beacon HTTP/1.1\r\nHost: performance.radar.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=UTF-8\r\nX-Submit-Token: 1768781454-3cbc531bbbf346abc06835ca9d8fd89934e46ab27aca04fd2695d45c6b14e91a\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 6872\r\nOrigin: https://1wqkor.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":6872,"data":"{\"sessionTimeMs\":1768781462063,\"triggerCode\":1015,\"measurements\":[{\"targetEntity\":\"bgp-rpki-valid\",\"preWarmedRequest\":false,\"transferSize\":0,\"failure\":false,\"targetObjectHash\":\"75825144b8c594ba4646df2483e7482886dccf475a00fe97bb2efbf343e979e1\",\"instanceTimeMs\":1768781454777,\"domainLookupStart\":0,\"domainLookupEnd\":0,\"connectStart\":0,\"connectEnd\":0,\"connectSecureStart\":0,\"responseStart\":0,\"requestStart\":0,\"responseEnd\":306,\"encodedBodySize\":0,\"decodedBodySize\":0},{\"targetEntity\":\"bgp-rpki-invalid\",\"preWarmedRequest\":false,\"transferSize\":0,\"failure\":false,\"targetObjectHash\":\"5df3a2de9aef0dc867ae83fd47ff0078f2016999735d337401f771aaedb063e3\",\"instanceTimeMs\":1768781454777,\"domainLookupStart\":0,\"domainLookupEnd\":0,\"connectStart\":0,\"connectEnd\":0,\"connectSecureStart\":0,\"responseStart\":0,\"requestStart\":0,\"responseEnd\":488,\"encodedBodySize\":0,\"decodedBodySize\":0},{\"targetEntity\":\"bunny\",\"preWarmedRequest\":false,\"transferSize\":103356,\"failure\":false,\"targetObjectHash\":\"27bce9e85eaf3567a4695ba2b612e32615394d80d0a3a2dcb07b1fbfdfababc7\",\"instanceTimeMs\":1768781454777,\"domainLookupStart\":560,\"domainLookupEnd\":562,\"connectStart\":562,\"connectEnd\":603,\"connectSecureStart\":566,\"responseStart\":605,\"requestStart\":604,\"responseEnd\":613,\"encodedBodySize\":102400,\"decodedBodySize\":102400,\"connectProtocol\":\"http/2\"},{\"targetEntity\":\"cdnetworks\",\"preWarmedRequest\":false,\"transferSize\":102916,\"failure\":false,\"targetObjectHash\":\"27bce9e85eaf3567a4695ba2b612e32615394d80d0a3a2dcb07b1fbfdfababc7\",\"instanceTimeMs\":1768781454777,\"domainLookupStart\":690,\"domainLookupEnd\":690,\"connectStart\":691,\"connectEnd\":770,\"connectSecureStart\":701,\"responseStart\":778,\"requestStart\":770,\"responseEnd\":789,\"encodedBodySize\":102400,\"decodedBodySize\":102400,\"connectProtocol\":\"http/1.x\"},{\"targetEntity\":\"akamai\",\"preWarmedRequest\":false,\"transferSize\":102853,\"failure\":false,\"targetObjectHash\":\"27bce9e85eaf3567a4695ba2b612e32615394d80d0a3a2dcb07b1fbfdfababc7\",\"instanceTimeMs\":1768781454777,\"domainLookupStart\":875,\"domainLookupEnd\":876,\"connectStart\":876,\"connectEnd\":886,\"connectSecureStart\":879,\"responseStart\":887,\"requestStart\":887,\"responseEnd\":893,\"encodedBodySize\":102400,\"decodedBodySize\":102400,\"connectProtocol\":\"http/1.x\"},{\"targetEntity\":\"fastly\",\"preWarmedRequest\":false,\"transferSize\":103140,\"failure\":false,\"targetObjectHash\":\"27bce9e85eaf3567a4695ba2b612e32615394d80d0a3a2dcb07b1fbfdfababc7\",\"instanceTimeMs\":1768781454777,\"domainLookupStart\":970,\"domainLookupEnd\":970,\"connectStart\":970,\"connectEnd\":1006,\"connectSecureStart\":987,\"responseStart\":1020,\"requestStart\":1006,\"responseEnd\":1040,\"encodedBodySize\":102400,\"decodedBodySize\":102400,\"connectProtocol\":\"http/2\"},{\"targetEntity\":\"cloudflare\",\"preWarmedRequest\":false,\"transferSize\":103506,\"failure\":false,\"targetObjectHash\":\"27bce9e85eaf3567a4695ba2b612e32615394d80d0a3a2dcb07b1fbfdfababc7\",\"instanceTimeMs\":1768781454777,\"domainLookupStart\":1105,\"domainLookupEnd\":1107,\"connectStart\":1107,\"connectEnd\":1117,\"connectSecureStart\":1110,\"responseStart\":1127,\"requestStart\":1118,\"responseEnd\":1131,\"encodedBodySize\":102400,\"decodedBodySize\":102400,\"connectProtocol\":\"http/2\"},{\"targetEntity\":\"fastly-c\",\"preWarmedRequest\":false,\"transferSize\":103551,\"failure\":false,\"targetObjectHash\":\"27bce9e85eaf3567a4695ba2b612e32615394d80d0a3a2dcb07b1fbfdfababc7\",\"instanceTimeMs\":1768781454777,\"domainLookupStart\":1199,\"domainLookupEnd\":1199,\"connectStart\":1200,\"connectEnd\":1247,\"connectSecureStart\":1215,\"responseStart\":1260,\"requestStart\":1247,\"responseEnd\":1278,\"encodedBodySize\":102400,\"decodedBodySize\":102400,\"connectProtocol\":\"http/1.x\"},{\"targetEntity\":\"cdn-cloudflare-cp-b\",\"preWarmedRequest\":false,\"transferSize\":102758,\"failure\":false,\"targetObjectHash\":\"27bce9e85eaf3567a4695ba2b612e32615394d80d0a3a2dcb07b1fbfdfababc7\",\"instanceTimeMs\":1768781454777,\"domainLookupStart\":1335,\"domainLookupEnd\":1335,\"connectStart\":1335,\"connectEnd\":1349,\"connectSecureStart\":1338,\"responseStart\":1351,\"requestStart\":1350,\"responseEnd\":1362,\"encodedBodySize\":102400,\"decodedBodySize\":102400,\"connectProtocol\":\"http/2\"},{\"targetEntity\":\"cdn-cloudflare-cp-c\",\"preWarmedRequest\":false,\"transferSize\":102758,\"failure\":false,\"targetObjectHash\":\"27bce9e85eaf3567a4695ba2b612e32615394d80d0a3a2dcb07b1fbfdfababc7\",\"instanceTimeMs\":1768781454777,\"domainLookupStart\":1422,\"domainLookupEnd\":1422,\"connectStart\":1423,\"connectEnd\":1441,\"connectSecureStart\":1427,\"responseStart\":1444,\"requestStart\":1441,\"responseEnd\":1448,\"encodedBodySize\":102400,\"decodedBodySize\":102400,\"connectProtocol\":\"http/2\"},{\"targetEntity\":\"cdn-cloudflare-cp\",\"preWarmedRequest\":false,\"transferSize\":102758,\"failure\":false,\"targetObjectHash\":\"27bce9e85eaf3567a4695ba2b612e32615394d80d0a3a2dcb07b1fbfdfababc7\",\"instanceTimeMs\":1768781454777,\"domainLookupStart\":1518,\"domainLookupEnd\":1519,\"connectStart\":1519,\"connectEnd\":1539,\"connectSecureStart\":1522,\"responseStart\":1542,\"requestStart\":1539,\"responseEnd\":1546,\"encodedBodySize\":102400,\"decodedBodySize\":102400,\"connectProtocol\":\"http/2\"},{\"targetEntity\":\"akamai-c\",\"preWarmedRequest\":false,\"transferSize\":102887,\"failure\":false,\"targetObjectHash\":\"27bce9e85eaf3567a4695ba2b612e32615394d80d0a3a2dcb07b1fbfdfababc7\",\"instanceTimeMs\":1768781454777,\"domainLookupStart\":1619,\"domainLookupEnd\":1619,\"connectStart\":1620,\"connectEnd\":1652,\"connectSecureStart\":1623,\"responseStart\":1652,\"requestStart\":1652,\"responseEnd\":1657,\"encodedBodySize\":102400,\"decodedBodySize\":102400,\"connectProtocol\":\"http/1.x\"},{\"targetEntity\":\"google\",\"preWarmedRequest\":false,\"transferSize\":102695,\"failure\":false,\"targetObjectHash\":\"27bce9e85eaf3567a4695ba2b612e32615394d80d0a3a2dcb07b1fbfdfababc7\",\"instanceTimeMs\":1768781454777,\"domainLookupStart\":1726,\"domainLookupEnd\":1726,\"connectStart\":1726,\"connectEnd\":1867,\"connectSecureStart\":1758,\"responseStart\":1901,\"requestStart\":1867,\"responseEnd\":1971,\"encodedBodySize\":102400,\"decodedBodySize\":102400,\"connectProtocol\":\"http/2\"},{\"targetEntity\":\"cf-ipv6-only-check\",\"preWarmedRequest\":false,\"transferSize\":0,\"connectIPVersion\":6,\"failure\":true,\"targetObjectHash\":\"dbe3846380a3025d82cad863cc8e74fb0b7ab8928ecd40906d257108575e1fde\",\"instanceTimeMs\":0,\"responseRegion\":\"\",\"domainLookupStart\":0,\"domainLookupEnd\":0,\"connectStart\":0,\"connectEnd\":0,\"connectSecureStart\":0,\"responseStart\":0,\"requestStart\":0,\"responseEnd\":0,\"encodedBodySize\":0,\"decodedBodySize\":0,\"serverTimeMs\":0,\"connectProtocol\":\"n/a\"},{\"targetEntity\":\"cf-ipv4-only-check\",\"preWarmedRequest\":false,\"transferSize\":966,\"connectIPVersion\":4,\"responseRegion\":\"OSL\",\"failure\":false,\"targetObjectHash\":\"c058e642500f6cfa358c0445dce3e6e9f8a129f11a71c108f5887360aff394bf\",\"instanceTimeMs\":1768781454777,\"domainLookupStart\":7130,\"domainLookupEnd\":7134,\"connectStart\":7134,\"connectEnd\":7156,\"connectSecureStart\":7138,\"responseStart\":7180,\"requestStart\":7156,\"responseEnd\":7181,\"encodedBodySize\":155,\"decodedBodySize\":222,\"connectProtocol\":\"http/2\"}]}"}},"response":{"raw":"HTTP/3 429 Too Many Requests\r\ndate: Mon, 19 Jan 2026 00:11:02 GMT\r\ncontent-type: application/json\r\ncontent-length: 53\r\nretry-after: 43\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=XfS8Xpr3OgpdIZPjav_zhzaVRnpaPRgqsE0UDgW7wPM-1768781462-1.0.1.1-FU6xCge0XFlIGzCmeRehGwlJNhJ4GzC3bgApfdfVFf_NfIrlbh0U6yODK.g4LPYyLMxrChTZYrm21PWQRCLriVBp2PbplDKiavJ8zGOXlmo; path=/; expires=Mon, 19-Jan-26 00:41:02 GMT; domain=.radar.