{"report_id":"c0104176-efee-4d97-a53f-398d04c5c2c4","version":6,"status":"done","tags":[],"date":"2026-04-23T18:13:15Z","url":{"schema":"http","addr":"www.igamingeasy.com/c/0b4c7cf4f9da9c9b?cost=0.000000\u0026SUBID=1071243705668612097\u0026bannerid=25960634\u0026user_activity=medium\u0026zone_type=\u0026campaignid=10811009\u0026zoneid=2235367\u0026osversion=android14\u0026region=nh\u0026connection_type=broadband","fqdn":"www.igamingeasy.com","domain":"igamingeasy.com","tld":"com"},"ip":{"addr":"52.51.27.131","port":0,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"final":{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"title":"1win","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.igamingeasy.com/c/0b4c7cf4f9da9c9b?cost=0.000000\u0026SUBID=1071243705668612097\u0026bannerid=25960634\u0026user_activity=medium\u0026zone_type=\u0026campaignid=10811009\u0026zoneid=2235367\u0026osversion=android14\u0026region=nh\u0026connection_type=broadband","fqdn":"www.igamingeasy.com","domain":"igamingeasy.com","tld":"com"},"ip":{"addr":"52.51.27.131","port":0,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-28T18:13:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"www.igamingeasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-19T22:24:53.213297Z","alert_count":0,"request_count":2,"received_data":909669,"sent_data":884,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"flowmetric.life","ip":{"addr":"194.67.193.200","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-09T19:09:33.354052Z","last_seen":"2026-04-17T05:46:29.198323Z","alert_count":0,"request_count":2,"received_data":2892,"sent_data":1106,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"f1w-045098.com","ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":27,"received_data":2056819,"sent_data":48126,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GeeTest","description":"GeeTest is a CAPTCHA and bot management provider, protects websites, mobile apps, and APIs from automated bot-driven attacks, like ATO, credential stuffing, web scalping, etc.","website":"https://www.geetest.com","common_platform_enumeration":"","icon":"GeeTest.svg","categories":["Security"]}]},{"fqdn":"r1w8nq9.life","ip":{"addr":"194.67.193.200","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-23T18:13:18.518143Z","last_seen":"2026-04-23T18:13:18.518143Z","alert_count":0,"request_count":2,"received_data":6622,"sent_data":1639,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"www.google.no","ip":{"addr":"216.58.201.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-04-19T22:40:39.524002Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":684,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.geetest.com","ip":{"addr":"104.17.6.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-03-05","domain_rank":196356,"first_seen":"2015-01-16T07:12:35Z","last_seen":"2026-04-17T23:17:07.36119Z","alert_count":0,"request_count":1,"received_data":15981,"sent_data":415,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"www.igamingeasy.com","ip":{"addr":"52.51.27.131","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2026-03-26","domain_rank":0,"first_seen":"2026-03-28T21:22:03.330284Z","last_seen":"2026-03-28T21:22:03.330284Z","alert_count":1,"request_count":1,"received_data":6903,"sent_data":687,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-04-19T22:38:36.404513Z","alert_count":0,"request_count":2,"received_data":983,"sent_data":1692,"comment":"","tags":null,"fingerprints":null},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-04-19T22:40:39.923967Z","alert_count":0,"request_count":2,"received_data":1676,"sent_data":2356,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-19T22:20:23.925162Z","alert_count":0,"request_count":1,"received_data":2463,"sent_data":467,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"41429afe04fa00a8dedf8d85da64403b","sha1":"a513e89b10881bcd84c5d15a98bd6c064135b651","sha256":"734e9d5a16ac8180f6dc200d66918d83c73c7eab878e1dfc478cb9aa3dd0381d","sha512":"08817aa268183073f9584dba8a79d8cc01e7ede8902f3d2346973198e9020ce8f6b29ee8f8b3a30a1bd17e1ee2e2fb72ec822d31648639af3cf8a4fcd1572c05","ssdeep":"","tlshash":"119002c8b8927002502d1574002e410511a98db3570410a0d22108595c601448299544","size":44,"data":"","first_seen":"2025-06-11T16:05:43.611157Z","last_seen":"2026-04-23T18:13:24.026717Z","times_seen":9802,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"41429afe04fa00a8dedf8d85da64403b","sha1":"a513e89b10881bcd84c5d15a98bd6c064135b651","sha256":"734e9d5a16ac8180f6dc200d66918d83c73c7eab878e1dfc478cb9aa3dd0381d","sha512":"08817aa268183073f9584dba8a79d8cc01e7ede8902f3d2346973198e9020ce8f6b29ee8f8b3a30a1bd17e1ee2e2fb72ec822d31648639af3cf8a4fcd1572c05","ssdeep":"","tlshash":"119002c8b8927002502d1574002e410511a98db3570410a0d22108595c601448299544","size":44,"data":"","first_seen":"2025-06-11T16:05:43.611157Z","last_seen":"2026-04-23T18:13:24.026717Z","times_seen":9802,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines/scripts/arbineuro.js","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fcd12df7ef4acca26636aa51241089e","sha1":"8a01c5ea4e2eadc9697b7992a3f7fd0ff1fe0ca6","sha256":"e8eaa5daf0142e8627ffbcc08635147b5514cb2b40e4f4e75eb15062dfa0d589","sha512":"1c2d766f6e7e4faa0948cbbc2a607247dee3a2dbac4de48da234f4b3f389bdfa47d5ab3d5e764bbae769b24fab42f3d12cda202813cc4390d2c3a38ca69637a0","ssdeep":"192:WOwlWQkg81WdPE6aHqMHqYaxohLTT2iN/Cus52gsNmWIi9:7QC6JaHrHDvSSKg9","tlshash":"fc12b6b916f224761aa3e13da31f621e603244472d48dcad7fdc07801fda52d94b26ce","size":9837,"data":"","first_seen":"2025-10-16T18:41:54.530497Z","last_seen":"2026-04-23T18:13:24.007976Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"41429afe04fa00a8dedf8d85da64403b","sha1":"a513e89b10881bcd84c5d15a98bd6c064135b651","sha256":"734e9d5a16ac8180f6dc200d66918d83c73c7eab878e1dfc478cb9aa3dd0381d","sha512":"08817aa268183073f9584dba8a79d8cc01e7ede8902f3d2346973198e9020ce8f6b29ee8f8b3a30a1bd17e1ee2e2fb72ec822d31648639af3cf8a4fcd1572c05","ssdeep":"","tlshash":"119002c8b8927002502d1574002e410511a98db3570410a0d22108595c601448299544","size":44,"data":"","first_seen":"2025-06-11T16:05:43.611157Z","last_seen":"2026-04-23T18:13:24.026717Z","times_seen":9802,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-04-23T18:13:24.028074Z","times_seen":12681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-04-23T18:13:24.028074Z","times_seen":12681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-04-23T18:13:24.028074Z","times_seen":12681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"339fa9e9a9b900045f3a65413e3bbcff","sha1":"ed94325e5ae002a762b1ff3865e2d30aa6da2bfa","sha256":"7af10d50539266811c9284560fbaf140ec050fbc8d886d11f9fd1107868f50ba","sha512":"0b1f4c415282d4bee298f793123a0124c78d3383b22ab878fbc7a0f9da006f7951cb9f290b246d9fb3d034e5434a4b68f991e9e977e2d31bdaebde0789f4929e","ssdeep":"","tlshash":"609004cc705170074711553cf4771045137dc5d317450000570c0141f714544c011d5d","size":40,"data":"","first_seen":"2025-06-11T16:05:43.613148Z","last_seen":"2026-04-23T18:13:24.029052Z","times_seen":3395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-04-23T18:13:24.028074Z","times_seen":12681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-04-23T18:13:24.028074Z","times_seen":12681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"41429afe04fa00a8dedf8d85da64403b","sha1":"a513e89b10881bcd84c5d15a98bd6c064135b651","sha256":"734e9d5a16ac8180f6dc200d66918d83c73c7eab878e1dfc478cb9aa3dd0381d","sha512":"08817aa268183073f9584dba8a79d8cc01e7ede8902f3d2346973198e9020ce8f6b29ee8f8b3a30a1bd17e1ee2e2fb72ec822d31648639af3cf8a4fcd1572c05","ssdeep":"","tlshash":"119002c8b8927002502d1574002e410511a98db3570410a0d22108595c601448299544","size":44,"data":"","first_seen":"2025-06-11T16:05:43.611157Z","last_seen":"2026-04-23T18:13:24.026717Z","times_seen":9802,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a839f374cc28e2364ced089660b22d62","sha1":"9ab4daa1d9db52944cb44117efea3e3b64a6692e","sha256":"94d99112279811c889bbbbc10a37dc372792bef18ab9ac25f35be92dc7815795","sha512":"c0d0aee6a994fa22ce9040fafd02aaf5a4c4eb249bd50e835f525aabd7b90fb5887ce8ece9681fd39100ed661862563b996e30b256dac92495a4d4e122ab0551","ssdeep":"","tlshash":"cda0118ef288b0ea028a320a202a0002220b0aea0c080000ab200bc0202b002222aae8","size":75,"data":"","first_seen":"2025-01-30T14:49:29.385206Z","last_seen":"2026-04-23T18:13:24.029949Z","times_seen":2405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KGKQDC7","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f87ce688c50be5c350a6f701589b18b","sha1":"363ec8476e90910efef849497a493b8b3ae9b7a1","sha256":"e742dd192e738258964e32f3c57e629dd590e54d53e1e57d078cbc5bc8523ab5","sha512":"bf3efa2426bc43f15ee9b0cbbd5ddff6ddd8f27e4e536fe3f26cc7121ae91276113d0237200d062d1a7e9786253e6103ef64c19f7ac5caf09742d2a328cb59d0","ssdeep":"6144:yiFzeclE0aiEOgEHKyoHqDtZAp5STbqa2zmkkvv:5zzaiETyoHo24","tlshash":"f4a42acdb3d674625393b478803f018fa17a28a2b84cd895f185cce42e746aa5273f7d","size":469637,"data":"","first_seen":"2026-04-23T18:13:24.003188Z","last_seen":"2026-04-23T18:13:24.003188Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"41429afe04fa00a8dedf8d85da64403b","sha1":"a513e89b10881bcd84c5d15a98bd6c064135b651","sha256":"734e9d5a16ac8180f6dc200d66918d83c73c7eab878e1dfc478cb9aa3dd0381d","sha512":"08817aa268183073f9584dba8a79d8cc01e7ede8902f3d2346973198e9020ce8f6b29ee8f8b3a30a1bd17e1ee2e2fb72ec822d31648639af3cf8a4fcd1572c05","ssdeep":"","tlshash":"119002c8b8927002502d1574002e410511a98db3570410a0d22108595c601448299544","size":44,"data":"","first_seen":"2025-06-11T16:05:43.611157Z","last_seen":"2026-04-23T18:13:24.026717Z","times_seen":9802,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea7287111b0cf13fec3e65764efd1943","sha1":"9459473cb40561087a934128181e7b7b037b33e6","sha256":"d0b31de6b8fe1c0124b2bd9ef10749c9f84c7abcc4b2dcba7b6d37c98241fefc","sha512":"245a6929bfd54ab604d11ccfef494d0dd7e7faaf9f661ade97111e604993b6d9dd38ad1c0f5ba2f8fcc0c93b74e04935d13aea88031d412eaa38bf280efca008","ssdeep":"","tlshash":"06516247f39594621ae7397da33f5309ba7217e2098188e2b225ae807c096d7c433bdc","size":3154,"data":"","first_seen":"2026-04-23T18:13:24.030796Z","last_seen":"2026-04-23T18:13:24.030796Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-04-23T18:13:24.028074Z","times_seen":12681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-04-23T18:13:24.028074Z","times_seen":12681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4c3ab9c6ef5eb1f7ac772de037c3205","sha1":"fe7d35f8194524a24e11f3b83c0d62e21b9c83d2","sha256":"dc9dfade73d33d3810b3f88d557112a154484a0ca886d00afbdcf45a3c055f4d","sha512":"e51b67d331747587db06f5ef8cf607565aea96acece867807886cf3df8fb9d3f131bfad127a15876202daec26d93c3bdee75afcec99df1317532d8cbea5db981","ssdeep":"384:UeC4aI6bpbmKtwdWv3J+X73+hFNqFcGzrE/c4X1eDYE8tIStPCR9nKXswm+PG/ZV:U8aI6b9oIE+hFNqF8b1oUtFUnKXm+GV","tlshash":"ece2c4c939c97265efaa783020bf34c76b7dbf4430099554d320a9f4f668329b626f58","size":31473,"data":"","first_seen":"2026-04-23T18:13:24.020603Z","last_seen":"2026-04-23T18:13:24.020603Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"41429afe04fa00a8dedf8d85da64403b","sha1":"a513e89b10881bcd84c5d15a98bd6c064135b651","sha256":"734e9d5a16ac8180f6dc200d66918d83c73c7eab878e1dfc478cb9aa3dd0381d","sha512":"08817aa268183073f9584dba8a79d8cc01e7ede8902f3d2346973198e9020ce8f6b29ee8f8b3a30a1bd17e1ee2e2fb72ec822d31648639af3cf8a4fcd1572c05","ssdeep":"","tlshash":"119002c8b8927002502d1574002e410511a98db3570410a0d22108595c601448299544","size":44,"data":"","first_seen":"2025-06-11T16:05:43.611157Z","last_seen":"2026-04-23T18:13:24.026717Z","times_seen":9802,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-04-23T18:13:24.028074Z","times_seen":12681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"41429afe04fa00a8dedf8d85da64403b","sha1":"a513e89b10881bcd84c5d15a98bd6c064135b651","sha256":"734e9d5a16ac8180f6dc200d66918d83c73c7eab878e1dfc478cb9aa3dd0381d","sha512":"08817aa268183073f9584dba8a79d8cc01e7ede8902f3d2346973198e9020ce8f6b29ee8f8b3a30a1bd17e1ee2e2fb72ec822d31648639af3cf8a4fcd1572c05","ssdeep":"","tlshash":"119002c8b8927002502d1574002e410511a98db3570410a0d22108595c601448299544","size":44,"data":"","first_seen":"2025-06-11T16:05:43.611157Z","last_seen":"2026-04-23T18:13:24.026717Z","times_seen":9802,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"de71c380e96d9b7bf68cb0a923e08eba","sha1":"9aae5681bf56d422dbf17bc20de1ffc684f6bcf2","sha256":"d4fdb974acf7a5b6f9f81dc7eb577fec64b2f814fdf47ca5c28e9c6683f7efd6","sha512":"a8a4091e05901dd2af4061255342bb0c5494967b8c23044c93af0c642d2090067443be2c68b48cb2774398a46304f8de144bde0ec0af57c10e62c980e447f89e","ssdeep":"","tlshash":"d780008cf0a3b00ce8023028303b002aaa3eb8c03a082002f3000082a83820cc023ec8","size":34,"data":"","first_seen":"2025-06-11T16:05:43.634134Z","last_seen":"2026-04-23T18:13:24.032919Z","times_seen":6823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"7fa004aac5b324faaaeb21a2268798db","sha1":"12ac70d4b571872b7849926b643c34679d981f12","sha256":"9c8ea5f3b212440bb43f9fb7a71c7c9217673099a9c96cc984565ae226b7f304","sha512":"bf1304930741fce5f04d1db6d6b83b0fb32d2227a15c35fc536babe62e93f70215f15f6cb2a25d0f14b9192120a2d7596201472e00adeb14cc7da7ccdf21709c","ssdeep":"","tlshash":"a2a0118af288b0aa028a322a202a0002220b0aca0e0800002b200ac0202b20a222aae8","size":75,"data":"","first_seen":"2025-01-29T06:33:24.949615Z","last_seen":"2026-04-23T18:13:24.03397Z","times_seen":1001,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines/assets/index-B6sFy4wR.js","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2191db158076657459e5062a29f99e39","sha1":"847b7295027a7d38c39f5772a1cd5d47bdc15e0c","sha256":"24ecbede50d4d3ffc249fa83928001903e85ca0a20bb5daf1af51c4c4f4315b0","sha512":"35d70c32c47a3d3d5e8f52ad566d043ea76dd7898fe2c5e693835e881e16a6654b42e8771c300bfe7d1879b0d188a40e2f18b7db9ef28420f06d2a6c8d4e5cc2","ssdeep":"12288:5d8f8TrepWA3LyAi+Zzg6OUROrnkMbZJlvPPxlU:5d8f8TreOAi+ZfOUgr5bZJlfxlU","tlshash":"7fd46cc8b296b42543a6a4e8907b0117f33e2d14700cc1a8fa7ddeda3d7a9158277f79","size":647770,"data":"","first_seen":"2026-04-23T18:13:23.987303Z","last_seen":"2026-04-23T18:13:23.987303Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"41429afe04fa00a8dedf8d85da64403b","sha1":"a513e89b10881bcd84c5d15a98bd6c064135b651","sha256":"734e9d5a16ac8180f6dc200d66918d83c73c7eab878e1dfc478cb9aa3dd0381d","sha512":"08817aa268183073f9584dba8a79d8cc01e7ede8902f3d2346973198e9020ce8f6b29ee8f8b3a30a1bd17e1ee2e2fb72ec822d31648639af3cf8a4fcd1572c05","ssdeep":"","tlshash":"119002c8b8927002502d1574002e410511a98db3570410a0d22108595c601448299544","size":44,"data":"","first_seen":"2025-06-11T16:05:43.611157Z","last_seen":"2026-04-23T18:13:24.026717Z","times_seen":9802,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-04-23T18:13:24.028074Z","times_seen":12681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"96d69c7371ad6b7e2d91f73cc2d28051","sha1":"c8c56c9f3f49ce47921c2a469b633825e070ef48","sha256":"6926ad929eb09be5027ce76cc01015a208d9fda0658abbd635e4db66a3ee70c1","sha512":"840156b8403c7d359f11c123846cda451593f9e3870d89c27dea9107ae76382e2d13ce4bab59ba173be6e9b3d2cad526aa0e53ebc03e4f7441696d9bfe366d4f","ssdeep":"","tlshash":"16a0124af18870a5018a3106101a0001124b06c51c150000172006c0201601201259d9","size":75,"data":"","first_seen":"2025-01-28T09:42:26.514511Z","last_seen":"2026-04-23T18:13:24.034983Z","times_seen":1464,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"21abdddc1ce0065975f7e42db9ce97e2","sha1":"ca401e2e141baf5692b2af54577bce718c253ff5","sha256":"50bbac787a940e282e0c53bca2363bc6bfeb41b133b687bd8794fb0d98d590ad","sha512":"0a20fb1cf0fb7520804acdfcaa214790b95ea0e74917ab94a7da9f6980e088c4bba52582222401ce7b6b43c8387ac1294d5b5fe50657191e6ebed377f9c877a6","ssdeep":"","tlshash":"20f05488bc54c188543700bbd3bbdb685490002b1e4019238061c5e53c39ecf46878dc","size":482,"data":"","first_seen":"2025-08-30T05:12:21.014859Z","last_seen":"2026-04-23T18:13:24.035847Z","times_seen":205,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"663f8444cca3e2e63c4196175a56fbd5","sha1":"09f202072a050825b752de00200e48818178a6f2","sha256":"e66d7b9d5cf71626eb46a7981c6966a171f6463e1d3cd05dff0fe4bfb1780b09","sha512":"6982abdc875590f9e023b65d63e597b9ebb0f3d6a566f91e3d36aa77120016d5671a788cb84d0332842cfc17c015c909a57653d70d2c2b71b138ad707b846055","ssdeep":"","tlshash":"de5177337907a8b945dd2eae972f3345f8f01e5c8550e08095a4fee03db9a33956386a","size":2484,"data":"","first_seen":"2026-04-23T18:13:24.036682Z","last_seen":"2026-04-23T18:13:24.036682Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-04-23T18:13:24.028074Z","times_seen":12681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"339fa9e9a9b900045f3a65413e3bbcff","sha1":"ed94325e5ae002a762b1ff3865e2d30aa6da2bfa","sha256":"7af10d50539266811c9284560fbaf140ec050fbc8d886d11f9fd1107868f50ba","sha512":"0b1f4c415282d4bee298f793123a0124c78d3383b22ab878fbc7a0f9da006f7951cb9f290b246d9fb3d034e5434a4b68f991e9e977e2d31bdaebde0789f4929e","ssdeep":"","tlshash":"609004cc705170074711553cf4771045137dc5d317450000570c0141f714544c011d5d","size":40,"data":"","first_seen":"2025-06-11T16:05:43.613148Z","last_seen":"2026-04-23T18:13:24.029052Z","times_seen":3395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-04-23T18:13:24.028074Z","times_seen":12681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"41429afe04fa00a8dedf8d85da64403b","sha1":"a513e89b10881bcd84c5d15a98bd6c064135b651","sha256":"734e9d5a16ac8180f6dc200d66918d83c73c7eab878e1dfc478cb9aa3dd0381d","sha512":"08817aa268183073f9584dba8a79d8cc01e7ede8902f3d2346973198e9020ce8f6b29ee8f8b3a30a1bd17e1ee2e2fb72ec822d31648639af3cf8a4fcd1572c05","ssdeep":"","tlshash":"119002c8b8927002502d1574002e410511a98db3570410a0d22108595c601448299544","size":44,"data":"","first_seen":"2025-06-11T16:05:43.611157Z","last_seen":"2026-04-23T18:13:24.026717Z","times_seen":9802,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-04-23T18:13:24.028074Z","times_seen":12681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-04-23T18:13:24.028074Z","times_seen":12681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-04-23T18:13:24.028074Z","times_seen":12681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"41429afe04fa00a8dedf8d85da64403b","sha1":"a513e89b10881bcd84c5d15a98bd6c064135b651","sha256":"734e9d5a16ac8180f6dc200d66918d83c73c7eab878e1dfc478cb9aa3dd0381d","sha512":"08817aa268183073f9584dba8a79d8cc01e7ede8902f3d2346973198e9020ce8f6b29ee8f8b3a30a1bd17e1ee2e2fb72ec822d31648639af3cf8a4fcd1572c05","ssdeep":"","tlshash":"119002c8b8927002502d1574002e410511a98db3570410a0d22108595c601448299544","size":44,"data":"","first_seen":"2025-06-11T16:05:43.611157Z","last_seen":"2026-04-23T18:13:24.026717Z","times_seen":9802,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-04-23T18:13:24.028074Z","times_seen":12681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"224d814e15420b878f93c58107276228","sha1":"deb9423c99aa5a984f651581551c00f0a05cca5b","sha256":"373ec1cc85ee256740f070428a14b758a08ccec7f405f29ca8e4c41df6d42464","sha512":"5da8fc4b47e2d9bac9d8d8e64f88e48067f4e602ff26604e26488d2880096bfb5c0c4e99c62db227f5a5e9726d27edad249eccc69252e537e17f39017572ad0c","ssdeep":"","tlshash":"8fb09bfcb144695512aa42591669454d55eb05064d595040e44955e0172455d441dd31","size":124,"data":"","first_seen":"2025-10-15T18:39:53.81661Z","last_seen":"2026-04-23T18:13:24.038706Z","times_seen":2811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca1a0f93a39f788ddf0fbd5410955246","sha1":"b82023caa0bb2df8741fcf4054846919ce112538","sha256":"7aeedaedc274a3c26a53bf0f672ca00de891ea11cf3be689af2ccea9688f47e4","sha512":"dc86575fe545e93985ac745f24e06790fe1fb57e7effb5aeb9849787089b7c34c707cd3cc410f40dc120be319ccb3b96c0df22523a40192f1a95b8d7b5f3752a","ssdeep":"","tlshash":"40618557f345a4730ada3a6ea33f934bfa7127e5094654a2b220afc078192d7c53379c","size":3248,"data":"","first_seen":"2026-04-23T18:13:24.040986Z","last_seen":"2026-04-23T18:13:24.040986Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-04-23T18:13:24.028074Z","times_seen":12681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"339fa9e9a9b900045f3a65413e3bbcff","sha1":"ed94325e5ae002a762b1ff3865e2d30aa6da2bfa","sha256":"7af10d50539266811c9284560fbaf140ec050fbc8d886d11f9fd1107868f50ba","sha512":"0b1f4c415282d4bee298f793123a0124c78d3383b22ab878fbc7a0f9da006f7951cb9f290b246d9fb3d034e5434a4b68f991e9e977e2d31bdaebde0789f4929e","ssdeep":"","tlshash":"609004cc705170074711553cf4771045137dc5d317450000570c0141f714544c011d5d","size":40,"data":"","first_seen":"2025-06-11T16:05:43.613148Z","last_seen":"2026-04-23T18:13:24.029052Z","times_seen":3395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f3c2870ba5cb549c7a40615d42f3af1","sha1":"9d10a785cf7b717f58bbedcc5cf75ef1d480416c","sha256":"152672a84db2bc5ed6435c3dccf0a7ed6b9eff1a061f376115e5a1e4d4b7ee06","sha512":"2d715f458a1a4da053d3c346a44ec92ee159c3d49c7f2d214b535bead119307282f50a634ae7ee3e9ba1687ee341a708b3d0695764bc8e42b0f1d30148f4fa7f","ssdeep":"","tlshash":"8ad023ad1d76843061d8024a30b5d3ad256171547751e100c1ddcc6b6e21ed344b5558","size":217,"data":"","first_seen":"2026-04-23T18:13:24.043245Z","last_seen":"2026-04-23T18:13:24.043245Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"f04cec337b5ec467228004454e894532","sha1":"0f25955027600596e57c8393223729c55893fe05","sha256":"4b3491267bf1ee54b13c5be25d61114053901cfe75fa6050c5501b706faa2794","sha512":"daca9180a1f70e467b9c31c00083c3fc9ab0c7b1197af41ba9355051f5c24c77c67ef91a393696e9b240d68defd6bf1ca3b97e3a222155502d0a557c9facfb86","ssdeep":"","tlshash":"8ea0228ff2ccb0fa02cf320a202f0002220f0bca0c0800002b300bc2302b003223aaec","size":75,"data":"","first_seen":"2025-01-28T09:42:40.623651Z","last_seen":"2026-04-23T18:13:24.045544Z","times_seen":3869,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"fd7809e66bfee5e461d4820b9effef20","sha1":"2c2f818736687bd70dcfc3d358f2a4670424c848","sha256":"9755d7e636f3e3814f113cff296f0082cd988031bc3331bd4ac330fd4947bc29","sha512":"3be35509c461d6a27b01078bfa8a5989079a44fc0dbe926c8c8897879f893673ab2bfbfabd85dce3bd375a9f074b555cdca0baf55e68ae1debd05ee89e71b5bc","ssdeep":"","tlshash":"aac08cc4a0c22d001602641020af28e49028402670481b029da4d8882e220f09233e98","size":138,"data":"","first_seen":"2024-09-19T21:21:20.539293Z","last_seen":"2026-04-23T18:13:24.046559Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-04-23T18:13:24.028074Z","times_seen":12681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"de71c380e96d9b7bf68cb0a923e08eba","sha1":"9aae5681bf56d422dbf17bc20de1ffc684f6bcf2","sha256":"d4