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9c021cca39118deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1b9dd2b0f5ba0a371688135c0259f4e6","sha1":"40cdeda81162ab8e3e6636f1d6f8d6e08a9cbbf1","sha256":"4c2c90a47e3e3d04029cb97d6377031903c53f4d4d01c5ea7bde6ee643580e42","sha512":"0e31ccced25841097f3b4e28d062af0e00010b9fa559fa3081b3fe76437a1d1a5eb27e755a1f5095b10afe145c1b5c1436d0d1f5e954c60a6b7128003c95d0a1","ssdeep":"","tlshash":"6c900260904a2c2f07c114022511949036a106a1441561a975ec4494b15caa1d409645","first_seen":"2023-05-01T12:49:00Z","last_seen":"2026-07-25T08:11:35.298041Z","times_seen":272,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wqkor.com/cdn-cgi/styles/main.css","fqdn":"1wqkor.com","domain":"1wqkor.com","tld":"com"},"ip":{"addr":"194.67.193.1","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1wqkor.com/cdaredirect","date":"2026-01-19T00:10:54.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wqkor.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 07:45:04 GMT","end":"Sat, 04 Apr 2026 08:44:53 GMT"},"fingerprint":{"sha1":"2C:61:50:71:0D:E9:4D:A4:97:D5:91:9A:41:BB:4F:2E:0D:2F:32:7F","sha256":"9A:7A:9A:87:D8:E1:CD:C0:F9:B1:F9:54:FA:39:30:15:37:2A:27:68:22:1C:87:23:A6:E9:6E:D2:A9:60:A1:2D"}}},"request":{"raw":"GET /cdn-cgi/styles/main.css HTTP/1.1\r\nHost: 1wqkor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1wqkor.com/cdaredirect\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: app=redesign; cdn_cache_id=b7b4127636; click_id_2=34a252eb-04a5-4af5-9bb1-229f5537e4ad; device-id=ac6852f0-1f3a-41d8-8085-da692c0d729e; __cf_bm=t52cAS_ee57UwsZscQu5pqhWuxDstgoVvB2r59lnvXE-1768781454-1.0.1.1-jTs.VLO.8bkB2RGBbdKbcCVS66DHMkD1AHaZkeIda9E0WjO2EEHNJq4tIWqIJWdqpypAlebzSYiyakEzV7XsDgz8DvNVeya1lm05LLoLWA.0gO1mioOiPka7gCOJv5jU; _cfuvid=WY_tTj6LVl8SXASFiXNwe3H3YhHDmvC.4cvTJQo8Wmo-1768781454357-0.0.1.1-604800000; OTA_device_id=df07a232-af05-4c20-a4c5-97f018a805ea\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 19 Jan 2026 00:10:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 06 Jan 2026 10:35:21 GMT\r\netag: W/\"695ce569-1f4d\"\r\nserver: cloudflare\r\ncf-ray: 9c021c9cfbd823eb-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nexpires: Mon, 19 Jan 2026 02:10:54 GMT\r\ncache-control: max-age=7200, public\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8013,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8012)","md5":"ff26f59e28a5fe6ea4ab23586415696b","sha1":"4182675484d175e363cd34b43041b7b1af93d0cd","sha256":"d30b4ea6f68456672f5abb35e9dcf7d54226372b66e9d60a7ee26b7a52568e74","sha512":"92c58eef6d1f885806450acd2927c57ebea2e8762c98b0826192555674bd4478e42add192834285d5934c0a76db8eac5eee1a65dc34b6f69246fad6c91a5fba4","ssdeep":"96:1jMh3JNJinvaE5TQRGxfldudududEtCbnaimpSpIplDO6bU6b16bE6bb6bNdkd94:1jMFJiva655dimwqjlP0/mGTZxRbC","tlshash":"75f1851bbf49104e3023886ae2c5a78d912dd282ee535bfff7173561cbc52fa1552b24","first_seen":"2023-04-05T04:39:40Z","last_seen":"2026-07-27T03:59:33.062531Z","times_seen":97297,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"1wqkor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"1wqkor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"performance.radar.cloudflare.com/beacon.js","fqdn":"performance.radar.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.31.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1wqkor.com/cdaredirect","date":"2026-01-19T00:10:54.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"radar.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 21:26:20 GMT","end":"Fri, 13 Mar 2026 22:26:10 GMT"},"fingerprint":{"sha1":"61:33:68:07:38:0B:09:B8:A9:14:2E:DE:63:8A:A7:29:C1:41:B4:0F","sha256":"D8:84:8C:19:BD:0E:11:4F:E2:19:78:1A:D1:AB:0A:FB:05:61:E7:6A:B9:37:9E:82:83:BB:CB:DC:A2:A5:53:12"}}},"request":{"raw":"GET /beacon.js HTTP/1.1\r\nHost: performance.radar.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 19 Jan 2026 00:10:54 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: no-store, max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nreferrer-policy: no-referrer\r\ntiming-allow-origin: *\r\nset-cookie: __cf_bm=338fJ3qKvzIMQG5J6UvMgE4Ls.ppIhusnxAzjAYcd4s-1768781454-1.0.1.1-7MLA2Hi0e94T4T0yU.BFziTVVHlAB4rcqgaqlf7rp78g0w.fLaVtBpfH8aOKWY8O1oFD3i9Jtg025bs2dN32yvVtTaSm1yOZ2conNkvUxlA; path=/; expires=Mon, 19-Jan-26 00:40:54 GMT; domain=.radar.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9c021c9d1f1ec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":9177,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9176)","md5":"07385f81a31c8f0c475c6481290b4994","sha1":"ca9b922d4d2ca0688acfe89109144ab8a63457e1","sha256":"a2e6e40bac61c44227b899d6d0c1691f23209454d492c133b7da9f88e6444eea","sha512":"de42f2fe9a2a57000dc79ecf6a02dd3f4ba3936a2c03068b56e90b27e4cd2905e5b20670ed1f2e82bfe93f04aaae67d7232db7ea9cd2f5366091df8008200af2","ssdeep":"192:qWTavxSxKBV/oRks10BINTAPAWVZb7+ZRNVFBZyvPI8HqWLeTnFNmuQjmfE:q0avxSxKBV/0ks6usZWZRNVFBZyvPI8F","tlshash":"56120a7317680a42cf8604d1405af36f766bb14607c1969fb21fcc6b2268fd3b6e635a","first_seen":"2026-01-19T00:11:21.492647Z","last_seen":"2026-01-19T00:11:21.492647Z","times_seen":1,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":20,"dns":1,"connect":1,"send":0,"wait":20,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"essl-cdxs.edgekey.net/img/r20-100KB.png?r=76882617","fqdn":"essl-cdxs.edgekey.net","domain":"essl-cdxs.edgekey.net","tld":"edgekey.net"},"ip":{"addr":"23.33.119.73","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wqkor.com/cdaredirect","date":"2026-01-19T00:10:55.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"essl-cdxs.test.edgekey.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 00:33:46 GMT","end":"Fri, 20 Mar 2026 00:33:45 GMT"},"fingerprint":{"sha1":"EA:60:06:75:F2:6B:33:5F:BB:D2:24:61:FF:86:D4:A2:3C:81:6F:2D","sha256":"F1:8F:2C:C8:66:AA:10:D2:A0:BF:0A:C6:D1:61:61:1C:44:C8:A5:56:B2:51:97:83:74:79:C4:A9:34:42:A9:0C"}}},"request":{"raw":"GET /img/r20-100KB.png?r=76882617 HTTP/1.1\r\nHost: essl-cdxs.edgekey.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 102400\r\nServer: nginx\r\nLast-Modified: Wed, 07 Sep 2022 08:47:01 GMT\r\nETag: \"63185a85-19000\"\r\nAccess-Control-Allow-Origin: *\r\nTiming-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=2568555\r\nExpires: Tue, 17 Feb 2026 17:40:10 GMT\r\nDate: Mon, 19 Jan 2026 00:10:55 GMT\r\nConnection: keep-alive\r\nX-Cache: RequestInfo=3378497917,23.33.119.69,2d6eaa1,1768781455,44087,0,11497c5\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":102400,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 310 x 205, 8-bit/color RGBA, non-interlaced","md5":"f134fda98a277b1c8f20ab8fbe2fbd58","sha1":"a922796190a1f5bbb3c410c6ec591502050df04e","sha256":"27bce9e85eaf3567a4695ba2b612e32615394d80d0a3a2dcb07b1fbfdfababc7","sha512":"2b2e8338afb9b0ca9b5fa3d452dfd80368b5d17566120ae6351b6d03572e5a69cedb97f165fbc31ffb3addcc00506a3fc0761cf2404a5d9826a8448a7c4d9f17","ssdeep":"3072:fd/tI0TeVA5o0VgTuGmxrMRZ6aLxuC+Gtn5HBZ4I/:f81VAMuGMrMX6Mxu9+fCo","tlshash":"08a312846579cdbe5edc1d06ab21ed4ca2be53f66b5e367483100e054ff4fb49ab0288","first_seen":"2023-04-05T15:46:51Z","last_seen":"2026-07-26T08:29:33.087828Z","times_seen":3279,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":11,"dns":1,"connect":1,"send":0,"wait":3,"receive":3,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fastly.jsdelivr.net/gh/jimaek/testobjects@0.0.1/r20-100KB.png?r=5676469","fqdn":"fastly.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wqkor.com/cdaredirect","date":"2026-01-19T00:10:55.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/jimaek/testobjects@0.0.1/r20-100KB.png?r=5676469 HTTP/1.1\r\nHost: fastly.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/png\r\nx-jsd-version: 0.0.1\r\nx-jsd-version-type: version\r\netag: W/\"19000-qSJ5YZCh9buzxBDG7FkVAgUN8E4\"\r\naccept-ranges: bytes\r\ndate: Mon, 19 Jan 2026 00:10:55 GMT\r\nage: 2314095\r\nx-served-by: cache-fra-eddf8230053-FRA, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 102400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102400,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 310 x 205, 8-bit/color RGBA, non-interlaced","md5":"f134fda98a277b1c8f20ab8fbe2fbd58","sha1":"a922796190a1f5bbb3c410c6ec591502050df04e","sha256":"27bce9e85eaf3567a4695ba2b612e32615394d80d0a3a2dcb07b1fbfdfababc7","sha512":"2b2e8338afb9b0ca9b5fa3d452dfd80368b5d17566120ae6351b6d03572e5a69cedb97f165fbc31ffb3addcc00506a3fc0761cf2404a5d9826a8448a7c4d9f17","ssdeep":"3072:fd/tI0TeVA5o0VgTuGmxrMRZ6aLxuC+Gtn5HBZ4I/:f81VAMuGMrMX6Mxu9+fCo","tlshash":"08a312846579cdbe5edc1d06ab21ed4ca2be53f66b5e367483100e054ff4fb49ab0288","first_seen":"2023-04-05T15:46:51Z","last_seen":"2026-07-26T08:29:33.087828Z","times_seen":3279,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":37,"dns":0,"connect":13,"send":0,"wait":13,"receive":21,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"benchmarks.cdn-b.compute-pipe.com/r20-100KB.png?r=25937074","fqdn":"benchmarks.cdn-b.compute-pipe.com","domain":"compute-pipe.com","tld":"com"},"ip":{"addr":"172.66.0.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wqkor.com/cdaredirect","date":"2026-01-19T00:10:56.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-b.compute-pipe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 12:48:50 GMT","end":"Sat, 28 Mar 2026 13:48:48 GMT"},"fingerprint":{"sha1":"1E:BD:5F:03:1F:D4:0A:76:33:C8:52:50:40:35:85:B3:F4:47:03:F2","sha256":"FD:0F:BD:E1:9F:ED:1D:59:C8:3D:E1:F1:E8:A4:23:59:6A:FF:21:C1:3F:7F:3E:19:A0:E9:0E:2A:2F:E5:EA:60"}}},"request":{"raw":"GET /r20-100KB.png?r=25937074 HTTP/1.1\r\nHost: benchmarks.cdn-b.compute-pipe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 19 Jan 2026 00:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 102400\r\ncf-cache-status: HIT\r\ncache-control: no-store\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\nx-source: Cloudflare Radar\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 9c021ca4cfb20731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102400,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 310 x 205, 8-bit/color RGBA, non-interlaced","md5":"f134fda98a277b1c8f20ab8fbe2fbd58","sha1":"a922796190a1f5bbb3c410c6ec591502050df04e","sha256":"27bce9e85eaf3567a4695ba2b612e32615394d80d0a3a2dcb07b1fbfdfababc7","sha512":"2b2e8338afb9b0ca9b5fa3d452dfd80368b5d17566120ae6351b6d03572e5a69cedb97f165fbc31ffb3addcc00506a3fc0761cf2404a5d9826a8448a7c4d9f17","ssdeep":"3072:fd/tI0TeVA5o0VgTuGmxrMRZ6aLxuC+Gtn5HBZ4I/:f81VAMuGMrMX6Mxu9+fCo","tlshash":"08a312846579cdbe5edc1d06ab21ed4ca2be53f66b5e367483100e054ff4fb49ab0288","first_seen":"2023-04-05T15:46:51Z","last_seen":"2026-07-26T08:29:33.087828Z","times_seen":3279,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":15,"dns":0,"connect":1,"send":0,"wait":2,"receive":11,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cedexis-test.akamaized.net/img/r20-100KB.png?r=26988219","fqdn":"cedexis-test.akamaized.net","domain":"cedexis-test.akamaized.net","tld":"akamaized.net"},"ip":{"addr":"23.36.76.99","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wqkor.com/cdaredirect","date":"2026-01-19T00:10:56.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 18 Mar 2025 00:00:00 GMT","end":"Wed, 18 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"51:B3:16:11:9C:44:F0:40:BC:CE:8A:C0:3A:1A:D3:BB:C6:47:40:B3","sha256":"BA:56:C4:EE:2A:1C:8D:B7:10:BF:E7:3A:1F:A3:E4:B0:AD:3F:29:0D:01:92:58:9B:8C:71:DE:44:99:61:C6:96"}}},"request":{"raw":"GET /img/r20-100KB.png?r=26988219 HTTP/1.1\r\nHost: cedexis-test.akamaized.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nContent-Length: 102400\r\nServer: nginx\r\nLast-Modified: Wed, 07 Sep 2022 08:47:01 GMT\r\nETag: \"63185a85-19000\"\r\nAccess-Control-Allow-Origin: *\r\nTiming-Allow-Origin: *\r\nX-Content-Type-Options: nosniff\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=2629743\r\nExpires: Wed, 18 Feb 2026 10:39:59 GMT\r\nDate: Mon, 19 Jan 2026 00:10:56 GMT\r\nConnection: keep-alive\r\nX-Cache: RequestInfo=3378497917,23.36.76.99,576ffcbb,1768781456,38060,0,175f6ea0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":102400,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 310 x 205, 8-bit/color RGBA, non-interlaced","md5":"f134fda98a277b1c8f20ab8fbe2fbd58","sha1":"a922796190a1f5bbb3c410c6ec591502050df04e","sha256":"27bce9e85eaf3567a4695ba2b612e32615394d80d0a3a2dcb07b1fbfdfababc7","sha512":"2b2e8338afb9b0ca9b5fa3d452dfd80368b5d17566120ae6351b6d03572e5a69cedb97f165fbc31ffb3addcc00506a3fc0761cf2404a5d9826a8448a7c4d9f17","ssdeep":"3072:fd/tI0TeVA5o0VgTuGmxrMRZ6aLxuC+Gtn5HBZ4I/:f81VAMuGMrMX6Mxu9+fCo","tlshash":"08a312846579cdbe5edc1d06ab21ed4ca2be53f66b5e367483100e054ff4fb49ab0288","first_seen":"2023-04-05T15:46:51Z","last_seen":"2026-07-26T08:29:33.087828Z","times_seen":3279,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":32,"dns":1,"connect":1,"send":0,"wait":2,"receive":3,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1wqkor.com/cdaredirect","fqdn":"1wqkor.com","domain":"1wqkor.com","tld":"com"},"ip":{"addr":"194.67.193.1","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-19T00:10:54.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wqkor.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 07:45:04 GMT","end":"Sat, 04 Apr 2026 08:44:53 GMT"},"fingerprint":{"sha1":"2C:61:50:71:0D:E9:4D:A4:97:D5:91:9A:41:BB:4F:2E:0D:2F:32:7F","sha256":"9A:7A:9A:87:D8:E1:CD:C0:F9:B1:F9:54:FA:39:30:15:37:2A:27:68:22:1C:87:23:A6:E9:6E:D2:A9:60:A1:2D"}}},"request":{"raw":"POST /cdaredirect HTTP/1.1\r\nHost: 1wqkor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 237\r\nOrigin: https://1wqkor.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1wqkor.com/\r\nCookie: app=redesign; cdn_cache_id=b7b4127636; click_id_2=34a252eb-04a5-4af5-9bb1-229f5537e4ad; device-id=ac6852f0-1f3a-41d8-8085-da692c0d729e; __cf_bm=t52cAS_ee57UwsZscQu5pqhWuxDstgoVvB2r59lnvXE-1768781454-1.0.1.1-jTs.VLO.8bkB2RGBbdKbcCVS66DHMkD1AHaZkeIda9E0WjO2EEHNJq4tIWqIJWdqpypAlebzSYiyakEzV7XsDgz8DvNVeya1lm05LLoLWA.0gO1mioOiPka7gCOJv5jU; _cfuvid=WY_tTj6LVl8SXASFiXNwe3H3YhHDmvC.4cvTJQo8Wmo-1768781454357-0.0.1.1-604800000; OTA_device_id=df07a232-af05-4c20-a4c5-97f018a805ea\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":237,"data":"initurl=https%3A%2F%2F1wqkor.com%2F%3Fcda_id%3D3c8218928b20b422299a7d3c9db75a7e%26redirect_data%3DeyJ0eXBlIjoiYXV0aCIsInJlZGlyZWN0U3RhcnRUaW1lIjoxNzY4NzgxNDU0NzQzLCJkb21haW5DaGVja0R1cmF0aW9uIjoxMTB9\u0026cdaId=3c8218928b20b422299a7d3c9db75a7e"}},"response":{"raw":"HTTP/3 429 Too Many Requests\r\ndate: Mon, 19 Jan 2026 00:10:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nretry-after: 0\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: same-origin\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Disposition, Type, X-External-Partner-Id, X-Lang, Token\r\naccess-control-allow-methods: GET, OPTIONS, PUT, POST\r\naccess-control-allow-origin: https://1wqkor.com\r\naccess-control-max-age: 600\r\nserver: cloudflare\r\ncf-ray: 9c021c9c8b0f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6635,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (945)","md5":"4b5d4ab694e33b20b44f7d204e24ca10","sha1":"b27510a89a4c29144c2c660a452a363af2e80731","sha256":"d74ad5b26c7f74f12a8fdb6775e05da59eeb75c28cd449ee07756d547c3a6cae","sha512":"0587b0a48a20df59cf00005b51b090bfd31f9baf81ffefa06b10573621407199899ca5a7bd14ad42f5b9819251360cac2c5c596845c2a9caf7b18c38b785dd7c","ssdeep":"192:1j9jhjYjQLK/kaawlVUzpzh8e10/rl9ieJNnx/k:y/hBVI8/rl9ieznx/k","tlshash":"e7d1a462f9b8263e0193c26731aee7593df48023eea700d0b6adc4761f9df81ad07585","first_seen":"2026-01-19T00:11:21.493605Z","last_seen":"2026-01-19T00:11:21.493605Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"1wqkor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"1wqkor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wqkor.com/api/web/v1/tracker","fqdn":"1wqkor.com","domain":"1wqkor.com","tld":"com"},"ip":{"addr":"194.67.193.1","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://1wqkor.com/","date":"2026-01-19T00:10:54.