fdb974acf7a5b6f9f81dc7eb577fec64b2f814fdf47ca5c28e9c6683f7efd6","sha512":"a8a4091e05901dd2af4061255342bb0c5494967b8c23044c93af0c642d2090067443be2c68b48cb2774398a46304f8de144bde0ec0af57c10e62c980e447f89e","ssdeep":"","tlshash":"d780008cf0a3b00ce8023028303b002aaa3eb8c03a082002f3000082a83820cc023ec8","size":34,"data":"","first_seen":"2025-06-11T16:05:43.634134Z","last_seen":"2026-04-23T18:13:24.032919Z","times_seen":6823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"7cb2aae2b1c57b6dbb067db9a3943c40","sha1":"27e561148e55047f8062c8c3eebdf910f5569c5e","sha256":"118351441004efd33c4d05ec9db5b8296b494ed99726dcbed0cae414e2e382cd","sha512":"83bb3a971e32bba3b3419bf406959e4659e6b92677afb94f7316a0b4ce5bad863c1292231f6850290a828234a8c60357a2a6e6d10b93c5ce749a304001127b89","ssdeep":"","tlshash":"b8c08cc5e0c62e016a12a81125bf36e89034842a70882b868cdcec983e234f48337edc","size":157,"data":"","first_seen":"2023-05-05T08:00:34Z","last_seen":"2026-04-23T18:13:24.047472Z","times_seen":395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-04-23T18:13:24.028074Z","times_seen":12681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-548949LWLW\u0026cx=c\u0026gtm=4e64m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0b8c6a90b428ae01ae7fc694c6e2999","sha1":"84c1872369c9c2afcdf1bbec5474dfd32851930c","sha256":"a7405ccbe293a09ef73d108d0031c18894ec71634ca7b951caf521dc828485fa","sha512":"fe548418c013a271a600f636ba1328c043a33624f2cb86b43262150698e96f7ab2e265a91d61d71344830da8718c3be4edd64ca310c9971dde4418a01933a5fa","ssdeep":"6144:RqiFzeclE4kY+2OgJoIIDUZAp5STbqIzUUj+R8z:zztkY+25oIVf","tlshash":"489409cdb3d674665392f478903f018ba57b28a2b44cc89af189cce42e7465a4277f7c","size":438844,"data":"","first_seen":"2026-04-23T18:13:23.977735Z","last_seen":"2026-04-23T18:13:23.977735Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-04-23T18:13:24.028074Z","times_seen":12681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"41429afe04fa00a8dedf8d85da64403b","sha1":"a513e89b10881bcd84c5d15a98bd6c064135b651","sha256":"734e9d5a16ac8180f6dc200d66918d83c73c7eab878e1dfc478cb9aa3dd0381d","sha512":"08817aa268183073f9584dba8a79d8cc01e7ede8902f3d2346973198e9020ce8f6b29ee8f8b3a30a1bd17e1ee2e2fb72ec822d31648639af3cf8a4fcd1572c05","ssdeep":"","tlshash":"119002c8b8927002502d1574002e410511a98db3570410a0d22108595c601448299544","size":44,"data":"","first_seen":"2025-06-11T16:05:43.611157Z","last_seen":"2026-04-23T18:13:24.026717Z","times_seen":9802,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4879019c8a0de4e843b448c07105f9da","sha1":"9a01e5c4fe62d1b765fbedcf804f4ed45fc68515","sha256":"962a35c2d195446c9e850eafc93792185c1bd182e680a6dee8b66d8a0a8103fd","sha512":"9281da5feb7a5920a7b2d9d1b88e061b519c943cc6bcabde8e358853b2c13de4208f1bade2b93e9b4ab6b474156646f4c4d588f856a6e284875194853825f109","ssdeep":"","tlshash":"b5d023945c56b0a45df3006ee97f330f249573114609c4746211cf55353c57f9d09648","size":227,"data":"","first_seen":"2026-04-23T18:13:24.048355Z","last_seen":"2026-04-23T18:13:24.048355Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"df790ee3adc73e9be1b07b62ea0074e7","sha1":"c055409cf6f378ce64bb86f2b98fb82102e25740","sha256":"eb6f9121937d5633c4319aa8f5b5e861af1ce0fc63b8a15b7e558291cc954746","sha512":"30c79ca8ffbbda2dee038a8fb46aafedba9e86f0f1998e03b5285bd5b714d11c9ff6c9a29fa6336f54d257d8add1cc0562a2eb074d5caca630b528d079917718","ssdeep":"","tlshash":"01a0228ff2ccb0fa02cfb20a202f0002220f0bca0c0800003b300bc0382b0032a3aaec","size":75,"data":"","first_seen":"2025-01-29T06:33:24.955578Z","last_seen":"2026-04-23T18:13:24.050096Z","times_seen":2755,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"a5e8909f33c67590894a039e60d7f584","sha1":"a3d06e461f20ede37d4f46789e7914f52415b33b","sha256":"d69373c88a2a770c87ba112a064e9499db0d9bd632dba0223a57c33ee3698d07","sha512":"676a4417804151b6a699b5c0234491a9edeaeae5a7df5678b1616513269e0e9a9d016681f7781c42b952921521f793aa14ac4a933ff07cf141fab2db74d90c1d","ssdeep":"","tlshash":"28c08cd6a0e26d002603a51010af34e8a035402a704d2b039ca4d8582ea20f09237ed8","size":147,"data":"","first_seen":"2024-09-19T21:21:20.54477Z","last_seen":"2026-04-23T18:13:24.050874Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"30eb274c43bb8cae4249da8c789ad46c","sha1":"8798e647b05a7151df8bf369a6ac3b11d8d601aa","sha256":"46c4a79ba4a164b401284b0ff0c359b37e7f9e43f4048e6815931ac51d8c6c9c","sha512":"69318f0f64b1227a2eafbde0beb45a50468d372642a7bbdd31475469f9c9699ff1bc9b7540c118ab12ee64ccea5d252bccb686fbf390e866a02cfc38df80d14b","ssdeep":"","tlshash":"5211c0793f2a5534c6d5818b317ee7a93d3260657a02a044c26ccc295d18e8714efdbe","size":902,"data":"","first_seen":"2026-04-23T18:13:24.051585Z","last_seen":"2026-04-23T18:13:24.051585Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"41429afe04fa00a8dedf8d85da64403b","sha1":"a513e89b10881bcd84c5d15a98bd6c064135b651","sha256":"734e9d5a16ac8180f6dc200d66918d83c73c7eab878e1dfc478cb9aa3dd0381d","sha512":"08817aa268183073f9584dba8a79d8cc01e7ede8902f3d2346973198e9020ce8f6b29ee8f8b3a30a1bd17e1ee2e2fb72ec822d31648639af3cf8a4fcd1572c05","ssdeep":"","tlshash":"119002c8b8927002502d1574002e410511a98db3570410a0d22108595c601448299544","size":44,"data":"","first_seen":"2025-06-11T16:05:43.611157Z","last_seen":"2026-04-23T18:13:24.026717Z","times_seen":9802,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-04-23T18:13:24.028074Z","times_seen":12681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-04-23T18:13:24.028074Z","times_seen":12681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"41429afe04fa00a8dedf8d85da64403b","sha1":"a513e89b10881bcd84c5d15a98bd6c064135b651","sha256":"734e9d5a16ac8180f6dc200d66918d83c73c7eab878e1dfc478cb9aa3dd0381d","sha512":"08817aa268183073f9584dba8a79d8cc01e7ede8902f3d2346973198e9020ce8f6b29ee8f8b3a30a1bd17e1ee2e2fb72ec822d31648639af3cf8a4fcd1572c05","ssdeep":"","tlshash":"119002c8b8927002502d1574002e410511a98db3570410a0d22108595c601448299544","size":44,"data":"","first_seen":"2025-06-11T16:05:43.611157Z","last_seen":"2026-04-23T18:13:24.026717Z","times_seen":9802,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"339fa9e9a9b900045f3a65413e3bbcff","sha1":"ed94325e5ae002a762b1ff3865e2d30aa6da2bfa","sha256":"7af10d50539266811c9284560fbaf140ec050fbc8d886d11f9fd1107868f50ba","sha512":"0b1f4c415282d4bee298f793123a0124c78d3383b22ab878fbc7a0f9da006f7951cb9f290b246d9fb3d034e5434a4b68f991e9e977e2d31bdaebde0789f4929e","ssdeep":"","tlshash":"609004cc705170074711553cf4771045137dc5d317450000570c0141f714544c011d5d","size":40,"data":"","first_seen":"2025-06-11T16:05:43.613148Z","last_seen":"2026-04-23T18:13:24.029052Z","times_seen":3395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/afh.js","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"61441690eb523492e37a71bd260d6923","sha1":"3755a390e48e596333118d4ec4243e7dd6a71da6","sha256":"6b8f991a1e9040144ffbe54feb707a9639abf64906dbd1e27c73a5978cb87026","sha512":"c76474acda6e8802f10386aefde1470a19eed80a26afa41adbb4932f251b1a0c5bfa87f9f6f12098f523a9c3f5a76cb90d6e8096b079deaae7617189c83d18ff","ssdeep":"768:/F8h7vlnpzOpaHzBIE1m6rMPSdpkucWl4IopUL5XOrv5714Vhai+7RB6hJg4tNqe:N8xHzCwdpkuUIg07si+7RB8J1tNqJut","tlshash":"b8332ad87183b078436758b9407f5117b23a7d51745c8882e02bd9993dbae1e823bfbd","size":51838,"data":"","first_seen":"2026-04-09T19:09:38.661072Z","last_seen":"2026-04-23T18:13:24.018089Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-04-23T18:13:24.028074Z","times_seen":12681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-04-23T18:13:24.028074Z","times_seen":12681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"b01c9d9b3c9cd49d4f1a79926e27b043","sha1":"e3811cfff7116c0cb2f4a960acedbddcb3c5df59","sha256":"7e8cdb7f7d2e310134e4e82ea625d7270865a28a3541183956ea1896f95a8293","sha512":"6598e67bf845c34225a42b037cd094c8ccf3f7d5160f44cba33f7c0d2f1bc0efeded874de062097474a1e64001ccfdc875f02eda8c859ca1fcbe4196bb7ad425","ssdeep":"","tlshash":"6ca0228ff2ccb0fa02cf320a202f0002230f0bca0c0800002b300bc2302b003023aaee","size":75,"data":"","first_seen":"2025-01-28T09:42:26.515813Z","last_seen":"2026-04-23T18:13:24.053351Z","times_seen":1384,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"6900701ff959494d30437499abeb8885","sha1":"7cb4c820fbf30caa6b50d6c2dc4aa7c0c4b644d8","sha256":"3be52a71ee1e4d668cceef779a9942298cef4d68e03183d10681c4aa945c83f5","sha512":"731bc35b44d92adfda91474163cba7cbfe8ebb8faeb76364becb6a0f87c8d62c68a560257759546c0c38da3d0ea220cbee60eed126f77194441f92786231135b","ssdeep":"","tlshash":"b5c08cc4a0c22d101642645420af26e4a028802a70485b128c94d8482e620b48233ea8","size":138,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-04-23T18:13:24.054149Z","times_seen":5641,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.geetest.com/v4/gt4.js","fqdn":"static.geetest.com","domain":"geetest.com","tld":"com"},"ip":{"addr":"104.17.6.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e10f4bc47f2fcd630ed843e9061cf44","sha1":"35b9e07ec532b978d2f92adcdb3d31a9f706383e","sha256":"d16f159d776bfadf27a75099cd3a16e3de499a39d26e7587d0831322f767cc4d","sha512":"8953dcdc7bf40d7c7d849719a6663c66f21fbee4460f2b7ee73d9ce2ee202a9ca68ccae586fd05b1bfa0768cddbdf4c99ce77819f8d2ec03f77ddf412fae8621","ssdeep":"384:0BDAKWacAauzIuUMYVbFX7YoUBXdwNRGjv:0BEKRa2c0","tlshash":"5b62538e68a6a05349b3b778cb5fa514fe694b7340248141bd5ce3586fb043487abfdc","size":15364,"data":"","first_seen":"2024-12-27T01:11:33.480297Z","last_seen":"2026-04-23T18:13:24.019031Z","times_seen":1319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a1930373136b72e2ed89eaa43e2bac39","sha1":"d42342cf6336bcf7d8b78e22182eb261a5c6399d","sha256":"233e7072fe97b1a1484f14e34abdd45ab943b6276379383663318d7588296f86","sha512":"11adf9e350489f9fe30b30cb26def3262be9f57799beae89925f478c5cc8ddd643ae25b0652f9c204d44f71b96ec246446571b34936723379a6c197293cc9f2f","ssdeep":"","tlshash":"c4a0025db485b32487c1643ca0761016737a48c0370c5355aa19f165399d6065332a8e","size":65,"data":"","first_seen":"2025-06-11T15:45:11.860699Z","last_seen":"2026-04-23T18:13:24.028074Z","times_seen":12681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-548949LWLW\u0026cx=c\u0026gtm=4e64m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:54.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtag/js?id=G-548949LWLW\u0026cx=c\u0026gtm=4e64m0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f1w-045098.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 23 Apr 2026 18:12:54 GMT\r\nexpires: Thu, 23 Apr 2026 18:12:54 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 148624\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":438844,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"f0b8c6a90b428ae01ae7fc694c6e2999","sha1":"84c1872369c9c2afcdf1bbec5474dfd32851930c","sha256":"a7405ccbe293a09ef73d108d0031c18894ec71634ca7b951caf521dc828485fa","sha512":"fe548418c013a271a600f636ba1328c043a33624f2cb86b43262150698e96f7ab2e265a91d61d71344830da8718c3be4edd64ca310c9971dde4418a01933a5fa","ssdeep":"6144:RqiFzeclE4kY+2OgJoIIDUZAp5STbqIzUUj+R8z:zztkY+25oIVf","tlshash":"489409cdb3d674665392f478903f018ba57b28a2b44cc89af189cce42e7465a4277f7c","first_seen":"2026-04-23T18:13:23.977735Z","last_seen":"2026-04-23T18:13:23.977735Z","times_seen":1,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flowmetric.life/api/v1/product-visits","fqdn":"flowmetric.life","domain":"flowmetric.life","tld":"life"},"ip":{"addr":"194.67.193.200","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:55.