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wqkor.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 07:45:04 GMT","end":"Sat, 04 Apr 2026 08:44:53 GMT"},"fingerprint":{"sha1":"2C:61:50:71:0D:E9:4D:A4:97:D5:91:9A:41:BB:4F:2E:0D:2F:32:7F","sha256":"9A:7A:9A:87:D8:E1:CD:C0:F9:B1:F9:54:FA:39:30:15:37:2A:27:68:22:1C:87:23:A6:E9:6E:D2:A9:60:A1:2D"}}},"request":{"raw":"POST /api/web/v1/tracker HTTP/1.1\r\nHost: 1wqkor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 1356\r\nOrigin: https://1wqkor.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1wqkor.com/\r\nCookie: app=redesign; cdn_cache_id=b7b4127636; click_id_2=34a252eb-04a5-4af5-9bb1-229f5537e4ad; device-id=ac6852f0-1f3a-41d8-8085-da692c0d729e; __cf_bm=t52cAS_ee57UwsZscQu5pqhWuxDstgoVvB2r59lnvXE-1768781454-1.0.1.1-jTs.VLO.8bkB2RGBbdKbcCVS66DHMkD1AHaZkeIda9E0WjO2EEHNJq4tIWqIJWdqpypAlebzSYiyakEzV7XsDgz8DvNVeya1lm05LLoLWA.0gO1mioOiPka7gCOJv5jU; _cfuvid=WY_tTj6LVl8SXASFiXNwe3H3YhHDmvC.4cvTJQo8Wmo-1768781454357-0.0.1.1-604800000; OTA_device_id=df07a232-af05-4c20-a4c5-97f018a805ea\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1356,"data":"{\"events\":[{\"url\":\"https://1wqkor.com/\",\"sessionId\":\"3c8218928b20b422299a7d3c9db75a7e\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"level\":\"info\",\"category\":\"app\",\"type\":\"init\",\"name\":\"html\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.2474.0\",\"environment\":\"production\",\"createdAt\":\"2026-01-19T00:10:54.627Z\"},{\"url\":\"https://1wqkor.com/\",\"sessionId\":\"3c8218928b20b422299a7d3c9db75a7e\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"level\":\"info\",\"category\":\"cda\",\"type\":\"domain_check\",\"name\":\"started\",\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.2474.0\",\"environment\":\"production\",\"createdAt\":\"2026-01-19T00:10:54.631Z\"},{\"url\":\"https://1wqkor.com/\",\"sessionId\":\"3c8218928b20b422299a7d3c9db75a7e\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"level\":\"info\",\"category\":\"cda\",\"type\":\"domain_check\",\"name\":\"finished\",\"params\":[110],\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.2474.0\",\"environment\":\"production\",\"createdAt\":\"2026-01-19T00:10:54.742Z\"},{\"url\":\"https://1wqkor.com/\",\"sessionId\":\"3c8218928b20b422299a7d3c9db75a7e\",\"stream\":\"WLP\",\"project\":\"frontend-shell\",\"level\":\"info\",\"category\":\"cda\",\"type\":\"redirect\",\"name\":\"auth\",\"params\":[\"3c8218928b20b422299a7d3c9db75a7e\"],\"schema\":\"ecs\",\"serviceNamespace\":\"frontend\",\"appVersion\":\"0.2474.0\",\"environment\":\"production\",\"createdAt\":\"2026-01-19T00:10:54.742Z\"}]}"}},"response":{"raw":"HTTP/3 429 Too Many Requests\r\ndate: Mon, 19 Jan 2026 00:10:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nretry-after: 0\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: same-origin\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Disposition, Type, X-External-Partner-Id, X-Lang, Token\r\naccess-control-allow-methods: GET, OPTIONS, PUT, POST\r\naccess-control-allow-origin: https://1wqkor.com\r\naccess-control-max-age: 600\r\nserver: cloudflare\r\ncf-ray: 9c021c9cdbac23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6635,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (945)","md5":"c594de04efc9588b32f72ed82ba0934a","sha1":"6ac01660013b17d9577abbec204b72f2865fdde4","sha256":"6d61545d44ad65d87759bbccca1ffc848f5cd513d30eeb43c579516bb35494ec","sha512":"63a8b42b3604d22d402c5dbc9f489290ca25188eddbc5cba4d190e2522d2454f4098d087ca64926a86fed66ed580696fbb73dc16b17ef4f8472804cf84a4c103","ssdeep":"192:1j9jhjYjQLK/kaawlVUzPzh8e10prl9ieJvnx/k:y/hBVy8prl9ielnx/k","tlshash":"e4d1a462f9bc263e0193826731aee7593df48023eea700d0b6adc4761f8df81ad07595","first_seen":"2026-01-19T00:11:21.494463Z","last_seen":"2026-01-19T00:11:21.494463Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"1wqkor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"1wqkor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wqkor.com/favicon.ico","fqdn":"1wqkor.com","domain":"1wqkor.com","tld":"com"},"ip":{"addr":"194.67.193.1","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wqkor.com/cdaredirect","date":"2026-01-19T00:10:55.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wqkor.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 07:45:04 GMT","end":"Sat, 04 Apr 2026 08:44:53 GMT"},"fingerprint":{"sha1":"2C:61:50:71:0D:E9:4D:A4:97:D5:91:9A:41:BB:4F:2E:0D:2F:32:7F","sha256":"9A:7A:9A:87:D8:E1:CD:C0:F9:B1:F9:54:FA:39:30:15:37:2A:27:68:22:1C:87:23:A6:E9:6E:D2:A9:60:A1:2D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 1wqkor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1wqkor.com/cdaredirect\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: app=redesign; cdn_cache_id=b7b4127636; click_id_2=34a252eb-04a5-4af5-9bb1-229f5537e4ad; device-id=ac6852f0-1f3a-41d8-8085-da692c0d729e; __cf_bm=t52cAS_ee57UwsZscQu5pqhWuxDstgoVvB2r59lnvXE-1768781454-1.0.1.1-jTs.VLO.8bkB2RGBbdKbcCVS66DHMkD1AHaZkeIda9E0WjO2EEHNJq4tIWqIJWdqpypAlebzSYiyakEzV7XsDgz8DvNVeya1lm05LLoLWA.0gO1mioOiPka7gCOJv5jU; _cfuvid=WY_tTj6LVl8SXASFiXNwe3H3YhHDmvC.4cvTJQo8Wmo-1768781454357-0.0.1.1-604800000; OTA_device_id=df07a232-af05-4c20-a4c5-97f018a805ea\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 Too Many Requests\r\ndate: Mon, 19 Jan 2026 00:10:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 5697\r\nretry-after: 0\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: same-origin\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Disposition, Type, X-External-Partner-Id, X-Lang, Token\r\naccess-control-allow-methods: GET, OPTIONS, PUT, POST\r\naccess-control-max-age: 600\r\nserver: cloudflare\r\ncf-ray: 9c021c9e2dbd23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5697,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (501)","md5":"3bf47e948c3bf70778d7e885f2633eea","sha1":"d36571e0a5edf5facb564524fc9495a0d68d8778","sha256":"95d66f66805089d00cf9b3a4cc917c88948ab9af58a38578fcc580abbc15fe36","sha512":"b205bbe29962dda41dc8aecd4d48b9edde10f5a01abda10fc4815484669107998cbaae6b851a88f3f0817de0f5f89db0ed6ba798726dc2c7b8d1c2a94a28e72e","ssdeep":"96:1j9jwIjYjQ/DK/D6laa+mXOlQUpp8HlvwojwodDh+dPaeDvZU0maSrR79PaQxJb0:1j9jhjYjQLK/kaawlVUzjze8e10Frl9k","tlshash":"a7c18562f9f8267e0193826331ada71979e4c023dea704e1b69dc0761f9de85fe07181","first_seen":"2026-01-19T00:11:21.495161Z","last_seen":"2026-01-19T00:11:21.495161Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"1wqkor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"1wqkor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1wqkor.com/cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.15046540586809656:1768778012:2RFhxzKMQTVpDUModUK99pIdyhJDAuzq9Iw6xKYurLg/9c021c9c8b0f23eb","fqdn":"1wqkor.com","domain":"1wqkor.com","tld":"com"},"ip":{"addr":"194.67.193.1","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1wqkor.com/cdaredirect","date":"2026-01-19T00:10:55.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1wqkor.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 07:45:04 GMT","end":"Sat, 04 Apr 2026 08:44:53 GMT"},"fingerprint":{"sha1":"2C:61:50:71:0D:E9:4D:A4:97:D5:91:9A:41:BB:4F:2E:0D:2F:32:7F","sha256":"9A:7A:9A:87:D8:E1:CD:C0:F9:B1:F9:54:FA:39:30:15:37:2A:27:68:22:1C:87:23:A6:E9:6E:D2:A9:60:A1:2D"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.15046540586809656:1768778012:2RFhxzKMQTVpDUModUK99pIdyhJDAuzq9Iw6xKYurLg/9c021c9c8b0f23eb HTTP/1.1\r\nHost: 1wqkor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12141\r\nOrigin: https://1wqkor.