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flowmetric.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 17:26:40 GMT","end":"Tue, 07 Jul 2026 18:26:27 GMT"},"fingerprint":{"sha1":"AD:FC:32:DD:7B:0D:E7:7C:7F:A1:59:3C:3D:09:3E:4F:18:45:89:AD","sha256":"38:78:FF:49:67:95:49:41:AF:46:1C:65:90:FA:0D:FD:E0:14:D5:2A:24:D9:3A:41:32:35:CF:E7:4E:EF:83:3A"}}},"request":{"raw":"POST /api/v1/product-visits HTTP/1.1\r\nHost: flowmetric.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f1w-045098.com/\r\nContent-Type: application/json\r\nX-Unique-Key: cc3a645ed66bed135b90b805ff3c8a75\r\nContent-Length: 575\r\nOrigin: https://f1w-045098.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":575,"data":"{\"href\":\"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc\",\"pageType\":\"landing\",\"landingId\":\"2158\",\"unique\":true,\"referer\":\"https://r1w8nq9.life/\",\"visitDomain\":\"f1w-045098.com\",\"clickId\":\"776819c1-20f5-4085-87bb-def6b9acbfbc\",\"newPartnerHash\":\"vtwi\",\"newClickId\":\"776819c1-20f5-4085-87bb-def6b9acbfbc\",\"newSub1\":\"zjeoa69ea6124000bacc2\"}"}},"response":{"raw":"HTTP/2 201 Created\r\ndate: Thu, 23 Apr 2026 18:12:55 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://f1w-045098.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nx-frame-options: DENY\r\ncf-cache-status: DYNAMIC\r\nset-cookie: h_visitor_id=0d04ab66-19b7-483b-98a9-5997078a6393; Path=/; Max-Age=2678400; Expires=Sun, 24 May 2026 18:12:55 GMT; Secure; HttpOnly; SameSite=None\nh_click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; Path=/; Max-Age=2678400; Expires=Sun, 24 May 2026 18:12:55 GMT; Secure; HttpOnly; SameSite=None\n__cf_bm=lPP42e6DVAZ7shqpCvlHyJBki3PoigLXUfqra.MEIg8-1776967975.01238-1.0.1.1-Y8LNXNSUE1sWmPdflfiLITEYpsZQVxvO3Z.xBbFiNEUE79S2cW9OiGv63zIGrdnNBSycwOYckJH0D30syPt3drarsWmmYoiUFpVv6gNszmy3fWT2Dt4eyeTAf9WMMfzA; HttpOnly; Secure; Path=/; Domain=flowmetric.life; Expires=Thu, 23 Apr 2026 18:42:55 GMT\r\nserver: cloudflare\r\ncf-ray: 9f0ed6d3dda00731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":663,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3801dc5ef31bfbc0ee758c422e489437","sha1":"c6da3f0e582d9ba52b5802b0fedc170c00ec4533","sha256":"7817f1537b07e192ac48ce4d8f4bb26b09f4a10d8e2fc57285a3ca9eefa3c0fd","sha512":"9cb6c20271c863aec7e6c9b9d30951653cdff91aaded8e25e934869d97b2380ef932d2d2d9eaed75f5922cf15217882ea2ba1f8f2f5fbf3e068223afd234ea73","ssdeep":"","tlshash":"d801d3b1501b2c7dbd5432316040bd44b53e639b87d02fb4b8fd5f6056f46751760b88","first_seen":"2026-04-23T18:13:23.981987Z","last_seen":"2026-04-23T18:13:23.981987Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":20,"connect":1,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines/assets/bg-right_1024-iC8Pr2f1.avif","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:55.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f1w-045098.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 11:03:12 GMT","end":"Sun, 05 Jul 2026 12:02:59 GMT"},"fingerprint":{"sha1":"2A:31:F0:E3:26:97:D1:9C:13:74:A8:6C:94:FB:31:1F:ED:88:43:DF","sha256":"75:4B:F0:85:32:1C:3B:E8:7E:0F:22:8F:D6:64:CA:0F:55:3E:12:54:0C:B7:11:48:D8:63:73:34:45:74:89:7E"}}},"request":{"raw":"GET /v3/2158/1win-mines/assets/bg-right_1024-iC8Pr2f1.avif HTTP/1.1\r\nHost: f1w-045098.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f1w-045098.com/v3/2158/1win-mines/assets/index-CDpakxPU.css\r\nCookie: __cf_bm=K53.ZolW0O64y5_.i7I.TAFWdqfyON1UFZQAo12t7xc-1776967974.4594915-1.0.1.1-K5ArkhJaOU69gL47Q7vnnpWLfqe1qjI5oU2ldtzJl4B0yIEW7bpqEDo50_k7HtF8GDLRqwa51ixeuhZAD6ySg.0HRyKk99gtBcqg5tz_D.uQRRKMMjBW8bge5hwtRQtPurq7a2dhvA2MchZ_ltfyEQ; _cfuvid=hwbPJ1.W6fa2OeUvFg2AZH5MUZniWnWuvbSyfeWX5sk-1776967974.550509-1.0.1.1-aZdYt_7rrtvTBlFzkSircdFvQvMnm7CFI.tLQ9HmThU; OTA_device_id=3f4db8cd-8b2d-4ceb-b940-36f3ffe3837a; partner_key=vtwi; visit_domain=f1w-045098.com; sub_ids=sub1=zjeoa69ea6124000bacc2; click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; session_partner_key=vtwi; session_visit_domain=f1w-045098.com; session_sub_ids=sub1=zjeoa69ea6124000bacc2; session_click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyODEzY2Y0Ny0wMTFiLTRlMWQtYWY2OC1jMmU0NmUzZTM0YTElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzc2OTY3OTc0MTg4JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc3Njk2Nzk3NDI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; core-sticky=1a6d4a4cef98cc60; cf_clearance=o6rZflRQ9fY1mcFxW5CyKMUQR6JKo.JINsviROQFdmo-1776967974-1.2.1.1-v0vmPXxRhBtsplnDFyRAk2XGj2keQljaPA83bwnwOhvdI2CpQM_NFHPDmUSDqdZ9ZiThcdANsC1daDkHsQydEPgg2P9n_CeHAGnRfxdrhFC09AJDYcs26ETs55TGPeKDQS5E4Dhe.UmxNEvNONXtKlf0AHKmObV8Kk6COpYY8sSUcXaxnOJQUlQG3a30Qt8U3UwcXMX9oGhdYGJCEg1.wDUPa4iROcc9hlIIS9tB9GPeTfRf4o5C.95SwImW4YA8aDKSWuMoQf8qGEfYWbFwDMO6frtGPsb4Kzrms_fS64iA9nc7n.PaJ0wbWpVlt6gKKxIpfNOnJ.cIfrl1Fnuj8w; _gcl_au=1.1.1253745890.1776967975\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 23 Apr 2026 18:12:55 GMT\r\ncontent-type: image/avif\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nlast-modified: Tue, 21 Apr 2026 15:21:05 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\nexpires: Thu, 23 Apr 2026 22:12:55 GMT\r\ncache-control: public, max-age=14400\r\netag: W/\"69e795e1-86c2\"\r\ncontent-encoding: br\r\ncf-ray: 9f0ed6d43e7da41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34498,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"35e9bbc6398078efbd495a1b3856bd7e","sha1":"b389d651828fc556fefb2bb1c9f037a1a2ea117d","sha256":"c0d7547a80f683e2fab135a42ff9e1d34111d3c372f52ec5b812177c41cffa0b","sha512":"0e1e24f2af14989ef82018971ceaafda0267f3670d51b859e90ef926fb28bd82575b48eff951550209f67b3c02ddbe4e91aa672ce2fb45b8cc159abd1bb7183c","ssdeep":"768:SS6wHK2f5K2ry9OoEfulMfjECnSBN0u+tVjsDd6DpJ:SWNf51rywoEfulMfnSYtVjFL","tlshash":"2cf2f20b0ce961f99e92e77e81701620e07a7572fa53e5079df6f824f82c295c672c16","first_seen":"2024-09-19T21:21:20.530565Z","last_seen":"2026-04-23T18:13:23.984736Z","times_seen":9,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/analytics/pv?pgi=GTM-KGKQDC7","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:55.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f1w-045098.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 11:03:12 GMT","end":"Sun, 05 Jul 2026 12:02:59 GMT"},"fingerprint":{"sha1":"2A:31:F0:E3:26:97:D1:9C:13:74:A8:6C:94:FB:31:1F:ED:88:43:DF","sha256":"75:4B:F0:85:32:1C:3B:E8:7E:0F:22:8F:D6:64:CA:0F:55:3E:12:54:0C:B7:11:48:D8:63:73:34:45:74:89:7E"}}},"request":{"raw":"POST /analytics/pv?pgi=GTM-KGKQDC7 HTTP/1.1\r\nHost: f1w-045098.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1617\r\nOrigin: https://f1w-045098.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\r\nCookie: __cf_bm=K53.ZolW0O64y5_.i7I.TAFWdqfyON1UFZQAo12t7xc-1776967974.4594915-1.0.1.1-K5ArkhJaOU69gL47Q7vnnpWLfqe1qjI5oU2ldtzJl4B0yIEW7bpqEDo50_k7HtF8GDLRqwa51ixeuhZAD6ySg.0HRyKk99gtBcqg5tz_D.uQRRKMMjBW8bge5hwtRQtPurq7a2dhvA2MchZ_ltfyEQ; _cfuvid=hwbPJ1.W6fa2OeUvFg2AZH5MUZniWnWuvbSyfeWX5sk-1776967974.550509-1.0.1.1-aZdYt_7rrtvTBlFzkSircdFvQvMnm7CFI.tLQ9HmThU; OTA_device_id=3f4db8cd-8b2d-4ceb-b940-36f3ffe3837a; partner_key=vtwi; visit_domain=f1w-045098.com; sub_ids=sub1=zjeoa69ea6124000bacc2; click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; session_partner_key=vtwi; session_visit_domain=f1w-045098.com; session_sub_ids=sub1=zjeoa69ea6124000bacc2; session_click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyODEzY2Y0Ny0wMTFiLTRlMWQtYWY2OC1jMmU0NmUzZTM0YTElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzc2OTY3OTc0MTg4JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc3Njk2Nzk3NTE5OCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; core-sticky=1a6d4a4cef98cc60; cf_clearance=o6rZflRQ9fY1mcFxW5CyKMUQR6JKo.JINsviROQFdmo-1776967974-1.2.1.1-v0vmPXxRhBtsplnDFyRAk2XGj2keQljaPA83bwnwOhvdI2CpQM_NFHPDmUSDqdZ9ZiThcdANsC1daDkHsQydEPgg2P9n_CeHAGnRfxdrhFC09AJDYcs26ETs55TGPeKDQS5E4Dhe.UmxNEvNONXtKlf0AHKmObV8Kk6COpYY8sSUcXaxnOJQUlQG3a30Qt8U3UwcXMX9oGhdYGJCEg1.wDUPa4iROcc9hlIIS9tB9GPeTfRf4o5C.95SwImW4YA8aDKSWuMoQf8qGEfYWbFwDMO6frtGPsb4Kzrms_fS64iA9nc7n.PaJ0wbWpVlt6gKKxIpfNOnJ.cIfrl1Fnuj8w; _gcl_au=1.1.1253745890.1776967975; visitor-id=0d04ab66-19b7-483b-98a9-5997078a6393\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1617,"data":"{\"event_properties\":[{\"page_url\":\"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc\",\"referrer\":\"https://r1w8nq9.life/\",\"page_path\":\"/v3/2158/1win-mines\",\"query_string\":\"?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\",\"domain\":\"f1w-045098.com\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"gtm_container_id\":\"GTM-KGKQDC7\",\"gtm_container_version\":\"261\",\"build_version\":\"\",\"build_time\":\"\",\"build_name\":\"\",\"partner_key\":\"vtwi\",\"visit_domain\":\"f1w-045098.com\",\"click_id\":\"776819c1-20f5-4085-87bb-def6b9acbfbc\",\"sub_ids\":\"sub1=zjeoa69ea6124000bacc2\",\"hash\":\"\",\"custom_url\":\"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc\",\"device_type\":\"desktop\",\"platform\":\"web\",\"country\":\"undefined\",\"landing_id\":\"2158\"}],\"client_event_time\":\"2026-04-23T18:12:54.16\",\"client_event_time_utc\":\"2026-04-23T18:12:54.16\",\"client_time_zone\":\"UTC\",\"event_type\":\"page_view\",\"uuid\":\"2813cf47-011b-4e1d-af68-c2e46e3e34a1\",\"session_id\":\"1776967974188\",\"user_id\":\"\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Thu, 23 Apr 2026 18:12:55 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9f0ed6d51f21a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T21:02:29.078164Z","times_seen":14117394,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines/assets/index-B6sFy4wR.js","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:53.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f1w-045098.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 11:03:12 GMT","end":"Sun, 05 Jul 2026 12:02:59 GMT"},"fingerprint":{"sha1":"2A:31:F0:E3:26:97:D1:9C:13:74:A8:6C:94:FB:31:1F:ED:88:43:DF","sha256":"75:4B:F0:85:32:1C:3B:E8:7E:0F:22:8F:D6:64:CA:0F:55:3E:12:54:0C:B7:11:48:D8:63:73:34:45:74:89:7E"}}},"request":{"raw":"GET /v3/2158/1win-mines/assets/index-B6sFy4wR.js HTTP/1.1\r\nHost: f1w-045098.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc\r\nCookie: __cf_bm=F7yasPdeZU2zTTGVQVdqimmszaBtQ.b.HM30eqOnuMw-1776967973.3502452-1.0.1.1-7t8MNCNazWYYcCNCKyeDI.9addDzW7Jey6uylpkJSGqIlVYRg14AXFxROl.JzsASMtnp1o2hemASjDF2C8QEkERkt5VRc2UobSXUx6BL.EqBh4By7RikrQ0momOWkJKnGJjSBADBPc5WbWeiwmz6LA; _cfuvid=rqrJeIq5SED_8s8TueHY52V_SsHsLx7BGT4_OuGMJ0I-1776967973.3502452-1.0.1.1-M5oSdbtsNfuVlrVgYdBZ3ich1kSymLu39rna8K7eGF0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 23 Apr 2026 18:12:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nlast-modified: Tue, 21 Apr 2026 15:21:05 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\nexpires: Thu, 23 Apr 2026 22:12:53 GMT\r\ncache-control: public, max-age=14400\r\netag: W/\"69e795e1-9e25a\"\r\ncontent-encoding: br\r\ncf-ray: 9f0ed6ca7ee8a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":647770,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40372)","md5":"2191db158076657459e5062a29f99e39","sha1":"847b7295027a7d38c39f5772a1cd5d47bdc15e0c","sha256":"24ecbede50d4d3ffc249fa83928001903e85ca0a20bb5daf1af51c4c4f4315b0","sha512":"35d70c32c47a3d3d5e8f52ad566d043ea76dd7898fe2c5e693835e881e16a6654b42e8771c300bfe7d1879b0d188a40e2f18b7db9ef28420f06d2a6c8d4e5cc2","ssdeep":"12288:5d8f8TrepWA3LyAi+Zzg6OUROrnkMbZJlvPPxlU:5d8f8TreOAi+ZfOUgr5bZJlfxlU","tlshash":"7fd46cc8b296b42543a6a4e8907b0117f33e2d14700cc1a8fa7ddeda3d7a9158277f79","first_seen":"2026-04-23T18:13:23.987303Z","last_seen":"2026-04-23T18:13:23.987303Z","times_seen":1,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:54.