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1wqkor.com/cdaredirect\r\nCookie: app=redesign; cdn_cache_id=b7b4127636; click_id_2=34a252eb-04a5-4af5-9bb1-229f5537e4ad; device-id=ac6852f0-1f3a-41d8-8085-da692c0d729e; __cf_bm=t52cAS_ee57UwsZscQu5pqhWuxDstgoVvB2r59lnvXE-1768781454-1.0.1.1-jTs.VLO.8bkB2RGBbdKbcCVS66DHMkD1AHaZkeIda9E0WjO2EEHNJq4tIWqIJWdqpypAlebzSYiyakEzV7XsDgz8DvNVeya1lm05LLoLWA.0gO1mioOiPka7gCOJv5jU; _cfuvid=WY_tTj6LVl8SXASFiXNwe3H3YhHDmvC.4cvTJQo8Wmo-1768781454357-0.0.1.1-604800000; OTA_device_id=df07a232-af05-4c20-a4c5-97f018a805ea\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12141,"data":"3CRHv-NJiob9N9+hw4BNxi9a+5R+s+1HfmUHiZ+uHSxitxr1yO+KH3x-mr+h+DD+ZOrG+OFi$t+oxilxQ1ERNSS17R+7qq++oM+3AmuE+hOHiVfbsk3uu+hBjcz92a8f+f0zpZifLoRDf0SbF+b73mUW1HHVDg64f6fbG+BRN3ovRRDz-C5UPr5Uo+Zc1gSSGimH+cq-CE6R3UQQqb33F+wYB+vFNzPs9+Owk$uI+heAp-UaRqW97nUvF+w7R+b2Zrlywcsyx+h4kcpIBz+H+1qH9Fxu++Lc2BLuNcMU+QVHDuMmCc57F+z7RxNCcbo0Dsz2Cy1M+1fGqRsHxF+Nlw4oNzHpZ1aZvaf+hM0+VWJcf+ivU5ZTfDuzf+cu2gRzIY-nwpDwpMc2NzzQLpPRmthlPo05zz8WF+iOV$i+RqcPInkB+RuIF0zISztbNc3Ijoz7zOkRm4vgHI1Qc2+Vf2P++o2PQkiCqfCDrpWByWRr$YpMfn0iFsJD5aIpMpD5X1pm$9j$JHN-MMqlP-3e3cAtR+FjB4AzPNz39ylz82Phla8Kp6Hw62hkvmS79V8IEgWhlnuODBzmXpGIIUI48y8-+jMMwtBV$8bhB44q4+xz6S250TWB+eSk$1ueIM112uN78yZZMVAKN8z+j10FsSq-D70L4geB+jEYZbsSxQjIua2FnTIqLsi2qcvqnan-+5icHNrpVIZNAjHtFV$-qNqq$rpxsXg1TUwhgAuraQPvqJwqp-NuAjVyPvKvZQuR$pUCXe9NNrfU0H+hToaRqvoNR3Nf3oQfqiy$4-tpvp5Z+W4tzCQHetq-NeeBCewVxb-$h$tqSNRYl-VMx+WZxnNMb2WYCRFX1$bMNl$fRWHzNRcboSFSNfZ5xUNZ5L+z1FuiLZfcbiZ+-Y-oRFHOVtr4JZ+XZ-3ivYR-ORb7ViON-v1Gc$NfxbjvGBHPfibrOkrqRyLUB-0S5xNqh1BY+-JUw0bFON$N5JLcoWcN2x0H$C3oFHGz5Bl87WFLjaRLcWSoUU7JryNbLooQ4kH$Mr-MO+5VHYzMicfeDOcJv7U9Lw1NxFMVMfLweZ1icjU3WuJuzaz$bULi0Rie1kUJEi0+D7D6ai3+yLMtuni3ePMS8F5+RC5o1xbKqBJzRrRy+MZUf49N1QZnSb-SRp4p3$3o5hFjqE+G+JgLovZuNr+-OHPiFV2Cq7mh+9ico5Q7FWJ1UuNH3i6ZGsx1NpMWeNpuUU3HzMmh-hzjSzMUo9RXvX-mv5fDfiGUHqpREfajxs8CZx2oFC9TFNZ+qMxY+muXK5NFuR0SNH+J8PgZ+ubV115Y0f-Ylw+OtUe3O0HFe1avVU1N4wR7GRK71fKH1Vbs2m0SbiSRx+eZD4sCR0ciNVAEN$iPkW$v-+oMZeR+c7mul$ibl4U-9T9H+v+UrvHN8foFUHK5vtbPBxl47Rxk5bWQTKZmS4J9Nf9gCibnbw+xVYvTLilB09ZnkAtZG5H0ZnPe2--q4U9UW2A-+eE7QMHbPDFQp6jGa2N8gqZx4jBtnvj$NAZfSTQsn$+UN6jJi2$MRioNKGEiUzMZ+y+a+H16Y6XTw$tmc+BSEICbwPb9fHZKBxfNgbFZf3FLef+IF+HAVX4xSwANDl8sYHrotc9+N0SNui97oS5NUku0bZWFSU9HA+w1$ZBc8bhWcxFwifSW3$br$CO5jeUllYGebi12ZUbPt+opYvzlzKRu+2bFoNox9UZ9EbNUOAtzpcHnbJZ09GyYE2bTKZ9K27JBlQZHDY8Cj22MyOwfBwX+ziBHrhMuZxcFDu1-11JqTS+9zC7u3FvfgzzRMCIRuzUg04M3COoqS5yUE+JDIz+fMnzONY$MSphF-5nuwRt2EeiLziU-$c1fi9o+zGjaWRP3rS+zWIU5+aDURzJzqamFPofyz-PFNJNN97+qoPC$1NzomLqyr-+q+ZwxPB33$bifo-mhty8LqC1h3x3BZJgBhUPlcq0nUi+1Z7-B8O$Py+XVsyrjO9OyO81gP+zfkxMU5bu+oSaBHn4Aw08MH+50RNUiM-$qlP413I17H-LuoiQkYFcTrDYtKxMme5Slu+BZRvw3J-$tN31-Yljiq+wrqSKkInorm$NOl7K$oYENRDjB-u0RlTIrNhDSyI47J4+tpiPuMDq+NwsYq0Gs0eoCIWHuw4Pe0i895qLDXok91xzhrne2otIEx1lj3Louhzas$iM0Pfwx8PHcbYAOBepvURHV2J7y3CU5eDkWKAW5oRZ2Ie9viZN7IG4OR00b35OUrqcRoGA+tc4igyI5lm4hNSpmCfkRrlhDrJrmWlxFUAYeYm3QqFiyFryq8fYYxaA3FNaw$Blmi0VSXwH0tNcM5F-NZGCD2xQ$BskrJcRlHLo8OKqa8Jcy-ZwmL$0H3lya9i$Uwp0y0+cBrtDo-PTili88lubf+62q-y4+iRUmvNopG27U5sKBHww1VxkOkIUiDLkR4uahwizcV+0XM-amWHtzwZA6sst3+uaRWsOmffcYaHcUeDYHKUaYxMWfR9qH5EasCbQUmo+9xjxgWfiyX+OpCc$N9ZUhqvYe1fNQUq4-xNEljMIlZXl+4+4+XQau8ZWMIcKzpO2DsT3BQ+t0U+uulA9GKRNO1F4CKVR1azKenIIHWufFvN-X3MVi0yBTRcfVmOl-5NxPeCyhDC6$lVulK1+jDfqTocIzNCzmK$NEAkjfGVQRu8JZr1-irUiRhTHMaIzfO+Z1Ph5R$TO2p0+V+lZMMJFi7QVJiRtuwl0qFH$fcFxmCUfHGUc8rtlfJjWcL+03mX6uxJAt4ebmeZp$eaw1uK2UUfZFlWBI0ZvFeOxMvoHZKKMcHuUSrmkqBWkWXfSl5k6aYGgDjzM3o0iMDHgeJ0GuKHBJCFYz+qfCxfbvxs-epaFpEVaNJ-C91v-h189oRQvZfqF67c9HUP+NfxwApEQN0ZrCmrINU7lGvuqGX00vW$nX7xmtc-BrPGwfvEhFzH0oFYyC933x+UO0i-oFS+jjArt7tyE6v3NVrlkcU1gVbeMDWRaL4eVG$WbnFu0R1aall$N59FwPzLVocoCP1ugFNQGtT0xe5S+z7leWt9q2B4V5qDPBvR0hfLWOwh2fm84DFvue4SO755twjakXZfffQ0ahwoN8EyolWDY0Zr9NxEMUsMacqQz8Z-uTDIfHscKN9IZVqeAqpumzHfDAX6$xD3GE4$0rZNBqgjjx$q3$1PGBN$Do98G91DSaI+Y46+HwTp5UYtUimxMZI-PkU156NilRp4lHv+fh0w$Q$E2Eo1TZEtI7q$SJBAAExVYc8Zi-fVgJs$fkH5TLXJJ9D+nRU-kHTJED17nOyyBo2KUtNecWs4MI9eOvQyLMtoALQtN5nQXu-45UP$rkoZW9RfZL58cZN3s+JMBBzWuZGFG--ff394mXXA1t5eXbR-XALXio8tgXz8xS6z5tbbiDUq2bV4vvy-vt5$xq2Zg0FiTbaHq$sbcrIHXD2eY0VDMItbze3$Uf4SRNUzizz91ot9llcX5bc0LqGhGvlXlIUuMrW8YzN-+UmZ3eW03zP8Pe1zoq3NL3C85zAZcDSqN85NGfnHWqjfxl+8+JSXiqCiF1ElZtetY$-vqXq$FIUN-lR0T-mhT99fUbk1fVCzi1VAEzLe0r-HBSFzEo11FuhXzXl8HxRkvz+yQeUUHxI-B$3DSeBw5z98oVD+WHxcjNyDetDI7i-1QeRlzvbXfr11kbVHwzw82NabVAiooDFqDRm4647V684lhAseIZMB4XqIg-xtEf-bvHXqV8M8S9TDCOKtV-HJiIxyUPXfURB6ifIrMH$3fxetVeMOjH9ua92Nrb71F+Uqoc9rrcIru$s1C7COsXCP+hFeqoB4NDq4P3Mav4x7mzthGSue1vF4plGZ8lo6nvA9TqT3FZn8Q8ZDnHJlY-8qCDi8obSIOeS$c3ioFV1473D$VXfB0+YAJuhX5oBRE4H7DeUNDIQ-2qtBT$9w5fcIiKl-ZIL+R8xRn8IReZA-18i+Tq3Bm99ixSf9i9HuS8DoVtY6GDFDi1WBmehBMhqVGunBxRik3HWZU1CM1i1q30VeStEqJfF+BS4zj0Ve0D2+Wz7iJL0rGeiiJMM$LtXRqP89MDX1RZ+72N+kvVE8cfqaqMUNUN6NGUv8iiMuR3qoiIFXWrRzF8F4EZWIqxW+MwBRiZvo1DO-qNe1FfFNGh5rF9iBq4tVIoUKsZwIz4NDXDFbX-2Z3DqDi7Y6f8qfff+LioVAFAtvD+Uzb-xi3oRhFlJf89ZwUS5PLDUNmriVQz7zLrMIF9G1USI0Gw3ipcP73IZyoxi$$x07NA51FVUS$7KAY$RxqOt4LZuBi31fKtGqK9i1VtEibRZw++LqBS6hsutBCcoAS$PuzzhPmbV00DFqe0YX5NHeiN8DZO9Af37Hn8z1sM$0-x-xM1GVD31+gKiHzAByIHrK9HWH78Q$$uQAu9R0GAGZ3t-$RhsuqMNOHLiqoy+x-NWBx1-cUBi+UbneZIMiHUFUuBNyr7e0+MN7PZFNtq2i5xNMn-n4uK1V5OTNJIwyb4wcXVw7bBtuaq7RxNyDq9K1xo2NabIDF$x7MKkSKb3htcNLL4Nk9L9IIX6op0EX965SzkUvFfxRay9BYUXqbI3oEhiyRLAqjNSDWNzS5aIU9bLNRU31RxkbLbhJP-+3q3UVEZmJ+k0-FinXzJblMAoLUShO-uM-6$TD4boI6HQfX+mPH65w$KBH-zeoz-JccB3N$KoDUy9B$xm0Nr-vObFfmbe8cf4A5oGi9Zx3L0mrPtp9nBfbRksLbImoOJjoiHDDslErX3y$Wym4x4m++6mxJHMSueHSVe+lI6iRS4iaB$xRJkCKiz6VDVZIxKrBmemO$eauZHwiP+f1Ff20BZHu$AvZ3r3Ks8qi9NeVle1fo6fBMzUZlabrtPZHkNf1SopHTvZavlDriakAHbDwcbt-PUnVGRMbf-D+U15K$$38rSMoFz2PDiWxP$1qWHrv2yiw5v6t0K1y94zJ9xNMMtsPNlDOYL2k7ql1fo-Um7LqS-TzDUE6fa8+3tEOA+J$w$PX5P8RR+3-1ygaKOizAqoPhR6rxvbcqDo1mX1Lr9WAqa1b5uMB0iMZ092c+tVNM-7wzPY7moWMu$4qGBh$1hbx1vrbmNR+Dij$s-TrUq6D43mcT$8cfJTcCk$UkOUHihoXQthMqcK7L1qA-IAh2PucqI1O9Ok4VrKHBRxitc7JouSr+7zAUZR1o+9hjxM1u187juaqO9glaNPKL1SfauNxmBMNrx2kMw4qFboy9-yL9Bm$oqNtNrUiRuw6XtZyoKx1oJT9p-QNG33kFr2vTNyx8OO-pe-9YLU65w3Ho4QR1erxMz$-N8yIxP4kv44cqL-Ul7D9WDfv1LUZ2-JVADZ7vVlaaygIR0SNiPTwTuGqDyZ8QSqXnHxSqrTu5$cJ2o7ofOU-8i0OL8LlXfvI$PVHD7MojzArO13XTUrzp3p1YU-yi$-+H7U3ZeLZjRxS6vfyIBS-rMxwpM+kEikKGfMypcw--PuMquWH-opy8eZBn7k4z9WHQBPe8yZJieLy4o9VQ+baKkUj2R0Rewu7VDiaB3U91bmKqze39HiSDRQ3yeGR98DhnDSZJKyH5yQvQA57-O7NT7Rwxb-DR5kbUoBPWJWehLUvbxq$coq4AZ-7D+4BNye4iaicS3535VGiIIAzLBQU7bH8bZBRf5AXkrNKizP7iRme0IjUB1i$jh5-JaN-PVfAZ1BG6P+qVM23QeR2RNehE+iexUrqJVN9KDCMCGGZ-iq4kPiKCDShsyGUoohy+T4OAOUrMHLk7wZ67M7MEPEP9$LJMfxixfIIOKEtZaRn+4Uucw3Kj0nDsrgIeIs8sX$cwub9zKblezSZ3r4-4-xtce09bMg-JUw7ywchoGxqxRO60KEADfFSix2MM4P+KxNucqX1UzKNoNCcSw4zAzxL+BiIx6eLR5wxMRzBk$tIs7ryEzLIQKy$BO2Rx6xhLisUFOUoFMib$BU9BzvfSf1cD+10CmZcpJLKOAtb2iGQO8CibBNMRyYh6x13Foxxvxi-Q6fXnAuPuxDLxc4f1iD31ZB5qf9wza1AEz9wDHUjRjJpBvJmoghc4JRzVKxSm6NOEM7Pvw8N8SNumKy8QkQO7q-s3e5xPB2M4AZfiFW$x+H2UiXMeoa6awaJ27ccYnL7NAYC2JpDUskU1wt-ebVi5stIRBQeWfxZ39p0LLu$S802JA0svPu$IcLxbHmKa85Z3l0H9r90RqoYDJ2zDqtew6MEeAEVW0aD+UaaExLeUP8ZGNGZFaRmMv2opcA-awe6f$Ms5i1cktmLQOZwMJL7R2LwEwaLyw5Zu$cZ072-g05Pops-$895zcbXw7PRArJ9sOZ7zJ+F76wEFxQeJanuL-ctSz7hnJa4KqRqxjx1TMHy7aRNf3ABm907UqQXmyA8iNs87eWiFzAA2bUW2iG1WklBiqkKXM-NBQ$2G3GtV6PaL6PYAuMYFiCvskwCGro1fbmR-ZbUhXCoAyZCPtCKfGmUnHxVJjHTHmTSHn6qzlY4Wr$7vDxf93x+bOLtFCPXeMFQtGaHopIDEM$28hv6NgLcLZhJTcq-vJRf$K7eIfi9$9BH1V9y3HSxvkmLUqG$wGBKqRAH1v-PaHG86M0nJ5NwwaR6my69sX$5t5IlslxzLt-rUzR$QR9oxFRMY$axpUiPulY0Rm9XImVVgM$wsVlI5b18ax-iJJYnxpFByEyEljXicuM8ojGwTbkKCG5WDxOwqlqtrgBC9tUkNsxmOreLa7vk489rIeEU$Gncuuj8U9iZSHBVXK5FroY8pt4vr3ykK$c+OJI$iTop3Op1rjM1xqWTPOUe0Jjfyan9ly3-hSpnNM7-7$qTXJ2slU07yLY48koXoXwe$poEPvZPBVX$Og1PDbV8oGiHqgP41vILZ07iJvE1iWuuekGor9LxVPqI1kIrIxNx1JI5iQj9hHhHMsHLGRL+r+i9OZz7R2zuytswx+REki4H118hapf7tSc6qtUMiC2ckuffRs1vCsO$RoVAys$nrkrVyn6U--TV0XpG39G0luMTxLKjB$GhyF7F50ZcB7M9LumlRbUg47qDPj-Z2T2jQZ72Om7nypis-ba2GiFeLwBZzM-om1I1vWL8eO3Fr+jwB+xKmIpaN7xnX-hqLJ8G7$yx1--DfCw4BLifIrL82Rl48zqCq18ofB-RSUel2wshqimjc6-gKurZ3XsLvo0xBZ0yEHAX6R0+fZB+E+1VXP2YwWIEj4IY13cMBBOGJAt$TWU1CPhAW+B5BQDiBGioy5DuGVW9hOyGRItDyPswswt-pmLtsUO$cVitcN5jfEtIfpZgo$5WSfo-o$t8lPbjcvUcq65P7OQQQFTY+h4Moq0jmmnAmE5luuhA1gxx01CcS2ZXpyHP9xMV5Hv5Y5XcEP7w$xzrAEiX3jMeO29sBf5wRac6frAOmvULqufqeTGfwr0qoKVoKnx7hRroIz3A+ibKZiJwibjN3puVfqhc-tqZzRiiMu+OZ5oijNDhQ9+etCFuRyrfPbha2fkboi18F9QLxuNxZtBGzRa57ive1lpkARZNz1ZOzHYt+8cswzqcs4LseplCjHkFiHSiw0lTN1MbZZIVQ+e2eJjH$M+Q8jboNT+-xPTOD8FYkYC+jHxF+bZ+ZtvwN0riHQxZRig4a55xoZuU7OWl-8MC-0HlqbR3Yi4RjR9OuU3tuhEpi2Cq-aFzR454sUG+IbiwtB3sNw2vHoz1+$KENiOUNrFHv01uMoNU5qUCUm3zfRMbuiBatR6BVfv1p-mflpifqvfReb2buJLMyZNPb84umVoxRfBLtWPV1bFPfr1HxuPVUrcYl3UFaNYrA23bYoT53BR5SNb3ioN5ak+OT1FfFxFUmoRG$53sN0+aHx+JxuMvZE8iQBlniJNMzQu71CPmwyxkyw$i-Nm09jfoNM3Uk+u5Z41bxaR15muIePslSxJ5vhfgUvl1y3RLrRYV8zfltUrozOVGADiaP1Rc-ZS$JPT+6lv9LCNG3sNoul+oSaeNPZpPmu-Be5MRk9Zz-TRxullxRcRRI+R-wtV5UFBWuICtU5ui$bfc5oozPCGu-NzfcjVp+EJe5OMfrx-o216U9J6FIqVAbfbJcIH1RoxiF$tmDbFU-9xBO1b+IzFfBxRzru-l$ui4KHQP1szw-i+xWsuLUznfEZD1YCl9fCPMu2HtN$xMyrRYUUz2OmXRFuXoJ+L9Sx2mCVRWovavZFebB49BmOVObPzAECbyxzORvZf3Y+s-vh1RMfx7WhfP+Rs1RzUkbZjVwbRuYaJ5w5f8flHJBEF9ouZ3KZjz8tbYKRJyPB+ANsJGHIxUmNrzH+52xx$xO$39lCmJ257JB6$vm-D5-2Pnof+PDQNnUzFQ+Z9Lih$ihbWiN+PfqBVC4cihlgqZQoJzpfKbMlK6S+ic541w3owRx7qzbQFE4bUuLu397te1fwN0M2mVw$YvA1J+Z29C0fSpqTu2DhRAxAJuhZ$+8Uj2kx-rNtb9vbRNB2UHhNL$vZT+oCAmNfhoSskloG+yx4YN2b0fVInR5bxBPu-k7-4D+c+cHojbrOhU+sxRRiPNqCNU5G0VFL2Nh+EliKIleahiLGvMbR3HsvHkJJyz$uxPaCxRN0VDwElkftMpxffigbfNCNg+OHc9y42MTZumhfU9F3eHYYBFICtPhbo2bibw+5JHwK-wKNu-tIKR$mxU+z3FNpu+HCrr+fJcYAZRqr9rTLeQimm$jkxFYufZFLqaoMhMZAJDAqvrb9jQJOH3Cvp7FbVG4YjoUXeMNLaWrj$iMc-LvlZYHjE+TgVCqBVD75FvagvSFRO$o2+FQobrk5kHwB1B1UUN1Plq2RuRhioBlvRUzMbBD$+++MX5+miJbV+5XwjoaeCis-p5M-Nse+MMO-+Nf0QUYX7+yu1F1NtUu2VxeGZTlYJ+MCmSB3tURH5NgHsotg5L13PpisvzHHA-CUsbjHNTu8X-EsbD+p$URZUSBq54kCc+gz6FU-1epw87NtFkSqF+Ze57AafCPqks3ZVzBGhRxapI1QgTKb0+Im75UmUIi9FRHCBgf3LV7fllsIVTUiuxbwrMHYMCBEEzmV1VSNuaZ5xnlPfOHfNyxCBg9coHgrZIwyvibp7OMOkKiHUiRfpewoL7aGFU+MSMccvyrrO2ufRqfNsReNhU7fYV7JLiqx+NUNr2oCB6t3MbE-QIEr1SD7RIirErUbojovZf5H5rEtGFfq3l5G+wNtHahqS3PSG1Cfq+TxtbDSbNbGNWBRH1MPZbZNq-IH1U756xb0kwHa+4FcCNMHlUnP7BpHKooW7fHW-aCbrOCo3Rp+Rr7OGLL$RIwgYocvOF5pskl5I-M+NOIMiYzRvwaC+VROrqy+mfo4ZuQOa51x333ixHNXOqC4FoFb-AtYZxMJDM4Vzxihi1+zH+RhgWoChU7HsaZhJKl8HOYXlL9A2zilpPJPxm3UygNezl-OEn9oJ-gHL3Mio+UmtJApfheKe8-FB8x9hJQSkeG5pmUpOqoGcTrO+fCX9AtxxV5mNDhmTxnPVL3CHOx0mEr0zNmb2OeJBrTg1yxmfN7GjQO1HahULR9NZ2T+T90k+BNBVgMVR2GHDZBoTeVEeBT9nwe63hmDU8mNJnw$ci+2lrAxbG8UhSRP+hUhHSmMgyTSnD-NfU29mHo+IYHoO0B6GQL9yq+wpjcxeJ-NJSSHMnDkmNJW-qlPiFhum+5JKs6RNnvCvCmNJIhc6rTeyuf53tKsJRSeeUv$+I6Lg6U8Nl5q3HM5+taF0WEAEYygsP0bEZhFq+QHmsis6eWfNR3QORiHH$DMTDMPn5Ti4fAUXfcw2HiLi86iTVfLMCZ2T9gZaRZylafp1RVa4+-+MMxv2MnmJu6Hzne$vkuTox2OQv5H4Fv5hi4MOA14Do2G1E-pFR+IRMyqXxkJz2OJNtUz2Q1+PWhxFImHlqM1Q-rza+IVelqEonJtlPeMwUgvkfZy1g6mZPMlvMDBA+twoiDrY-lH8-$NO5VYMYY8lvH7tRVR7VJuQJsiXt3MBobAYw+8sq7fBwfL3vDY2YqsNSz7xSIBZA-H+ULzBTVzBZ4PAuJcLOlyFEm$$SIO7f9MxvGiV3NIuQRJH-Yiie01IUmfNZXoxo0Y2Ou99pLEvhmaYDsooBBqAEWmWHPIULvRiDNA+QrLY+LhA-eRt5jJulJGAcUUITmNJ5fUUiqLfmmCW4iRSG8YBa5p1Bq9q1JXqFhU0+9UuZOQRJ4F0J1xMc9MXsuLLPHO8+Gl7MV5pLiVR5FRSz7ND2JCt17rtlui$zcFls2BHUDLk3lvfm7tT9GyRD-7ChUBoh5zDPnEbHO2TR6USqfvRhDZuy16Fn1UmwV2Xuk1xRJhPG9grPU6HSfPCcqATlQq7fNV7Y1iRccniyR6fuf1nQu+7is1kF2Y3vR20PAKH69rWMoilMPEEcMJe2a8v3LgvCD-baWuPfEfD3yINsoWMEoyaZBQuD+ro+fVFE+B02S-DV-Z8siDqoafagwKvocrZ+RWbrPHzTq3MgYQcZGHhuhi7M5NHmhJj3uGt$+TEamu0shMeS7wD0cPqJsH1CVvLKfucQfS3c$BkLgupWXqtcaTZ7ED0YmmaYtLwITLp07ObJ28MaAkr65uWUpoOMs8VM2v5WBplzkh0VPuv2WZURmM00eD8FWW9GY$Rp09NvYtfJR-mUq0ccrIemu0B8UhAz4SmmfNp8Ho--GcZ0vmciI876RQwsAXDu0WgwViZC6AVm0HKgay0cLpWcW80-N6y0cMUqOW7a-N6h0HsFqHD9ZeGBHX+5Rvl2YZ8Nag8wcxv5Wti2ckaBRc$B4cOaI8aU0rcq0q1BGVlrsIBcj003G4ijkWbrz30h1pa4lOh03LJv$t6ieJBRXQvbbkcf-Bj62BqiPq2WP0$uk8PxQYqa3TZIucPIxs0qvWnwzulQqcLavK1xCIcUxA-FTAsRr$M4Mz88V+a4hW-4hKz8MszIzqjatzPC80Lxa61xZXb7CXUwfa61JiC47C0UshaRD0ZAEwOrH5taUDoZBWMrt9QwN9D0CejU11isgIgufwmbPM98LDqKWyP2vuM1Kc30hDJGsEuDtwMQAo8DokO68qcLmksxu$$OPotQLOa4cOY5OPI88MWkqxMYj3UW8qQKqvWzYHmuD4xWq0h8zwAOw58T1Tqq+pYXAc5tx48kjDvw-my$XPWXisqWHvG60XrbGuIlKCmkLI$mffIN1Wh6ERFbRcHHA+SPLkLEDfsT+3FEFNruPVkw$fR+pxPBRG1qL2AnqbCXk3oZFIT+LBn+xney2WfiAuIlJ+HXK2iVpiVRtT3paDB7wnaCu9aBRfjIu1YkfznkSDuYX7byN1rFHP+++VIoK5+c-zb1xiG2FUw5uC3kRnkwluUvC1NhIN5PSN8fZrKootH9+VOVH4hF2RzV7+YMJW+++lwiRNC+NRzNRGbsbgUz+Gma5Z1WJz3UZRfFjJP-Zyi2bWRcMs2VtZDQW-1Kt+b+v9f5NJp++1ofi6++NqRL7v0Cb81s0pxhFoF+F4ZTVNx+oDhv0piPToK$tTL7A9855bl+Lhnf1E8SNap++Q1E98WRR+jqFxScE0WHF+kUa+vLUk0m5+O5xc+7Vyqf5ieHMjqyAekR$$iZUcHhh0ScAt35nr-+FGazh$V45fpkK+UREv8L7+Z+++8bPbPVPp$+uHR1LtNAQoNpjnUk+1Oiks+0ABWBO3LU+xb3Ts+MfRHlhfh$ob8NiBa5h-4X2yjEfMfyYNgoiHNI5FqBwovLXBlxuomKu7wfaSq17WCHD50hUtPGU3UZCpxK8O4tGN8N4xPgQE$-fHReHGKNhBHf78JlUuA0NFiF3aZt+STHzLia5ieI25AHrjFry+1E95ia+x+oN4+z$iHloYGobMzY3PS7+UB$Kf5YGKPqH4HD7Y2RG-kfV8bS+gBlHOHoHkksC+7zS+i6SaZBhyAqBNNQ+Saf$V0AKBpo4Hy$++bfrge+DNVhse9px0hHTl4t2sCTGKlhm6O4BriXu6xh2i+1N1ul-N6f3F++vp0ZH++"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 19 Jan 2026 00:10:55 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-ray: 9c021c9eced723eb-OSL\r\ncf-chl-out-s: HG4LU2i/TSIEBrsM3rCiEQ==$EcEFbVETiwGA6YrknlBHGw==\r\nset-cookie: cf_clearance=CIg1ERPoUtjgyUDvbEZRXAjvCzAo4KfClsAWVyq6wLU-1768781455-1.2.1.1-dw4cm0LF4PhskPJXbu7DC0lyLMy_ncDFQ9cQN1KKWabjVfTkD2e4O9LaFkh4RaKiLdZcKt043SE6X9xp8YHhU4Mr3owIrDQZFXFK14swzr6Q5tOoe_JmqmORAyydK6XSDF11m9aGteoyVAGbkWFyeQFXJUl03gXnS61ZM0RDFukArjOkZ.RIEBFWOY8m4B23yGItFhSmaUlF1_zp13AO6OKd2Lxx.eWvUGm3SFxXWoI; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=1wqkor.com; Expires=Tue, 19 Jan 2027 00:10:55 GMT\r\ntiming-allow-origin: https://1wqkor.com\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T04:20:17.182226Z","times_seen":17555689,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"1wqkor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"1wqkor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fastly.cedexis-test.com/img/20367/r20-100KB.png?r=36155358","fqdn":"fastly.cedexis-test.com","domain":"cedexis-test.com","tld":"com"},"ip":{"addr":"151.101.2.6","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wqkor.com/cdaredirect","date":"2026-01-19T00:10:55.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.cedexis-test.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 08 Dec 2025 20:00:20 GMT","end":"Sat, 09 Jan 2027 20:00:19 GMT"},"fingerprint":{"sha1":"62:F7:1C:B1:E6:43:D5:5F:4A:0C:6A:76:52:26:13:48:59:22:38:AA","sha256":"8C:F4:89:06:E7:06:F7:CF:F7:CB:B5:3F:24:C3:A2:F9:0D:22:8F:AB:ED:AD:59:5D:32:1E:AE:26:34:31:F8:87"}}},"request":{"raw":"GET /img/20367/r20-100KB.png?r=36155358 HTTP/1.1\r\nHost: fastly.cedexis-test.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: keep-alive\r\nContent-Length: 102400\r\nContent-Type: image/png\r\nServer: nginx\r\nLast-Modified: Wed, 07 Sep 2022 08:47:01 GMT\r\nETag: \"63185a85-19000\"\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=2629743, public\r\nTiming-Allow-Origin: *\r\nX-Content-Type-Options: nosniff\r\nVia: 1.1 varnish, 1.1 varnish\r\nAccept-Ranges: bytes\r\nDate: Mon, 19 Jan 2026 00:10:56 GMT\r\nAge: 1678905\r\nX-Served-By: cache-dfw-ktki8620082-DFW, cache-hel1410030-HEL\r\nX-Cache: HIT, HIT\r\nX-Cache-Hits: 755, 6353\r\nX-Timer: S1768781456.034339,VS0,VE0\r\nX-Cedexis-UNI: HEL|{\"pop\":\"HEL\",\"sip\":\"151.101.2.6\",\"rtt\":14618,\"min_rtt\":12944,\"ip_ver\":\"v4\",\"info_state\":\"HIT\",\"tls\":\"TLSv1.3\",\"server_name\":\"cache-hel1410030\"}\r\nLink: \u003chttps://1768781456034-cdxno-50304-1532635648-yw0qyppg7n-hel141-14.unique.k.fastly-insights.com\u003e; rel=dns-prefetch\r\nNEL: {\"report_to\": \"network-errors\", \"max_age\": 604800, \"success_fraction\": 0.01001, \"failure_fraction\":0.99999}\r\nReport-To: {\"group\": \"network-errors\", \"max_age\": 604800, \"endpoints\": [{\"url\": \"https://nel.fastly-insights.com/report\",\"priority\": 1},{\"url\": \"https://nel.fastlylabs.com/report\",\"priority\": 2}]}\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":102400,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 310 x 205, 8-bit/color RGBA, non-interlaced","md5":"f134fda98a277b1c8f20ab8fbe2fbd58","sha1":"a922796190a1f5bbb3c410c6ec591502050df04e","sha256":"27bce9e85eaf3567a4695ba2b612e32615394d80d0a3a2dcb07b1fbfdfababc7","sha512":"2b2e8338afb9b0ca9b5fa3d452dfd80368b5d17566120ae6351b6d03572e5a69cedb97f165fbc31ffb3addcc00506a3fc0761cf2404a5d9826a8448a7c4d9f17","ssdeep":"3072:fd/tI0TeVA5o0VgTuGmxrMRZ6aLxuC+Gtn5HBZ4I/:f81VAMuGMrMX6Mxu9+fCo","tlshash":"08a312846579cdbe5edc1d06ab21ed4ca2be53f66b5e367483100e054ff4fb49ab0288","first_seen":"2023-04-05T15:46:51Z","last_seen":"2026-07-26T08:29:33.087828Z","times_seen":3279,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":48,"dns":0,"connect":13,"send":0,"wait":14,"receive":18,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"valid.rpki.cloudflare.com/?r=23702284","fqdn":"valid.rpki.