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f1w-045098.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 11:03:12 GMT","end":"Sun, 05 Jul 2026 12:02:59 GMT"},"fingerprint":{"sha1":"2A:31:F0:E3:26:97:D1:9C:13:74:A8:6C:94:FB:31:1F:ED:88:43:DF","sha256":"75:4B:F0:85:32:1C:3B:E8:7E:0F:22:8F:D6:64:CA:0F:55:3E:12:54:0C:B7:11:48:D8:63:73:34:45:74:89:7E"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: f1w-045098.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=F7yasPdeZU2zTTGVQVdqimmszaBtQ.b.HM30eqOnuMw-1776967973.3502452-1.0.1.1-7t8MNCNazWYYcCNCKyeDI.9addDzW7Jey6uylpkJSGqIlVYRg14AXFxROl.JzsASMtnp1o2hemASjDF2C8QEkERkt5VRc2UobSXUx6BL.EqBh4By7RikrQ0momOWkJKnGJjSBADBPc5WbWeiwmz6LA; _cfuvid=rqrJeIq5SED_8s8TueHY52V_SsHsLx7BGT4_OuGMJ0I-1776967973.3502452-1.0.1.1-M5oSdbtsNfuVlrVgYdBZ3ich1kSymLu39rna8K7eGF0; OTA_device_id=3f4db8cd-8b2d-4ceb-b940-36f3ffe3837a; partner_key=vtwi; visit_domain=f1w-045098.com; sub_ids=sub1=zjeoa69ea6124000bacc2; click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; session_partner_key=vtwi; session_visit_domain=f1w-045098.com; session_sub_ids=sub1=zjeoa69ea6124000bacc2; session_click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyODEzY2Y0Ny0wMTFiLTRlMWQtYWY2OC1jMmU0NmUzZTM0YTElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzc2OTY3OTc0MTg4JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Thu, 23 Apr 2026 18:12:54 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/0b8fb825cb67/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=xoZwpvW42WLzJkuOBNLQ3PHvj9gKhhmUw7qgzi0yajU-1776967974.2306147-1.0.1.1-U7ylPv3_uMwszEZJ9uy57.4hqFB0wqTOglNkZTOFyKc.hnWm7JvEmreHZgzBSw6CVhkPAMZ9chqC6EFCe05GVegDqGJkopNxQ642EkkndkGbfsLNXbcDGVJy1W.tPYf4cHZTZA1hv.ltNozzcYnnmg; HttpOnly; Secure; Path=/; Domain=f1w-045098.com; Expires=Thu, 23 Apr 2026 18:42:54 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f0ed6ceea67a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31473,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T21:02:29.078164Z","times_seen":14117394,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/favicon.ico","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:54.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f1w-045098.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 11:03:12 GMT","end":"Sun, 05 Jul 2026 12:02:59 GMT"},"fingerprint":{"sha1":"2A:31:F0:E3:26:97:D1:9C:13:74:A8:6C:94:FB:31:1F:ED:88:43:DF","sha256":"75:4B:F0:85:32:1C:3B:E8:7E:0F:22:8F:D6:64:CA:0F:55:3E:12:54:0C:B7:11:48:D8:63:73:34:45:74:89:7E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: f1w-045098.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc\r\nCookie: __cf_bm=9.YdG63rHt6X1alKDFa4123Xp1t9iAUDkk819r2zsyU-1776967974.2484467-1.0.1.1-pKpHk_9AhAVRiOzvBRVrbTjSiKlo6qLqZapVvg4KlEfsW5mI8u.x1yWpmUsRu.BquUpV.l6Cuz7L4epvRAxUQXFL93V6ZgLiuzOeZ654lztVz12E70.qcD12i9OaMy5GXY8cBQgxNSOyAk9iU_Umrw; _cfuvid=rqrJeIq5SED_8s8TueHY52V_SsHsLx7BGT4_OuGMJ0I-1776967973.3502452-1.0.1.1-M5oSdbtsNfuVlrVgYdBZ3ich1kSymLu39rna8K7eGF0; OTA_device_id=3f4db8cd-8b2d-4ceb-b940-36f3ffe3837a; partner_key=vtwi; visit_domain=f1w-045098.com; sub_ids=sub1=zjeoa69ea6124000bacc2; click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; session_partner_key=vtwi; session_visit_domain=f1w-045098.com; session_sub_ids=sub1=zjeoa69ea6124000bacc2; session_click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyODEzY2Y0Ny0wMTFiLTRlMWQtYWY2OC1jMmU0NmUzZTM0YTElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzc2OTY3OTc0MTg4JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc3Njk2Nzk3NDI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Thu, 23 Apr 2026 18:12:54 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 9\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nx-trace-id: c70dcfb3604b3e057f2a0bb04326e8b8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-cache-status: EXPIRED\r\nexpires: Thu, 23 Apr 2026 22:12:54 GMT\r\nvary: accept-encoding\r\ncf-ray: 9f0ed6cf9adfa41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"9d1ead73e678fa2f51a70a933b0bf017","sha1":"d205cbd6783332a212c5ae92d73c77178c2d2f28","sha256":"0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5","sha512":"935b3d516e996f6d25948ba8a54c1b7f70f7f0e3f517e36481fdf0196c2c5cfc2841f86e891f3df9517746b7fb605db47cdded1b8ff78d9482ddaa621db43a34","ssdeep":"","tlshash":"a250000c0003c3cc0000003030c0000000000300300000300000c000000000000c000c","first_seen":"2023-03-08T03:03:03Z","last_seen":"2026-04-23T21:20:18.093974Z","times_seen":74521,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines/assets/bg_1024-BwAqQzjI.avif","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:55.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f1w-045098.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 11:03:12 GMT","end":"Sun, 05 Jul 2026 12:02:59 GMT"},"fingerprint":{"sha1":"2A:31:F0:E3:26:97:D1:9C:13:74:A8:6C:94:FB:31:1F:ED:88:43:DF","sha256":"75:4B:F0:85:32:1C:3B:E8:7E:0F:22:8F:D6:64:CA:0F:55:3E:12:54:0C:B7:11:48:D8:63:73:34:45:74:89:7E"}}},"request":{"raw":"GET /v3/2158/1win-mines/assets/bg_1024-BwAqQzjI.avif HTTP/1.1\r\nHost: f1w-045098.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f1w-045098.com/v3/2158/1win-mines/assets/index-CDpakxPU.css\r\nCookie: __cf_bm=K53.ZolW0O64y5_.i7I.TAFWdqfyON1UFZQAo12t7xc-1776967974.4594915-1.0.1.1-K5ArkhJaOU69gL47Q7vnnpWLfqe1qjI5oU2ldtzJl4B0yIEW7bpqEDo50_k7HtF8GDLRqwa51ixeuhZAD6ySg.0HRyKk99gtBcqg5tz_D.uQRRKMMjBW8bge5hwtRQtPurq7a2dhvA2MchZ_ltfyEQ; _cfuvid=hwbPJ1.W6fa2OeUvFg2AZH5MUZniWnWuvbSyfeWX5sk-1776967974.550509-1.0.1.1-aZdYt_7rrtvTBlFzkSircdFvQvMnm7CFI.tLQ9HmThU; OTA_device_id=3f4db8cd-8b2d-4ceb-b940-36f3ffe3837a; partner_key=vtwi; visit_domain=f1w-045098.com; sub_ids=sub1=zjeoa69ea6124000bacc2; click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; session_partner_key=vtwi; session_visit_domain=f1w-045098.com; session_sub_ids=sub1=zjeoa69ea6124000bacc2; session_click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyODEzY2Y0Ny0wMTFiLTRlMWQtYWY2OC1jMmU0NmUzZTM0YTElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzc2OTY3OTc0MTg4JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc3Njk2Nzk3NDI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; core-sticky=1a6d4a4cef98cc60; cf_clearance=o6rZflRQ9fY1mcFxW5CyKMUQR6JKo.JINsviROQFdmo-1776967974-1.2.1.1-v0vmPXxRhBtsplnDFyRAk2XGj2keQljaPA83bwnwOhvdI2CpQM_NFHPDmUSDqdZ9ZiThcdANsC1daDkHsQydEPgg2P9n_CeHAGnRfxdrhFC09AJDYcs26ETs55TGPeKDQS5E4Dhe.UmxNEvNONXtKlf0AHKmObV8Kk6COpYY8sSUcXaxnOJQUlQG3a30Qt8U3UwcXMX9oGhdYGJCEg1.wDUPa4iROcc9hlIIS9tB9GPeTfRf4o5C.95SwImW4YA8aDKSWuMoQf8qGEfYWbFwDMO6frtGPsb4Kzrms_fS64iA9nc7n.PaJ0wbWpVlt6gKKxIpfNOnJ.cIfrl1Fnuj8w; _gcl_au=1.1.1253745890.1776967975\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 23 Apr 2026 18:12:55 GMT\r\ncontent-type: image/avif\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nlast-modified: Tue, 21 Apr 2026 15:21:05 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\nexpires: Thu, 23 Apr 2026 22:12:55 GMT\r\ncache-control: public, max-age=14400\r\netag: W/\"69e795e1-1354\"\r\ncontent-encoding: br\r\ncf-ray: 9f0ed6d43e72a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4948,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"41a80f8c59043f7b0f1f0854bae5aa3d","sha1":"be036d511395368268defafe1b3a29aa6b4ef6d3","sha256":"4587eacc07ce288eb1f271cce2c7a2cb91b3d40010685185019e50c2443d7adc","sha512":"d059f87af3a85f6f1571b211a77997a7335125c9db41da23cc390fafd5fc7e104b0d446b25572ed7a0735641872e29da1bda5b2167507d89ece68b7051eefa7d","ssdeep":"96:+cLj4hutSaSNO7+tIhistr6qPLhupAVWFBmXQp/cosM5MEWmDQubsblg1m:+WUhG1SChisZ6qPLhupGO4XQphsMnHbS","tlshash":"3ba18d2e3012cc2ad804b133895a6b87358a63e8f81a27d350233fba85d52bb5d27547","first_seen":"2024-09-19T21:21:20.529338Z","last_seen":"2026-04-23T18:13:23.9913Z","times_seen":9,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines/sprites/flag.svg","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:55.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f1w-045098.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 11:03:12 GMT","end":"Sun, 05 Jul 2026 12:02:59 GMT"},"fingerprint":{"sha1":"2A:31:F0:E3:26:97:D1:9C:13:74:A8:6C:94:FB:31:1F:ED:88:43:DF","sha256":"75:4B:F0:85:32:1C:3B:E8:7E:0F:22:8F:D6:64:CA:0F:55:3E:12:54:0C:B7:11:48:D8:63:73:34:45:74:89:7E"}}},"request":{"raw":"GET /v3/2158/1win-mines/sprites/flag.svg HTTP/1.1\r\nHost: f1w-045098.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc\r\nCookie: __cf_bm=K53.ZolW0O64y5_.i7I.TAFWdqfyON1UFZQAo12t7xc-1776967974.4594915-1.0.1.1-K5ArkhJaOU69gL47Q7vnnpWLfqe1qjI5oU2ldtzJl4B0yIEW7bpqEDo50_k7HtF8GDLRqwa51ixeuhZAD6ySg.0HRyKk99gtBcqg5tz_D.uQRRKMMjBW8bge5hwtRQtPurq7a2dhvA2MchZ_ltfyEQ; _cfuvid=hwbPJ1.W6fa2OeUvFg2AZH5MUZniWnWuvbSyfeWX5sk-1776967974.550509-1.0.1.1-aZdYt_7rrtvTBlFzkSircdFvQvMnm7CFI.tLQ9HmThU; OTA_device_id=3f4db8cd-8b2d-4ceb-b940-36f3ffe3837a; partner_key=vtwi; visit_domain=f1w-045098.com; sub_ids=sub1=zjeoa69ea6124000bacc2; click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; session_partner_key=vtwi; session_visit_domain=f1w-045098.com; session_sub_ids=sub1=zjeoa69ea6124000bacc2; session_click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyODEzY2Y0Ny0wMTFiLTRlMWQtYWY2OC1jMmU0NmUzZTM0YTElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzc2OTY3OTc0MTg4JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc3Njk2Nzk3NDI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; core-sticky=1a6d4a4cef98cc60; cf_clearance=o6rZflRQ9fY1mcFxW5CyKMUQR6JKo.JINsviROQFdmo-1776967974-1.2.1.1-v0vmPXxRhBtsplnDFyRAk2XGj2keQljaPA83bwnwOhvdI2CpQM_NFHPDmUSDqdZ9ZiThcdANsC1daDkHsQydEPgg2P9n_CeHAGnRfxdrhFC09AJDYcs26ETs55TGPeKDQS5E4Dhe.UmxNEvNONXtKlf0AHKmObV8Kk6COpYY8sSUcXaxnOJQUlQG3a30Qt8U3UwcXMX9oGhdYGJCEg1.wDUPa4iROcc9hlIIS9tB9GPeTfRf4o5C.95SwImW4YA8aDKSWuMoQf8qGEfYWbFwDMO6frtGPsb4Kzrms_fS64iA9nc7n.PaJ0wbWpVlt6gKKxIpfNOnJ.cIfrl1Fnuj8w; _gcl_au=1.1.1253745890.1776967975\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 23 Apr 2026 18:12:55 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nlast-modified: Tue, 21 Apr 2026 15:21:05 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: REVALIDATED\r\nexpires: Thu, 23 Apr 2026 22:12:55 GMT\r\ncache-control: public, max-age=14400\r\netag: W/\"69e795e1-2f4d4\"\r\ncontent-encoding: br\r\ncf-ray: 9f0ed6d43e71a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193748,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"820b288a297214aa23359a890f56e387","sha1":"e618f8bff6619284aaf124478fd825eaef2643fc","sha256":"dd7c514c30b22338bd93a32ef7d5250ec9359d2677eba777a432e0a018135f30","sha512":"64e9397238042b0edb2f5a114fabd66b6a0aa8365d2b4878c3e8ddbc9af943333164130a12108d371fed40c8e937dbaac70d2f4806e6234e42f972f44781594e","ssdeep":"1536:9LlM2SM1OtzO4N6xnYcuVb1uiNStntETNv0KzbN9UZ/9BoOpkesx1hhDVVVf8CBJ:9pM/d2iWnGFzYZYzDVVVNJUzVVV+p7","tlshash":"f71464e9f2f852bcbc4d479d6f7d74df256720ff619000d9f2280ea49b826cd984a981","first_seen":"2025-08-09T05:08:50.640188Z","last_seen":"2026-04-23T18:13:23.992219Z","times_seen":153,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines/assets/index-CDpakxPU.css","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:53.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f1w-045098.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 11:03:12 GMT","end":"Sun, 05 Jul 2026 12:02:59 GMT"},"fingerprint":{"sha1":"2A:31:F0:E3:26:97:D1:9C:13:74:A8:6C:94:FB:31:1F:ED:88:43:DF","sha256":"75:4B:F0:85:32:1C:3B:E8:7E:0F:22:8F:D6:64:CA:0F:55:3E:12:54:0C:B7:11:48:D8:63:73:34:45:74:89:7E"}}},"request":{"raw":"GET /v3/2158/1win-mines/assets/index-CDpakxPU.css HTTP/1.1\r\nHost: f1w-045098.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc\r\nCookie: __cf_bm=F7yasPdeZU2zTTGVQVdqimmszaBtQ.b.HM30eqOnuMw-1776967973.3502452-1.0.1.1-7t8MNCNazWYYcCNCKyeDI.9addDzW7Jey6uylpkJSGqIlVYRg14AXFxROl.JzsASMtnp1o2hemASjDF2C8QEkERkt5VRc2UobSXUx6BL.EqBh4By7RikrQ0momOWkJKnGJjSBADBPc5WbWeiwmz6LA; _cfuvid=rqrJeIq5SED_8s8TueHY52V_SsHsLx7BGT4_OuGMJ0I-1776967973.3502452-1.0.1.1-M5oSdbtsNfuVlrVgYdBZ3ich1kSymLu39rna8K7eGF0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 23 Apr 2026 18:12:53 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nlast-modified: Tue, 21 Apr 2026 15:21:05 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\nexpires: Thu, 23 Apr 2026 22:12:53 GMT\r\ncache-control: public, max-age=14400\r\netag: W/\"69e795e1-8e267\"\r\ncontent-encoding: br\r\ncf-ray: 9f0ed6ca7ee9a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":582247,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2f8df7bcf6659621e61662f1dd84b02b","sha1":"274727b43008318df8f90fc03f094b85c44f476b","sha256":"a64ce7031ca03642ba45844ff822b9a206733e23691f4f1c972783ca174f0ea6","sha512":"797ced65e58acc6eb8a18067673523c9a7eb98b65b26feb099d63708485094fec27060a1054a7709104f9e89695f0d11084539e1657af139ad9aa89cc2f8af87","ssdeep":"6144:CBuiH96NnLI9oKIv6TvZZn0wx2HtRAkJgX5O1bB2+gBW+TtK033nzqCfElGOP/Av:iM4jIu+MkJgkrg9TYcXZc0aAn9OSibu","tlshash":"53c4f1b0740eef5b7ab70d24a9615e081e14be1bb37cf17df9e40925adead906a30074","first_seen":"2026-04-23T18:13:23.994792Z","last_seen":"2026-04-23T18:13:23.994792Z","times_seen":1,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/cdn-cgi/challenge-platform/h/b/jsd/oneshot/0b8fb825cb67/0.853941678187631:1776965384:8KSbJcbwdZ1hlw4UEe1tLDO9d6iIqVKLgOQ4qaAzVXQ/9f0ed6c96ca18deb","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:54.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f1w-045098.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 11:03:12 GMT","end":"Sun, 05 Jul 2026 12:02:59 GMT"},"fingerprint":{"sha1":"2A:31:F0:E3:26:97:D1:9C:13:74:A8:6C:94:FB:31:1F:ED:88:43:DF","sha256":"75:4B:F0:85:32:1C:3B:E8:7E:0F:22:8F:D6:64:CA:0F:55:3E:12:54:0C:B7:11:48:D8:63:73:34:45:74:89:7E"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/0b8fb825cb67/0.853941678187631:1776965384:8KSbJcbwdZ1hlw4UEe1tLDO9d6iIqVKLgOQ4qaAzVXQ/9f0ed6c96ca18deb HTTP/1.1\r\nHost: f1w-045098.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12508\r\nOrigin: https://f1w-045098.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc\r\nCookie: __cf_bm=9cWoOQtFU4pkgpqL6Eaf_72hKpAVQi1NNLm_tsLITSI-1776967974-1.0.1.1-HuFNJTtapClnS1ta_gmxbNnR03uRGifoZz9XwmXxFPuTt1p71tMmNlMnb7bRtBmNgdcC.mKt58r_vRDOMZJPQ.2CHNy1psfMpWgvD2T9_XXdrLdkfBXzlmrYFrOjpPlN; _cfuvid=qu3EtfoVwb5vrf.bkH6QCVjlBrU89C4LnxKFjrveYuQ-1776967974340-0.0.1.1-604800000; OTA_device_id=3f4db8cd-8b2d-4ceb-b940-36f3ffe3837a; partner_key=vtwi; visit_domain=f1w-045098.com; sub_ids=sub1=zjeoa69ea6124000bacc2; click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; session_partner_key=vtwi; session_visit_domain=f1w-045098.com; session_sub_ids=sub1=zjeoa69ea6124000bacc2; session_click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyODEzY2Y0Ny0wMTFiLTRlMWQtYWY2OC1jMmU0NmUzZTM0YTElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzc2OTY3OTc0MTg4JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc3Njk2Nzk3NDI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; core-sticky=1a6d4a4cef98cc60\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12508,"data":"acSmWeBYFjVKKVPFYVbambmVHmVPUKUMLtUHIFjBAU8$tMaXSVKBktG6mBItKiU$6kmVnU6DIBwqiat4nuUTl4LuUFb0HUBemBxsFLPB$jsMPZ1ETejSBXpe1nM$-ImUO0hUfmmcZcIu8DYUUXEnHj0SSB4sw40pDBqq2FUE8VRYnEizTycDTyrUBO0s-NfqLPUy6un6$$rtToNf8RYUyxLUFoURHKkUC67umvHJ1AgImGFYuvt9IVYUy-RUUrZDs7-4b77UVu+-vkQY5IUB6u$jFtHUy2YvB2Hy0tUaz4Dt0s1bbyYUF8RjVYRe7yHAPAY5UQUFe1Btk52PUUIwH7syH8FF-Fy-FUGS8UVlnjeUBtiRFJKESieULkP9GcOl0suJFuJRScfGtkur0GKMyHDt8LGt7ccUBjVXBUttLZ8q-2UtW6i+tO-OMFmNO21OtDMjXMKZ7fU5FkicmVeiuUCt-nNyHHT0aT8iUWWptYRb8Wo52BHvn6AXPoL8EvpwJ6N++NnHUDRSyUQ0vD7NzhtUU8-xcbbN5DDuw6nanj06a8$kEFF$gT$bpTvJmxun9Nu6Wl$Sx3WaqE-Xjy2Jk8iUGnASmKJHnaRGxgCCbGfqwg5eu8zk6Zp6DLtoL9TnFTN8QIfEUXpiyuSWuavGDD8OeJRog2rBA1qmIqD$Gq-W$gnGhYTRfHRTFib5A5oHCmRKULMHoShXqxyzUKXZ5DB86wEVBfI9vVD$XLaVRlBPEODG6HjasiA20WiPNl0y5+GyrJMI6ZFB6UBhbe0C0TZDCiHmu7c3HEI2j6h0qCmIFKaIsFotoD6GjrJGtQDpGKtI2DDB4DF660vwUvuEVcRmgL1GUCyc2DQM26DBFKgTDtiTm3CcHZ+-FqD+OcgTntSF4HOiSHIU+tHZFtJSrIOWmIycOHi+gBtETULbP8S60P9e2DIwUsiqZtY0UHYwLY70V$vBtyH3wU00IuCUyweF-01yS6DzweQu7KinLy6tMUuetpmnZtaQg1FfQ0Flzi4OFFvO-ISpbZ7ovYtNc-e-SvZYF0RmRiOokLxZvp4elmu$CFmAUelOcIiR9QBQQWeTa06DQtcyHU6ckprePyHtQYklH+iV$vZN5c0ilFZr1CmBGvZmkUWi8yZ0yByIYZRGtamS1cM4cY04G6q02Iu7ZzCuRPpZrMNumP2S6Zc8jY07Gg5BRqTmtmRu77lgC$ZLtSjUiEchMEGSsR7icsENFBKULMTO0Dsu4WFB-3y4boGSgmOIZMOtB+0CPw+kCXhBECT7CywgqIIBRwCHVLal1MzYSy+cjBrZQGIItSSciQ7y0tR6RIVTNP4kT6vtcx0PlU92LDFpZVQPiwKUicgzna+cSH4VUPc2KgMUy6iUSrvP6DeEg2IYHBom24UFQqjj6IHPjLy-MJOUBqoPmYUaIm7ttV1ZbIL6VUjLPVVgmg1fpihTop4ZI-MMUHpcLDrGg0qvfO8t8mhAJJIhl-4HhQ63S6B8QBeC1aYGt3vglOBQH1CfEf9w+Sa9Z0EtqXyh4q2IaPIZfg3hoIFUWfwmCjRmU0mW9QPRBNmIUSBJtUk3Erfv2XhFiyB3YsUvNHJmOU$KVUmsIgUIZ1FocmBnscbPrrkBlDPtKa1z8cZ-NxmUa+cFS8eum3wNyvyHPznBlCOBPFI2IXFxibzQwCYImZ3uKIYOhVnMKltjn5icSHnTRUv0IBM+0bjTTutSLSgBUTwCeUXQPPLVaJDs6KWcWmX6MwzRgSqWiXw1LpZtncOt189G1nLw$RI-FXcBs-ttZNFTEU1UQUKUiWZ5vcBZGFvTnBPMDnTFMyToTLGX6vZ9VTBH3ZNFPVOxTSUeM4aSn6NZq0zG7wlLDyznJPR4set6eiSZ-ZmBsMk+uoHKecBn-LvmV8LBBaZTE5noHmwDjR+UEmSaePB0e5tmiDTML4E2iHgHU$EU8BuOISHZO5TX$XQ4GUTIkFxU$MXBNF6Lu8ElsmqSNY8ykjNJIbc3$2MkTwW$8i9NHFSwpjevmQT3ZA0tWoJvX8QOUCO0VNURO6Z6L6PuxSQ6tRlDm+Ag+F9YO18NkFMj31oRS4B0BvDkO6-IDiK+6sigHY2B0AkJs4OM6IWjLpKD7vP0t9KtRa+tsJ6mT2uAXjvEOPy50eHLOuHULzz0857X64MyLKFL2v6rH8x7ZRox4wJmkBT2Mo3T-XnpUKsuQ4eDDW+2IRuRHe$yQ6Fig8p8tqHvFtGgVepD9FCOokgkxg1BZUzajr1PUILJsOpTybHb1wWcZRuBM-PyNKP5$XnOsjbHTf8sUwbtOT2KwOMLKVCFyg635T14+UEztwD+i7+EV8bnB$R2DtGSyH4rl2y0ILQ77cHSXMU1WCoXCNYwe1tjF4-kLuE8kew2HNhLoz6CKW$ym6NFh8EXHFXt-2uOR5PPS8xKLSPmy3B6V2PBZFGnPTM57LvC7$utFNmiAVpWJLU6QAbtp$0NhZLicy8AtE5LKyDRIXp3zXziFW0C1$sWUe1J6FQto16VQV+EF7Smye6C7p+MUglGTmBwGkGzSmEzcVs5F2IXZRBD0g6cImnlB6YEUCYsQ-jSXoStHtPy3ARaizQ-LkusEnj1hbxCcyXRUFLjaJMwuUWSztqVi4Ux0WKfrajCiS7BHj84Lmc8EXGbFImfWjs7mWF6fVDXsVo2SNjEiiGKiZ5bex0ShBsWKInJpsiGm34Fakm2mKH8FVZBhYFw8DSwSUIQ0z3thpns8HUItSNee7URgc$m0yNL2a0RttIe1VCsUUOGeFxK-XIwM1Qecy09aAcWV-82jcqjch62ARIQW1WoUmNtnxyamDgtAWFZbOU$QQmKtLBoMWb8Ckgxc1onwpA+5M29uLZuyHRMjG2A-5eWx4BMCCgSgHMFUmbpC26fE+G+PAHWO5bmuJ0IxxZZCuPHm+VlvxiFYHfDVFXq++c8H2MGj-sNjYsZQT5-r80gKhrlpGaNi8Se5eHZgvzCjy07CEzyZukUFV8HOH7FcG9xY-NJ$zp4giSoOWvQU9IcYlO1uVRoYcfOliq3Fj0Uk86jjIn-7FN0Lc4euMoHQazUnf-hJEygecBLYj3x8Z+atP3Z6Q8BPyRIe3kLDzSMaKY1BvjobALg7-NhkEacHmm7rE0NDma1pDOnK18H2-mWCPeCNwRu+4ai2RsYxSOCNkia-SI46rb5RsLjUOxJAo$tu97YYX6fHXB5h9ktD02IQ+-Uj2u--9-mKuA8SC6pitFhq6eC8NU5WomXjR8vU1rcS6TG6PjnPUZXR2zoNgnbm9PzJXLb6DA-yJqkU3RxmItHmf$72IwYCMvrAw-OiGDFtEYGp7YiQqAW$8B7TQBIjl112v-aOATgANlyD-v34InM3rlj6YeF62wTmzKZUmN3-QIIT1IBeZyBnNSh7G-O0UZxOqarrPxzOrcbt8rvoc0-xhX4jkBA4n-IPP8LB+SPobbp20Jz-EB+Sh2+U5Pp6B6zIvK-jyo1j38HoQ-aIbj4xRUOP4BNUS0Tamu-XOjLK3mvxRc5mhZYaoaLFLO7K10SjHFGSDK3x0uL8Q6ciTZ0iL49t1ZaPNKu4Hj1ZhmMoCu5iwtSyiVZocH5B7U1YSX2rz860b846ztLUj6Ty5Y5ThY-ZFUpbSZqUSHirgbLor6O84U3Bnbmi1FTX4aoaKVBVbbSVzolFtVyj8tDKuorV+ZaOumoiCKVF9iW2Kr2xLbOH1o4tTTPJcOmikPPoFDLX1T$HPoP0Z-nB6uGjpovPArKYTXg2rSN-tJ48s2EyzbtHbYy4HrQ-urMY9VWxIo6Vm8WVNF84FByFcH-je-cDiwtrIolwsKyeW87T2mvbnBoB0exOOexjejzI9FqVnXfFHBzyb0-tPju8Q0Qw0YpFqTaIhZljcugtq8hmXKTwf4JJMb5P1Uhr1ri29oVOn68u5ti6umbrWj4oNiiH7UcKvbKKIrcOyHC8peT23m-BCYYFYxvUjxno+T8XGYXw+mexSEKjHXLcBtkBGrxTtcXYHKiHGb0xGj-ZwBc-m8OFTrKumrzEfO1ySH1xGj42FmDHfesoVBUEbKCuRU9FmiHu0xHo4rzPEZCB4BobsxHor61SCuLPEer6M-PHEeeONrX4BR8xeOx4TUIFgSSVbP3JQiZE0EFBNUWcseBYiHRwDUu0m8ny3xBBny1tgPzxTECiFw8UUHDbmKkaZHj4nBCBhZzO7ym8B6JIrTeV1INXTjPjxrnUJo+SDKu6iRgEcOu0UmmVP0mrgyJDYuoBSJwU0iZBzy$m-xm$RB3eRrLUsaUH34LbLoe-ntMZLBra5eDi5RQRbxS$DwU62$yRPjgZnBvBoNpxg6DVBEa2vcNjU0iiwKhZEKmHirzPHbUNIUFc8BA4zNaXGFu-boNRTTTN5SPr88nB6r+63mjyPHaKi$aOPZQYGruS1NOX6EtRFZsmouiiG$i6BaJVXjtwxOCKFJ1o2NnrvaZy5OqmDx280BzNTRmWjVP00wIFtHnKVUKRQtU0oUqoc2Lm6FCFFaUW2eYrHFmWQ0+UaD+S+wULMo5ovWii3wsPW-L$IYvNxclNPJy$$0RPVUW2u8wuWB7T$HJj1t$FvwkbAibuXNiLloPWJer-aaA4M8+Jre3Z4LvUgBVBVEX-CRy4HJTu7bIEDFrb5iTo1iTT3w8W4mvcTFBiuVVPvcb$e6HUuHQU3PhWmVJ87U5r4WmYL-bwvB4$jRLOEohYKPb-WoCc-cGL6V3e2$xyc0j4ZjEeQxBij$uOQVX-t$GaHat0pT1UMSYrQiOYgmMZ-ZEBQr5je8h8MoUmbVgNcJsTwWMum6tK12nY-4k2zkhjptqSUVfWV-oZlaYBcoctaLc0BoPE8yEBVwqFi0WcoicXWVK-GjfWj2ARS2FDe0fBnU7j8U2FjXbPDKZk12u0-mjcojciZwcOFmLU2WHY-NH2VbImu4M6GbP$0YjKmEEYYUYQNiJ2RRG4qmFmPO6uoU1wK2DKKmlm7BnL6i+kF6Iu+xcZgWIE+ZprXEikXObW-wULe-zNHjjknR3Wvb6TSZORGLv40o5bjQCpcw8iBxzpaPVON2N83e8iBUBKHkh$EQS0ab0w0DVrVBPvu8Tm9acQo-7xbEHigeLOy0emX87LiyIcLORvDL+RqT7Qej2b5-B2IuIpUiYmqTDUti5Kz25JFBEoKb9L9YXQiwMv9VYNVpLyfZD-3rDNZRkQvcu8Y8abzLRLu8SkawWYPowx4UVU8NQpZeTomFbjvB0BTZ4ZhQFmQSxQqk$0EaMX$HLEQcucwRSWGjFmjwCWve2P+UbwXOENr-Ga0ZHaIaFU0FL$rrI$DekUuwMJM6+4hZukgt7TqPW$ykWj56o87RlV3eDKBOg4UKoeFZj2HakXWF6pbYYvuRoRtLYx7xSZPkvUzawmrYiNbPoWEEhXTy0cSR5vhphZ6kIX1448frrB46MvnONk7TebmwLt8i8ELrQoacZJjNHotkQZMuaYwSuxfpcmsH9H1RtEI86HtVQBi2lchiVBA4PwXaBo6ewFhRmVgPEv9mewhRQ26RRLZRnxc0MEXKcXGlpYba7KCrF6rkI$m6lA2P-m3cUpEkvG1Sy0tlNLPoiR8BQymiqLu0j4x-fZouC4kXqZy-Kuhouc$wk2Cwz4grgeYELPsvbVEUY6uCwbQB-F+k7K4$vBPpB6NuZ6JP2RYitJUW2oPEHRuc1m1Zqm8aabLrClFPYyib8BU7-JAYmLi0LEi0Gjr8sk4Ui6huzOEwHaeHcOPIxGwlHBHl7T1o4GDUj4zPU6AVcmEmcawK9FMCMZ6H06pvHE9tu4z$hw3ZZ$IGYpapLteOFAvvI$lvev7v+v8ONleZVBwU-aWW1JI$0GctvFLQDk9x5o12MXjrnX1XoNQNSJZWiYj4TcDKOY6YEyNKr8mvM2EeFNpNNuD7wUEBVWrE1JYuCBcECLe-QHVkULLu84LBWuDmsFul2babWFcyU8WVol4CeNFZBaVYXXnNYwzbLrnAk2XVnTVFABNc+NCFLB7VUHYXFt-BTPZcmQKiUx5GSN9EeAkaJIgS57Aj9UHJULZFz0$AUi1BwVBpU6+Ac-frvLRWtQAFKPmi6uiiXGBH-eDWHxgbae2KFGuGk78BpMTMDNKvZBSlkBfWcWnvev0vXiaucLsWkX1AgALb6+DK3wF8CLOYPIm+CxEUtGNU8lO4wEAR$E7LvQ15llPag5CWM6QC$vUQX26cPc+7XXTyCo3uVUDxM8RlljDrx+W-J+DvRjXLQAUYGWk61mDKa6yO-O0B076k7Tju82l$l7YrgP3xE6iFVE+pFolF8u5ZhmzV0CLZgTMRxYER2AcONM+mHQkJhL3ASNNwelbCLlzv$RA$+mNjNiXRgj5X+e0M+26Xx7ZLiJl$Q0yYw-7$SNbWmCFplzgVCoAw5lLoRxD4LbhAw6pi0BECkU9vOVNv0BIZxJGa-EQB+rfWXYiHnXQY3u7BaJgSvC1TMm1kYjU0EpxAtHaCohhZ9-IAlERAl+8vLM7BMBg$vhG-BZSmqStHIvB2fB-pIhF8hViMMLGrrUAMKGYGsboGA40jn6gKONbJWBymkUUpLrzGF8ol7Crhw6BM8j1vOzauDpcsNlQcD$Mvu60vZUO$QYrSm8OX-tUirwDKBABpqWvB5ONh-Fu0yYUuYRE6G-kl-5A7mLN$0VfW$r7Xoz-z-jnX$BLr28FBTtzcyZwCBF76$EGRURRjn80Ga-rsScfNONzIojnmPxkRtHEw75AG+yVzpzYsxcRQL-uM9ehPpp9G77KkVLD6T82MXGy-NVPn$GWjOlARbpYJxO-j3vthMlQLsxQtmHDr4UrA1McZ78982PYZk$pKNiVW-jI5bM0QsHK7