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.231.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wqkor.com/cdaredirect","date":"2026-01-19T00:10:54.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rpki.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Nov 2025 06:40:51 GMT","end":"Wed, 25 Feb 2026 07:40:43 GMT"},"fingerprint":{"sha1":"BA:CA:35:12:16:00:0B:E6:EA:FB:59:97:C6:0D:43:FA:D0:96:19:58","sha256":"41:4D:28:0C:5C:F8:E5:40:16:CD:8E:AC:E4:4C:F0:A5:2D:96:51:10:99:AB:07:51:38:90:3B:70:EE:30:1C:1F"}}},"request":{"raw":"GET /?r=23702284 HTTP/1.1\r\nHost: valid.rpki.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1wqkor.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 19 Jan 2026 00:10:55 GMT\r\ncontent-type: application/json\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UhGFiMyLYrZaG3gcoPQsOPnjvJOEon2vijVU%2BXeJBw%2FTOEtoWLwkLI488GWaKrPIahJk6q8c5wgV2NxAIozIJryxfBitj9riYjbbS8M1M%2FyIOH1%2F%2BoOoV4JoiKIw8SnwKxW4eXM668kuJ%2Bs%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9c021c9dacaab1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d98c115f7617c6b5cfc6441ef9674c5e","sha1":"06d8f3f69b633c89171c1f0407b7fc6553b6a415","sha256":"bb65f5571fa5dea0a8d2c614d66e1b0eb5b9b12a2bed2e0fbd001a55f928f700","sha512":"eed53e95894db4fba20b3656820f49e8f7b70ad00e6b633906a5a4dc0dc62f598e2f7f72cf0685cfe04b78d5791bac6d1fa1fdeaafd4bc9abb7aa782286df2bd","ssdeep":"","tlshash":"b8a024c1437c17c71513404c00500d7775f545101055704c0c1c3c4c11c54f3700570f","first_seen":"2025-04-02T02:20:49.301257Z","last_seen":"2026-07-25T13:40:16.943772Z","times_seen":653,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":21,"dns":1,"connect":1,"send":0,"wait":101,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"testingcf.jsdelivr.net/gh/jimaek/testobjects@0.0.1/r20-100KB.png?r=69019957","fqdn":"testingcf.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wqkor.com/cdaredirect","date":"2026-01-19T00:10:55.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /gh/jimaek/testobjects@0.0.1/r20-100KB.png?r=69019957 HTTP/1.1\r\nHost: testingcf.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 19 Jan 2026 00:10:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 102400\r\ncf-ray: 9c021ca35ff60b69-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.0.1\r\nx-jsd-version-type: version\r\netag: W/\"19000-qSJ5YZCh9buzxBDG7FkVAgUN8E4\"\r\nx-served-by: cache-fra-eddf8230082-FRA, cache-bma-essb1270070-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 2133129\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=c4TVfa74I%2B9HDvCSJuvBa4hY8CCg0sxH4qVzvQ0xAVvZ9PcUw2GLLgjbM2yEJ7x6FcS7iytuRHYj6ukOhiHLqLDaZuVGNZXFTtssC1o0tA05fWi2fTABqoQreseMw6FiONqW3gqkku4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102400,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 310 x 205, 8-bit/color RGBA, non-interlaced","md5":"f134fda98a277b1c8f20ab8fbe2fbd58","sha1":"a922796190a1f5bbb3c410c6ec591502050df04e","sha256":"27bce9e85eaf3567a4695ba2b612e32615394d80d0a3a2dcb07b1fbfdfababc7","sha512":"2b2e8338afb9b0ca9b5fa3d452dfd80368b5d17566120ae6351b6d03572e5a69cedb97f165fbc31ffb3addcc00506a3fc0761cf2404a5d9826a8448a7c4d9f17","ssdeep":"3072:fd/tI0TeVA5o0VgTuGmxrMRZ6aLxuC+Gtn5HBZ4I/:f81VAMuGMrMX6Mxu9+fCo","tlshash":"08a312846579cdbe5edc1d06ab21ed4ca2be53f66b5e367483100e054ff4fb49ab0288","first_seen":"2023-04-05T15:46:51Z","last_seen":"2026-07-26T08:29:33.087828Z","times_seen":3279,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":11,"dns":1,"connect":1,"send":0,"wait":10,"receive":4,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p29.cedexis-test.com/img/r20-100KB.png?r=21585849","fqdn":"p29.cedexis-test.com","domain":"cedexis-test.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wqkor.com/cdaredirect","date":"2026-01-19T00:10:56.803Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /img/r20-100KB.png?r=21585849 HTTP/1.1\r\nHost: p29.cedexis-test.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T04:20:17.182226Z","times_seen":17555689,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":1,"connect":2,"send":0,"wait":0,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipv6-check-perf.radar.cloudflare.com/api/info?r=9985890","fqdn":"ipv6-check-perf.radar.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wqkor.com/cdaredirect","date":"2026-01-19T00:10:59.855Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/info?r=9985890 HTTP/1.1\r\nHost: ipv6-check-perf.radar.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1wqkor.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T04:20:17.182226Z","times_seen":17555689,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"benchmarks.cdn-c.compute-pipe.com/r20-100KB.png?r=70967333","fqdn":"benchmarks.cdn-c.compute-pipe.com","domain":"compute-pipe.com","tld":"com"},"ip":{"addr":"104.18.28.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wqkor.com/cdaredirect","date":"2026-01-19T00:10:56.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-c.compute-pipe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 11:19:19 GMT","end":"Sat, 28 Mar 2026 12:19:16 GMT"},"fingerprint":{"sha1":"BC:00:BF:A8:32:5B:2F:48:37:3E:56:5B:A9:AF:C9:20:0C:83:3B:9E","sha256":"C4:CE:77:97:12:DC:B1:B1:EA:ED:B2:4E:F9:54:99:37:B8:F6:77:EF:5A:34:4C:77:92:4B:BD:87:25:04:46:89"}}},"request":{"raw":"GET /r20-100KB.png?r=70967333 HTTP/1.1\r\nHost: benchmarks.cdn-c.compute-pipe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 19 Jan 2026 00:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 102400\r\ncf-cache-status: HIT\r\ncache-control: no-store\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\nx-source: Cloudflare Radar\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 9c021ca56e8456ca-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102400,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 310 x 205, 8-bit/color RGBA, non-interlaced","md5":"f134fda98a277b1c8f20ab8fbe2fbd58","sha1":"a922796190a1f5bbb3c410c6ec591502050df04e","sha256":"27bce9e85eaf3567a4695ba2b612e32615394d80d0a3a2dcb07b1fbfdfababc7","sha512":"2b2e8338afb9b0ca9b5fa3d452dfd80368b5d17566120ae6351b6d03572e5a69cedb97f165fbc31ffb3addcc00506a3fc0761cf2404a5d9826a8448a7c4d9f17","ssdeep":"3072:fd/tI0TeVA5o0VgTuGmxrMRZ6aLxuC+Gtn5HBZ4I/:f81VAMuGMrMX6Mxu9+fCo","tlshash":"08a312846579cdbe5edc1d06ab21ed4ca2be53f66b5e367483100e054ff4fb49ab0288","first_seen":"2023-04-05T15:46:51Z","last_seen":"2026-07-26T08:29:33.087828Z","times_seen":3279,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":3,"receive":4,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"benchmarks.cdn.compute-pipe.com/r20-100KB.png?r=58902645","fqdn":"benchmarks.cdn.compute-pipe.com","domain":"compute-pipe.com","tld":"com"},"ip":{"addr":"172.64.148.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wqkor.com/cdaredirect","date":"2026-01-19T00:10:56.