QZWB+9vELtrEMiw$5rOWDx0Df5cLeYRYD5JA7n2LyRpN36Jkb-4-l2oh0MQ0P$-Uro$sIQ6iPruMm6B5N6PuJLcXRbwZgPi+QLjlqZO-eAUl08SkJj-WUWUk-nm+fxZ2B2F72VqZF4cmU8wSDLbCTLWXz$EUBCpP6YUixu$5HeJDlk48NFm5CLkpImZCIuqC$a0Bmrpz2hoeYmAhAlt65Pr8f5ZxM-6LLMpFA9xy5Z$zFgC-HNxFv-elsaDUvG2vb6Q+KHzsgs1cNgWsLqAhH56Hp5hm+tlA8UDWt0MSxSugQrKAT9cmGk8UVV9asEHLpGrr0DRA-9eY$$UK66iMF2JVPH-jer1TtjJuT+BHxumOt0BltonLzIDH5sQko5$k2mDx3N4b-RyUXEzYyJAcy0fB8UCPUirl+nRzxnqKJnHuQQ-yVsw-J2hqLU9F0XgiyC-Coi8Cm0wzOkhm3xZ$WhZya2kN+NzNX255LrzNVjNic8NinMi7JXSMHhDOz7ucZO0OXXKLHqQuvFuE3eRpn333GgHB2pBZ859ssrqngOLLTXP9$FyH9Fu3SXfE2F8eFm3OBg7+-l1vRv2$Bj-gP849QOAnaM8U7eDVRkcO-psTvF4EIZ63qme2-00wi4w9AFbDtZ-TT-PUHpiIEeHHsiT9RScZ0NK8DHDTUHReSVSzBmGijuzrmtrhCFTV2meHb$+SwPumHx1y7lAFT$UXXGZTV+eP0YcKsEJbUITSi$TjC-IyQ1NDTR12v32f6sWKygVOBcRX65PSQmPIXS3ct3jAkKtNmCr9ium5PtEF5pjx1CEgGUWKyCUUPIUXDLIa6m6tAB0U52p+7wBmNLFpnKj8QMt86tTHbBnH6bGuywSLBxNTzqH+sB60+BTtgOgNWmySPRXXBnILzBYBZSit$1iSELUjetBJHQLBmLC1RGFGTuSZomvS8V0DBrUcZP965SOsHHZ0PZOcgSvWelwIDNHJKvsS4-BU-FrzQHcigFHOmKVFLHlte16TQCVHn6-gTig0MgexBCZPSbi0mnwEPVsP1U7VLFGTZGOzZnI8Ha6VUVwFLZPzJi+rtslEmLZnlLP9F5L$$VpN6ItHsa8MkBmLZQVPFnm2PipF0U1MLajl+2TAV7ZbIMNBYSkDuFoZCHruSOaNGBZWSf-YiER5TFKHDo$eGPVoTJmfUsZnITetSBZA64NHhR5Lj8t3eZFJmDj5bVFjjWBFuB4SBtRXI3eCyCQasyNCeS6IPe1ZZZL5GejHTSe9iqHCpO3wLmOwt07Sklyww3yTHrPimpe-jGTFwU+tXhji+Ft8wyVSiPyTnU-yBBjej6jNS6EKClH1DL2mHVC1NjlBsc7P2i15taOMFRenj4Ij$Fw2ZCRFBnWsa4CFa4wmFrZACssU4CuZp0PzOcJtJ-GWSASv0agqUp$BWTBPIZnHC20bhTFmwFguIoHBChTBLVPPhilIbFnEE7w+m-icjV-CgyZeSDkihuaxIgEuVwN-UbPn$MOyWFGSjZjUC7WVt$VjDxOsGW7nep-VoDqj61O+L5lmmF61cslTnFcUXec06I0Igi5IUHm8Uftvi02sDHz4wZsHwivOWklcUR1OPQDuezVFb0Sg3CYPvFLlTxeJ2cioIaR7sSl2z0JP$mUzaMCHZf05vnjuDypypwTI6IyQG1WpGOmaIJZPbUaCLtBILoDPMPBMyqWIZDZ3$YTkmV$tgHnSJHmrs4CmpyFRjEvY66itiUKBMiYwTNUCXBBURHTMULCM-5gF3TTICYSExjjA0IRfZQmbBKCzYVpwwDjNWFE5yBUaHoQzYWP-NwEVUm5Iim5UGIyjFxw2gLMPNsTIeC7BKoC+8CysyN0Ib7SiHLICwOF$KR$iLj8XWuthTFUBTnUsRUtGtOmUwe18PDB6-OMvo3c5sjhkpCCHSmzF4E0eZNmXpOxb0KmJM1A-jF9BqR1UPfOg5ueyrvmLA+KMKIReKR4YSz6G7PGq$qU8UoQg7Bp5Dv3BVjD7SCC4mYwgwYFXUxUeFUSQ6T+TFTBI0-tTvFULmJt2IUUFO3mASEmHcC-lhuw6qU+25+eOHn2cFew6HUS-+lC8lPVNS1UiTNFnSAtfmhYnEmFMGTrBxNgtCms2CD-hzecuQ5H+DbjtyY5FCI5KUsvaxo+1IjiG62BVRBrB+OpqjiGDW3VcHKfRXQPTzVbc+UU23eJp6MF0EgDiI4aGZzVV58S1fhpi8HysLgeGL4S87ntGyyIZQclPcjnXSfvUE$Uv2oOCRMyCgbsSciucLWHzwGrNHwjqUW$GyGXeuOG2mXL$DPHqRpLwWpiPFGZUM6lDelp5QFUFZleQup2OwnLsBFHmnDOcTNFP7Hlpec0wUULUj7TMyVrDLmgY+rnYmuoQb4S676eUb-umPI7OCO7J$7UZ0KnGmYIy2V0D04Q0fm9U1HGpyIYuciSsmnxCtUQwmIiIT6bjGLFgeAUJEL2aHUgU9ULOtLGlRJV6BuZ7QPOCKE5UYZsBZuAHBtepseloDyLhz0eupnCM+$Yn-jFmUWaLm+0TBv$GUU4VjZEIGSZOPNnAW+wWBuuiEtUaAT5G1U7UY8JzH$FwOQOP4$U0IqSCjV3BhzuMBNjYC$HD$wKaKVn8oLr-gTS6sREeEGnQVhIj4jjEnqrZwO52F4LmBmFGa$-qHZ2AKrK+yykyZ$74AYf7M5LGET0Me9YrSUMyr-JNVU3MSjuhspGlHl49tVWy5nY-0SsSgWjA-tMqIk$GSmLqM1AsjV0NF44mSzGPGJ-Eb4UaUfNm4CsOtiXBMYc3YrGJMl2A4uhjQy9SWMl2NiHCjj-pUq7QBD4oHBNn2BfLM$hbfo2HUeCa-jBmyn6Bwa8Vf7lrwDHFh5QktAOHWZ4oFMokqSW7K06LH+BNGSCww1N4Us4qBqGSW-TNkoMYANS7Zx$1$ZBoolB6IyWlf$lyijnZgKF7my$+y+1JggEhzN8HgPDzgHLoGnI+$o3SmTB1ATU6tt2QMYQe53MP6P-vyceQzjURc8kc5PcelMUzsJMIN0U$2WHMHuUA6bcHFewBgLMfWeWoBsooDpvsbwCWn4gOtgBgZI6vwaPKYu7sm1Y8+BUyTFwD8AVpZnLWmaNBnnciF+u$CysjtTRm1o6ZWHySooT+bMA-2L6leNGDpPm$I9$fSNROTvOxyPy$0m6K76PjyK6ILnm3R7+8KnYFJDU4FPAenA7I8rDQ-3mJgYIy1DRP-FIe4uY1+n0+IT4LpBraUXY6UFF4aGP4aU2v8vWeQAjWzCqj2DrWLP-ewBqmH4iaLn4VOt+HH6rHxLGSmSX4wB-++WLa-MR3bbhW+61DZ-yB8gg9LKF8LF4uUtiyPCoe3HF4XY64yzMkejWM-vQFysqSW7mwoU0RcMssCKpZBf-18V+MHxB8ZHk-4+BNTHBeFS$n4VOgyEmkFexe-3NLll6VaiGOWQm3MRcH4F7BB4LPj1WMyIQY-2LS6DLztnzTtFtQAbKTPMLJhJMwDtKRqBNyBZzZjQ53PYVnsbylB4HZbB2iNWIk3GcQGLI3alWPxBVZN5-M2eRaoBce5Fu8qYn4RPmSlgHi0FQ9cEDVcmSm93vSFP+IkgCn0ubCaR8EKVrO7kBm6Le+gvQwO3W8ubQfDqtKHp+kNH7POukXSnD7Q7bw$HXCljiGBZfU3CPyy+To6ioHXnI6u0wHw5N$ubeKfHBCiYm6Bsb0QMz+lihOB$TIRvlmjGT$MuQs-6IGgp5La+DNO4lv2xRQ0EO2BsU4vAieL1cZ4QKXVvfNs+x48Nk5PNgYx+5sW+8NlXsvf8RpSp7aQw8pYw3enQG0wL7Xil7Tg7xG6TWbXHlRTgn9RBGL-86ox1C1xM76DG8-mTg8IwZt5LB8RQK-jfLa8yQBXbjbfsSms+KBO65eiX0qLi8aQp4ClzXJoQa+9NIcHhVrPfT6V9$EXRQf+Q1xx6HWAXRQeBEnQp6HW4X6CzB6txm2f-tycCZBYnnHXiW5XQNkBg7xI+Lkp8BFKXtvkW8akRy6eu80HxGmoj7XaF9x809OP5kgiYZTx0I9E6YWTX0QAZYX$c6A-By34PPpviO8Gk3a3HR0+nQ86NWJQEC30E09PXLLQ8WCX00g9lDLjn4RQA0pikGyLQVyY+GJgDtONOvZaxicV6bzK6b$uaQ7DaTT5k8DL5yxRAVEckUXcvqylFIwEckm5tvqyRCD$0txHXgv$jOC-$RtumXCQO-X7QIaOx5tfQUii+hXsNSehSvR--QouE1kN+TpNmkQux02kM7zvjxNN7rb-KuwpWruRQfWg$Fj2$L0-zlAW6vkn+wL8axQ7kbEF75uQCxu+Au0gun6GLjKpCu80XuLXpLz-9P9bgHG+8rv1-$tJkqKuv25W2Xl+xc+DRKBqwr8YmqeajW9GWvrjhSm-SS1u$3PCUbF2tTPBlRAv3Yi7MPB1FgUjwNHAv2IZUVEU8UGmuR3aq4HqyAPumzy5PFrVcVGoAznim8vajWmtyA1SHfHH4yhb9E6xFvhA5Faw+BUMxLS1EPZsAboQn8vPWISKetFHUUUrTwkcVHB+SUU+m2U1Z2ICmTUSnVBBpHGmXKwr-vtcFbm5ILFJRVimgVvSaSvPbJnPUnIsUnJZeHRC7BOi4QUUBjKtGUSBoHRFBcWKGoweB4N8ijWQcRvmjHTZlc4ttoyeGQHQuxesYtk9kGQlYUlPGPBity2UULSSt3UUF6O145bIGvWx62IxmTmBZFxznFIUbLn5b2U8zPlVJ01chHAuiyFBBJgSH5vgta2UB1H5HAQHEZA-m6gI58kBmUPU5HZ1ohPWiU$iDLU7nK6BiysVbAKrm1z0yjtjwWBjJ2U0sPpQx2f-FUIovTC7VE2KULT1mVAqcFjNA62I3mqGJRVRyLACUZmSy51VpXjUnrqHWUybCAzUQki8ibapHGiUrlzU6tSmuntn7jVxBoiL2new9Dgr$t6tgNB3jFmBi2INiCjsw9iZP0j4J0E+tvsLyE2cm-2QnH1RoHaHCcvPJxbwQoFxBwPz3h$QetmT+ZYJBniMREkT26A5S6tvl9KGjB+mkmM3cF8IexBtAjrCUEsYTUHVBABIjUj6TUGEFeHKSEj9VUXFYw6e2ItLEM0aj9G6eiScT6oKRsSODBpHEIsQUPFPBcG3rnUtNJIUMNzmzVMQNQaHbIFzZTZlQhvnwScyumUUDt9uITH0$xuAn7LwincPAKJq3IMYExThOlJr7n4cSmpyVHB2Imct9Y2OGzhSGtUUqwlV6myHYQUUWNMZPU2UtRBmymUvB2IFUBULWkKnOAPUUUj-0wwUAU-ZK6n7BHUvUtUeg$II$UftBPfVucHYt3U2FOlIwpLe$9eCy++CZBuhGINitos3HbF0LRIcP5oBzBiUWiEI4ItKssUIU$REIzcSYe+C7U3UEIfXMSVHBWVGHb8jiCHBlItUJZ-2GtP2VcDDUPiEI459DVcr5m-6RIIxncUUDsVGHLTjOgDl+Cbw6RsIzLVyUPB2ICU8UCtbRZII8U-Z3ULcgmBSBDU2UqG8MkcVuZoJs0IYTYYGFIBNU4UqGErSHVOUOUvjYmGIGSFRUiSQj6HWc71UUBqUt2UU"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 23 Apr 2026 18:12:54 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-chl-out-s: c4pdsb/1lTs/U5YR744WLg==$wjmtj7IRPS82gQbzgw6Ruw==\r\ntiming-allow-origin: https://f1w-045098.com\r\nset-cookie: cf_clearance=o6rZflRQ9fY1mcFxW5CyKMUQR6JKo.JINsviROQFdmo-1776967974-1.2.1.1-v0vmPXxRhBtsplnDFyRAk2XGj2keQljaPA83bwnwOhvdI2CpQM_NFHPDmUSDqdZ9ZiThcdANsC1daDkHsQydEPgg2P9n_CeHAGnRfxdrhFC09AJDYcs26ETs55TGPeKDQS5E4Dhe.UmxNEvNONXtKlf0AHKmObV8Kk6COpYY8sSUcXaxnOJQUlQG3a30Qt8U3UwcXMX9oGhdYGJCEg1.wDUPa4iROcc9hlIIS9tB9GPeTfRf4o5C.95SwImW4YA8aDKSWuMoQf8qGEfYWbFwDMO6frtGPsb4Kzrms_fS64iA9nc7n.PaJ0wbWpVlt6gKKxIpfNOnJ.cIfrl1Fnuj8w; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=f1w-045098.com; Expires=Fri, 23 Apr 2027 18:12:54 GMT\n__cf_bm=K53.ZolW0O64y5_.i7I.TAFWdqfyON1UFZQAo12t7xc-1776967974.4594915-1.0.1.1-K5ArkhJaOU69gL47Q7vnnpWLfqe1qjI5oU2ldtzJl4B0yIEW7bpqEDo50_k7HtF8GDLRqwa51ixeuhZAD6ySg.0HRyKk99gtBcqg5tz_D.uQRRKMMjBW8bge5hwtRQtPurq7a2dhvA2MchZ_ltfyEQ; HttpOnly; Secure; Path=/; Domain=f1w-045098.com; Expires=Thu, 23 Apr 2026 18:42:54 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f0ed6d05b72a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T21:02:29.078164Z","times_seen":14117394,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines/fonts/Inter-Regular.woff2","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:54.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f1w-045098.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 11:03:12 GMT","end":"Sun, 05 Jul 2026 12:02:59 GMT"},"fingerprint":{"sha1":"2A:31:F0:E3:26:97:D1:9C:13:74:A8:6C:94:FB:31:1F:ED:88:43:DF","sha256":"75:4B:F0:85:32:1C:3B:E8:7E:0F:22:8F:D6:64:CA:0F:55:3E:12:54:0C:B7:11:48:D8:63:73:34:45:74:89:7E"}}},"request":{"raw":"GET /v3/2158/1win-mines/fonts/Inter-Regular.woff2 HTTP/1.1\r\nHost: f1w-045098.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f1w-045098.com/v3/2158/1win-mines/assets/index-CDpakxPU.css\r\nCookie: __cf_bm=K53.ZolW0O64y5_.i7I.TAFWdqfyON1UFZQAo12t7xc-1776967974.4594915-1.0.1.1-K5ArkhJaOU69gL47Q7vnnpWLfqe1qjI5oU2ldtzJl4B0yIEW7bpqEDo50_k7HtF8GDLRqwa51ixeuhZAD6ySg.0HRyKk99gtBcqg5tz_D.uQRRKMMjBW8bge5hwtRQtPurq7a2dhvA2MchZ_ltfyEQ; _cfuvid=qu3EtfoVwb5vrf.bkH6QCVjlBrU89C4LnxKFjrveYuQ-1776967974340-0.0.1.1-604800000; OTA_device_id=3f4db8cd-8b2d-4ceb-b940-36f3ffe3837a; partner_key=vtwi; visit_domain=f1w-045098.com; sub_ids=sub1=zjeoa69ea6124000bacc2; click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; session_partner_key=vtwi; session_visit_domain=f1w-045098.com; session_sub_ids=sub1=zjeoa69ea6124000bacc2; session_click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyODEzY2Y0Ny0wMTFiLTRlMWQtYWY2OC1jMmU0NmUzZTM0YTElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzc2OTY3OTc0MTg4JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc3Njk2Nzk3NDI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; core-sticky=1a6d4a4cef98cc60; cf_clearance=o6rZflRQ9fY1mcFxW5CyKMUQR6JKo.JINsviROQFdmo-1776967974-1.2.1.1-v0vmPXxRhBtsplnDFyRAk2XGj2keQljaPA83bwnwOhvdI2CpQM_NFHPDmUSDqdZ9ZiThcdANsC1daDkHsQydEPgg2P9n_CeHAGnRfxdrhFC09AJDYcs26ETs55TGPeKDQS5E4Dhe.UmxNEvNONXtKlf0AHKmObV8Kk6COpYY8sSUcXaxnOJQUlQG3a30Qt8U3UwcXMX9oGhdYGJCEg1.wDUPa4iROcc9hlIIS9tB9GPeTfRf4o5C.95SwImW4YA8aDKSWuMoQf8qGEfYWbFwDMO6frtGPsb4Kzrms_fS64iA9nc7n.PaJ0wbWpVlt6gKKxIpfNOnJ.cIfrl1Fnuj8w\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 23 Apr 2026 18:12:54 GMT\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 21 Apr 2026 15:21:05 GMT\r\naccess-control-allow-origin: *\r\nset-cookie: _cfuvid=hwbPJ1.W6fa2OeUvFg2AZH5MUZniWnWuvbSyfeWX5sk-1776967974.550509-1.0.1.1-aZdYt_7rrtvTBlFzkSircdFvQvMnm7CFI.tLQ9HmThU; HttpOnly; SameSite=None; Secure; Path=/; Domain=f1w-045098.com\r\ncf-cache-status: HIT\r\nage: 0\r\nexpires: Thu, 23 Apr 2026 22:12:54 GMT\r\ncache-control: public, max-age=14400\r\nvary: accept-encoding\r\netag: W/\"69e795e1-190cc\"\r\ncf-ray: 9f0ed6d0ebf3a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102604,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 102604, version 3.1245","md5":"136ccf10feeed1f95c3a0c5e91a24333","sha1":"7b5b5c831a9f75918d1d6660222cd7aebc0acab1","sha256":"78302f9c9577ab7c8dd7e26e486b355ac31bbd86dc1103cd654a8eb074f52f22","sha512":"75c5a164784fe88dc630308ab05c3822154008b194db65b5a183dd84124326bd51b24c4368cc7d1d76a4554f3a106767c33ac385ebc0cda9d8a7eb62c97a4618","ssdeep":"3072:eZ3rBkhYt/bCQLOZQtbIUehpAJD9zqeuE21tXbn92:eJlYu3LOZAzx9sDM","tlshash":"29a312d8f156cb4ec9778d77713a116163e817fb302ae7b8b6cd7951e099e8809c880e","first_seen":"2024-01-10T23:47:19Z","last_seen":"2026-04-23T18:13:23.996788Z","times_seen":484,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines/assets/bg-left_1024-B2EglW-9.avif","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:55.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f1w-045098.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 11:03:12 GMT","end":"Sun, 05 Jul 2026 12:02:59 GMT"},"fingerprint":{"sha1":"2A:31:F0:E3:26:97:D1:9C:13:74:A8:6C:94:FB:31:1F:ED:88:43:DF","sha256":"75:4B:F0:85:32:1C:3B:E8:7E:0F:22:8F:D6:64:CA:0F:55:3E:12:54:0C:B7:11:48:D8:63:73:34:45:74:89:7E"}}},"request":{"raw":"GET /v3/2158/1win-mines/assets/bg-left_1024-B2EglW-9.avif HTTP/1.1\r\nHost: f1w-045098.