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.compute-pipe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 10:16:08 GMT","end":"Mon, 02 Mar 2026 11:16:06 GMT"},"fingerprint":{"sha1":"6F:84:A1:E9:7D:65:2A:D4:E1:3B:FF:9A:7B:1B:4F:DE:A7:00:84:20","sha256":"85:3A:3E:A8:8B:ED:FC:C7:62:4B:F5:83:EA:A8:56:87:77:63:70:AF:98:5F:F0:4E:C5:D2:43:2C:BE:0E:D6:03"}}},"request":{"raw":"GET /r20-100KB.png?r=58902645 HTTP/1.1\r\nHost: benchmarks.cdn.compute-pipe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 19 Jan 2026 00:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 102400\r\ncf-cache-status: HIT\r\ncache-control: no-store\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\nx-source: Cloudflare Radar\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 9c021ca5f978b503-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102400,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 310 x 205, 8-bit/color RGBA, non-interlaced","md5":"f134fda98a277b1c8f20ab8fbe2fbd58","sha1":"a922796190a1f5bbb3c410c6ec591502050df04e","sha256":"27bce9e85eaf3567a4695ba2b612e32615394d80d0a3a2dcb07b1fbfdfababc7","sha512":"2b2e8338afb9b0ca9b5fa3d452dfd80368b5d17566120ae6351b6d03572e5a69cedb97f165fbc31ffb3addcc00506a3fc0761cf2404a5d9826a8448a7c4d9f17","ssdeep":"3072:fd/tI0TeVA5o0VgTuGmxrMRZ6aLxuC+Gtn5HBZ4I/:f81VAMuGMrMX6Mxu9+fCo","tlshash":"08a312846579cdbe5edc1d06ab21ed4ca2be53f66b5e367483100e054ff4fb49ab0288","first_seen":"2023-04-05T15:46:51Z","last_seen":"2026-07-26T08:29:33.087828Z","times_seen":3279,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":20,"dns":0,"connect":1,"send":0,"wait":3,"receive":5,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"benchmark.1e100cdn.net/r20-100KB.png?r=60478932","fqdn":"benchmark.1e100cdn.net","domain":"1e100cdn.net","tld":"net"},"ip":{"addr":"35.190.26.57","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wqkor.com/cdaredirect","date":"2026-01-19T00:10:56.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1e100cdn.net","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 23:17:47 GMT","end":"Thu, 19 Mar 2026 00:11:41 GMT"},"fingerprint":{"sha1":"B0:C8:DC:EB:E8:54:65:F2:F3:FB:42:01:DA:6C:A3:AF:F1:49:35:EB","sha256":"A0:DE:33:CD:F5:EA:88:1D:24:D9:31:F9:B8:21:11:3F:7C:53:A9:55:09:3F:1A:EE:81:E4:5B:BF:01:02:24:9D"}}},"request":{"raw":"GET /r20-100KB.png?r=60478932 HTTP/1.1\r\nHost: benchmark.1e100cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 102400\r\ntiming-allow-origin: *\r\nvia: 1.1 google\r\ndate: Fri, 16 Jan 2026 19:04:17 GMT\r\ncache-control: public,max-age=31536000\r\nage: 191199\r\netag: \"5939ad35-19000\"\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":102400,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 310 x 205, 8-bit/color RGBA, non-interlaced","md5":"f134fda98a277b1c8f20ab8fbe2fbd58","sha1":"a922796190a1f5bbb3c410c6ec591502050df04e","sha256":"27bce9e85eaf3567a4695ba2b612e32615394d80d0a3a2dcb07b1fbfdfababc7","sha512":"2b2e8338afb9b0ca9b5fa3d452dfd80368b5d17566120ae6351b6d03572e5a69cedb97f165fbc31ffb3addcc00506a3fc0761cf2404a5d9826a8448a7c4d9f17","ssdeep":"3072:fd/tI0TeVA5o0VgTuGmxrMRZ6aLxuC+Gtn5HBZ4I/:f81VAMuGMrMX6Mxu9+fCo","tlshash":"08a312846579cdbe5edc1d06ab21ed4ca2be53f66b5e367483100e054ff4fb49ab0288","first_seen":"2023-04-05T15:46:51Z","last_seen":"2026-07-26T08:29:33.087828Z","times_seen":3279,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":141,"dns":1,"connect":28,"send":0,"wait":34,"receive":70,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsdelivr.b-cdn.net/gh/jimaek/testobjects@0.0.1/r20-100KB.png?r=95727613","fqdn":"jsdelivr.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1wqkor.com/cdaredirect","date":"2026-01-19T00:10:55.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /gh/jimaek/testobjects@0.0.1/r20-100KB.png?r=95727613 HTTP/1.1\r\nHost: jsdelivr.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 19 Jan 2026 00:10:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 102400\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 251155\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\nage: 0\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\netag: W/\"19000-qSJ5YZCh9buzxBDG7FkVAgUN8E4\"\r\ncdn-cachedat: 08/09/2025 14:29:07\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.0.1\r\nx-jsd-version-type: version\r\nx-served-by: cache-fra-eddf8230055-FRA, cache-par-lfpg1960039-PAR\r\nx-cache: HIT, HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 7f1bb8f021bcdf946c42bd5f23e66436\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":102400,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 310 x 205, 8-bit/color RGBA, non-interlaced","md5":"f134fda98a277b1c8f20ab8fbe2fbd58","sha1":"a922796190a1f5bbb3c410c6ec591502050df04e","sha256":"27bce9e85eaf3567a4695ba2b612e32615394d80d0a3a2dcb07b1fbfdfababc7","sha512":"2b2e8338afb9b0ca9b5fa3d452dfd80368b5d17566120ae6351b6d03572e5a69cedb97f165fbc31ffb3addcc00506a3fc0761cf2404a5d9826a8448a7c4d9f17","ssdeep":"3072:fd/tI0TeVA5o0VgTuGmxrMRZ6aLxuC+Gtn5HBZ4I/:f81VAMuGMrMX6Mxu9+fCo","tlshash":"08a312846579cdbe5edc1d06ab21ed4ca2be53f66b5e367483100e054ff4fb49ab0288","first_seen":"2023-04-05T15:46:51Z","last_seen":"2026-07-26T08:29:33.087828Z","times_seen":3279,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":43,"dns":1,"connect":1,"send":0,"wait":1,"receive":7,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"performance.radar.cloudflare.com/api/beacon","fqdn":"performance.radar.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.31.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1wqkor.com/cdaredirect","date":"2026-01-19T00:11:02.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"radar.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 21:26:20 GMT","end":"Fri, 13 Mar 2026 22:26:10 GMT"},"fingerprint":{"sha1":"61:33:68:07:38:0B:09:B8:A9:14:2E:DE:63:8A:A7:29:C1:41:B4:0F","sha256":"D8:84:8C:19:BD:0E:11:4F:E2:19:78:1A:D1:AB:0A:FB:05:61:E7:6A:B9:37:9E:82:83:BB:CB:DC:A2:A5:53:12"}}},"request":{"raw":"OPTIONS /api/beacon HTTP/1.1\r\nHost: performance.radar.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: access-control-allow-origin,content-type,x-submit-token\r\nOrigin: https://1wqkor.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 19 Jan 2026 00:11:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 15\r\ncf-ray: 9c021cca18a58deb-OSL\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\ntiming-allow-origin: *\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=GuxO85NcEafTDxq9xikBZHyLxbwPmenZnhS9OCgm2xc-1768781462-1.0.1.1-IStE.q5ZDJyZANCaXyLsLBJyOJii1f67dofPbPTFqRuXoua37njQNiJ7tnJeHL8wrXqSCuKb_t8R8H2h5KbiQEShGUrLJ6lBkZGdOEgWKqo; path=/; expires=Mon, 19-Jan-26 00:41:02 GMT; domain=.radar.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e60e0a9845110894b19d227227207fd5","sha1":"9c4dff4af95346f1fcf0abbf53c78274f86a4b89","sha256":"5c89330e2abcf8d6ce4e0aa3ed13147c90e8998810e9b9d827d928982cf6210b","sha512":"6144e38b863d34f81857849b52d906ea9fe30d971e84003e3decce95713b665fb37e2c25bdd0739134e2ccfc2c7fb61c7aaf47c091b44cf8186d349158a15f01","ssdeep":"","tlshash":"db600003000f03330330c00c000c33000000c0c0300003c000ccc000000c0f0003c0c0","first_seen":"2023-04-05T16:29:54Z","last_seen":"2026-07-26T08:29:33.093556Z","times_seen":2880,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":17,"dns":1,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1waica.life/","fqdn":"1waica.life","domain":"1waica.life","tld":"life"},"ip":{"addr":"194.67.193.1","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-19T00:10:53.935Z","timestamp":0,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 1waica.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Mon, 19 Jan 2026 00:10:54 GMT\r\ncontent-type: text/html\r\ncontent-length: 166\r\nlocation: https://1wqkor.com\r\ncf-ray: 9c021c9748465ebd-OSL\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=SNnM2aT7bvRPsZf.j2z_51A2twR.QKKsY003dYds9EM-1768781454-1.0.1.1-tJ0GFI8w0oLTIh9vX7UQOaqost.Y6hkn7moxU2sMtIeGhJMVocfbr_kDJOuvjDil67mlkFycocTyCQDakAejog3RXN7LIyHOn2IlEi3jPHOHTXV7RRzxN6NEF8vJp7Zn; path=/; expires=Mon, 19-Jan-26 00:40:54 GMT; domain=.1waica.life; HttpOnly; Secure; SameSite=None\n_cfuvid=yPVuxYoMkFFrwMIIAzDUuNk.gKpv_j4yyPTKYsW1D8M-1768781454006-0.0.1.1-604800000; path=/; domain=.1waica.life; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T04:20:17.182226Z","times_seen":17555689,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"1waica.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"1waica.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"1waica.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}