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f1w-045098.com/v3/2158/1win-mines/assets/index-CDpakxPU.css\r\nCookie: __cf_bm=K53.ZolW0O64y5_.i7I.TAFWdqfyON1UFZQAo12t7xc-1776967974.4594915-1.0.1.1-K5ArkhJaOU69gL47Q7vnnpWLfqe1qjI5oU2ldtzJl4B0yIEW7bpqEDo50_k7HtF8GDLRqwa51ixeuhZAD6ySg.0HRyKk99gtBcqg5tz_D.uQRRKMMjBW8bge5hwtRQtPurq7a2dhvA2MchZ_ltfyEQ; _cfuvid=hwbPJ1.W6fa2OeUvFg2AZH5MUZniWnWuvbSyfeWX5sk-1776967974.550509-1.0.1.1-aZdYt_7rrtvTBlFzkSircdFvQvMnm7CFI.tLQ9HmThU; OTA_device_id=3f4db8cd-8b2d-4ceb-b940-36f3ffe3837a; partner_key=vtwi; visit_domain=f1w-045098.com; sub_ids=sub1=zjeoa69ea6124000bacc2; click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; session_partner_key=vtwi; session_visit_domain=f1w-045098.com; session_sub_ids=sub1=zjeoa69ea6124000bacc2; session_click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyODEzY2Y0Ny0wMTFiLTRlMWQtYWY2OC1jMmU0NmUzZTM0YTElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzc2OTY3OTc0MTg4JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc3Njk2Nzk3NDI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; core-sticky=1a6d4a4cef98cc60; cf_clearance=o6rZflRQ9fY1mcFxW5CyKMUQR6JKo.JINsviROQFdmo-1776967974-1.2.1.1-v0vmPXxRhBtsplnDFyRAk2XGj2keQljaPA83bwnwOhvdI2CpQM_NFHPDmUSDqdZ9ZiThcdANsC1daDkHsQydEPgg2P9n_CeHAGnRfxdrhFC09AJDYcs26ETs55TGPeKDQS5E4Dhe.UmxNEvNONXtKlf0AHKmObV8Kk6COpYY8sSUcXaxnOJQUlQG3a30Qt8U3UwcXMX9oGhdYGJCEg1.wDUPa4iROcc9hlIIS9tB9GPeTfRf4o5C.95SwImW4YA8aDKSWuMoQf8qGEfYWbFwDMO6frtGPsb4Kzrms_fS64iA9nc7n.PaJ0wbWpVlt6gKKxIpfNOnJ.cIfrl1Fnuj8w; _gcl_au=1.1.1253745890.1776967975\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 23 Apr 2026 18:12:55 GMT\r\ncontent-type: image/avif\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nlast-modified: Tue, 21 Apr 2026 15:21:05 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\nexpires: Thu, 23 Apr 2026 22:12:55 GMT\r\ncache-control: public, max-age=14400\r\netag: W/\"69e795e1-9d25\"\r\ncontent-encoding: br\r\ncf-ray: 9f0ed6d43e78a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40229,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"61a87ee7bf03d7d67addd64e87dded6a","sha1":"6420867600c38f290778509d6adeb2602bcc100c","sha256":"e68fd5eead79e0c0d0551cbbb3c14c71f14cd5b2a952fe0ce0a0c71f1385a336","sha512":"4a8567b9ed4948600508e680a893bbd5f92b460d3bae37a63fd516ffd3064d50d5505078eb75867c41044581c87b5253dad8bf51d264eb2ffc1003f60c3c847d","ssdeep":"768:NrjKPe0LPw05wf/jb4Foj5bDrR8VrW0odaoZoKTW6E3HtfXpWCbQsfOpVz1TUFK5:NjcHLYdfQFojFHRxlVC6E3lpWUT0Cu","tlshash":"0603f19583ab35caf6697db80e74e7410930ba2f3807727d43899350dbd0ee9b051b1b","first_seen":"2024-09-19T21:21:20.526679Z","last_seen":"2026-04-23T18:13:23.998857Z","times_seen":9,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/analytics/events?event_name=time_first_load\u0026pgi=GTM-KGKQDC7","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:55.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f1w-045098.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 11:03:12 GMT","end":"Sun, 05 Jul 2026 12:02:59 GMT"},"fingerprint":{"sha1":"2A:31:F0:E3:26:97:D1:9C:13:74:A8:6C:94:FB:31:1F:ED:88:43:DF","sha256":"75:4B:F0:85:32:1C:3B:E8:7E:0F:22:8F:D6:64:CA:0F:55:3E:12:54:0C:B7:11:48:D8:63:73:34:45:74:89:7E"}}},"request":{"raw":"POST /analytics/events?event_name=time_first_load\u0026pgi=GTM-KGKQDC7 HTTP/1.1\r\nHost: f1w-045098.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1535\r\nOrigin: https://f1w-045098.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\r\nCookie: __cf_bm=K53.ZolW0O64y5_.i7I.TAFWdqfyON1UFZQAo12t7xc-1776967974.4594915-1.0.1.1-K5ArkhJaOU69gL47Q7vnnpWLfqe1qjI5oU2ldtzJl4B0yIEW7bpqEDo50_k7HtF8GDLRqwa51ixeuhZAD6ySg.0HRyKk99gtBcqg5tz_D.uQRRKMMjBW8bge5hwtRQtPurq7a2dhvA2MchZ_ltfyEQ; _cfuvid=hwbPJ1.W6fa2OeUvFg2AZH5MUZniWnWuvbSyfeWX5sk-1776967974.550509-1.0.1.1-aZdYt_7rrtvTBlFzkSircdFvQvMnm7CFI.tLQ9HmThU; OTA_device_id=3f4db8cd-8b2d-4ceb-b940-36f3ffe3837a; partner_key=vtwi; visit_domain=f1w-045098.com; sub_ids=sub1=zjeoa69ea6124000bacc2; click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; session_partner_key=vtwi; session_visit_domain=f1w-045098.com; session_sub_ids=sub1=zjeoa69ea6124000bacc2; session_click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyODEzY2Y0Ny0wMTFiLTRlMWQtYWY2OC1jMmU0NmUzZTM0YTElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzc2OTY3OTc0MTg4JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc3Njk2Nzk3NTE5OCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; core-sticky=1a6d4a4cef98cc60; cf_clearance=o6rZflRQ9fY1mcFxW5CyKMUQR6JKo.JINsviROQFdmo-1776967974-1.2.1.1-v0vmPXxRhBtsplnDFyRAk2XGj2keQljaPA83bwnwOhvdI2CpQM_NFHPDmUSDqdZ9ZiThcdANsC1daDkHsQydEPgg2P9n_CeHAGnRfxdrhFC09AJDYcs26ETs55TGPeKDQS5E4Dhe.UmxNEvNONXtKlf0AHKmObV8Kk6COpYY8sSUcXaxnOJQUlQG3a30Qt8U3UwcXMX9oGhdYGJCEg1.wDUPa4iROcc9hlIIS9tB9GPeTfRf4o5C.95SwImW4YA8aDKSWuMoQf8qGEfYWbFwDMO6frtGPsb4Kzrms_fS64iA9nc7n.PaJ0wbWpVlt6gKKxIpfNOnJ.cIfrl1Fnuj8w; _gcl_au=1.1.1253745890.1776967975; visitor-id=0d04ab66-19b7-483b-98a9-5997078a6393\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1535,"data":"{\"client_event_time\":\"2026-04-23T18:12:55.213\",\"client_event_time_utc\":\"2026-04-23T18:12:55.213\",\"client_time_zone\":\"UTC\",\"event_properties\":[{\"page_url\":\"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc\",\"referrer\":\"https://r1w8nq9.life/\",\"page_path\":\"/v3/2158/1win-mines\",\"query_string\":\"?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\",\"domain\":\"f1w-045098.com\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"geo\":\"no\",\"gtm_container_id\":\"GTM-KGKQDC7\",\"gtm_container_version\":\"261\",\"build_version\":\"\",\"build_time\":\"\",\"build_name\":\"\",\"token_ready_time\":\"775\",\"config_ready_time\":\"775\",\"page_load_time\":\"770\",\"lang_load_time\":\"121\",\"banners_load_time\":\"0\",\"is_mobile\":\"false\",\"url\":\"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc\"}],\"event_type\":\"time_first_load\",\"uuid\":\"2813cf47-011b-4e1d-af68-c2e46e3e34a1\",\"session_id\":\"1776967974188\",\"user_id\":\"\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Thu, 23 Apr 2026 18:12:55 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9f0ed6d52f26a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T21:02:29.078164Z","times_seen":14117394,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KGKQDC7","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:54.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtm.js?id=GTM-KGKQDC7 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f1w-045098.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 23 Apr 2026 18:12:54 GMT\r\nexpires: Thu, 23 Apr 2026 18:12:54 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 153517\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":469637,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (28307)","md5":"0f87ce688c50be5c350a6f701589b18b","sha1":"363ec8476e90910efef849497a493b8b3ae9b7a1","sha256":"e742dd192e738258964e32f3c57e629dd590e54d53e1e57d078cbc5bc8523ab5","sha512":"bf3efa2426bc43f15ee9b0cbbd5ddff6ddd8f27e4e536fe3f26cc7121ae91276113d0237200d062d1a7e9786253e6103ef64c19f7ac5caf09742d2a328cb59d0","ssdeep":"6144:yiFzeclE0aiEOgEHKyoHqDtZAp5STbqa2zmkkvv:5zzaiETyoHo24","tlshash":"f4a42acdb3d674625393b478803f018fa17a28a2b84cd895f185cce42e746aa5273f7d","first_seen":"2026-04-23T18:13:24.003188Z","last_seen":"2026-04-23T18:13:24.003188Z","times_seen":1,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":97,"dns":1,"connect":21,"send":0,"wait":36,"receive":62,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines/favicons/favicon.svg","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:55.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f1w-045098.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 11:03:12 GMT","end":"Sun, 05 Jul 2026 12:02:59 GMT"},"fingerprint":{"sha1":"2A:31:F0:E3:26:97:D1:9C:13:74:A8:6C:94:FB:31:1F:ED:88:43:DF","sha256":"75:4B:F0:85:32:1C:3B:E8:7E:0F:22:8F:D6:64:CA:0F:55:3E:12:54:0C:B7:11:48:D8:63:73:34:45:74:89:7E"}}},"request":{"raw":"GET /v3/2158/1win-mines/favicons/favicon.svg HTTP/1.1\r\nHost: f1w-045098.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc\r\nCookie: __cf_bm=K53.ZolW0O64y5_.i7I.TAFWdqfyON1UFZQAo12t7xc-1776967974.4594915-1.0.1.1-K5ArkhJaOU69gL47Q7vnnpWLfqe1qjI5oU2ldtzJl4B0yIEW7bpqEDo50_k7HtF8GDLRqwa51ixeuhZAD6ySg.0HRyKk99gtBcqg5tz_D.uQRRKMMjBW8bge5hwtRQtPurq7a2dhvA2MchZ_ltfyEQ; _cfuvid=hwbPJ1.W6fa2OeUvFg2AZH5MUZniWnWuvbSyfeWX5sk-1776967974.550509-1.0.1.1-aZdYt_7rrtvTBlFzkSircdFvQvMnm7CFI.tLQ9HmThU; OTA_device_id=3f4db8cd-8b2d-4ceb-b940-36f3ffe3837a; partner_key=vtwi; visit_domain=f1w-045098.com; sub_ids=sub1=zjeoa69ea6124000bacc2; click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; session_partner_key=vtwi; session_visit_domain=f1w-045098.com; session_sub_ids=sub1=zjeoa69ea6124000bacc2; session_click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyODEzY2Y0Ny0wMTFiLTRlMWQtYWY2OC1jMmU0NmUzZTM0YTElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzc2OTY3OTc0MTg4JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc3Njk2Nzk3NDI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; core-sticky=1a6d4a4cef98cc60; cf_clearance=o6rZflRQ9fY1mcFxW5CyKMUQR6JKo.JINsviROQFdmo-1776967974-1.2.1.1-v0vmPXxRhBtsplnDFyRAk2XGj2keQljaPA83bwnwOhvdI2CpQM_NFHPDmUSDqdZ9ZiThcdANsC1daDkHsQydEPgg2P9n_CeHAGnRfxdrhFC09AJDYcs26ETs55TGPeKDQS5E4Dhe.UmxNEvNONXtKlf0AHKmObV8Kk6COpYY8sSUcXaxnOJQUlQG3a30Qt8U3UwcXMX9oGhdYGJCEg1.wDUPa4iROcc9hlIIS9tB9GPeTfRf4o5C.95SwImW4YA8aDKSWuMoQf8qGEfYWbFwDMO6frtGPsb4Kzrms_fS64iA9nc7n.PaJ0wbWpVlt6gKKxIpfNOnJ.cIfrl1Fnuj8w; _gcl_au=1.1.1253745890.1776967975\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 23 Apr 2026 18:12:55 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nlast-modified: Tue, 21 Apr 2026 15:21:05 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: REVALIDATED\r\nexpires: Thu, 23 Apr 2026 22:12:55 GMT\r\ncache-control: public, max-age=14400\r\netag: W/\"69e795e1-140a\"\r\ncontent-encoding: br\r\ncf-ray: 9f0ed6d53f39a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5130,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"80f6eed4294956a46eaf2bdeddbb4607","sha1":"b3dd804826c1626945aaaf16cca34596cd6922f6","sha256":"0b703a9cf1bb9324007beeccf7c1e4767d8b91241c10d695a815b158aa5b9fab","sha512":"31abce5c2693887d03df9d9bf6c859b7cef64ad7f39609db6d76624f96f7e26954a472e0b326840736a753512050c5f3707c6b48efe458ea28808144d4dda3c1","ssdeep":"96:dwKxfRybvyy6/kWU5M9w3Src0RRs5Hgk3nGgKM4n:dw+y+ySkWU5MSSIqRANGFbn","tlshash":"00b1c888b3f4e2a8e505a7f8c256a0643b423df75712c8dd8bfa3c46f12101c9f6499b","first_seen":"2026-04-23T18:13:24.005664Z","last_seen":"2026-04-23T18:13:24.005664Z","times_seen":1,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines/scripts/arbineuro.js","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:53.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f1w-045098.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 11:03:12 GMT","end":"Sun, 05 Jul 2026 12:02:59 GMT"},"fingerprint":{"sha1":"2A:31:F0:E3:26:97:D1:9C:13:74:A8:6C:94:FB:31:1F:ED:88:43:DF","sha256":"75:4B:F0:85:32:1C:3B:E8:7E:0F:22:8F:D6:64:CA:0F:55:3E:12:54:0C:B7:11:48:D8:63:73:34:45:74:89:7E"}}},"request":{"raw":"GET /v3/2158/1win-mines/scripts/arbineuro.js HTTP/1.1\r\nHost: f1w-045098.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc\r\nCookie: __cf_bm=F7yasPdeZU2zTTGVQVdqimmszaBtQ.b.HM30eqOnuMw-1776967973.3502452-1.0.1.1-7t8MNCNazWYYcCNCKyeDI.9addDzW7Jey6uylpkJSGqIlVYRg14AXFxROl.JzsASMtnp1o2hemASjDF2C8QEkERkt5VRc2UobSXUx6BL.EqBh4By7RikrQ0momOWkJKnGJjSBADBPc5WbWeiwmz6LA; _cfuvid=rqrJeIq5SED_8s8TueHY52V_SsHsLx7BGT4_OuGMJ0I-1776967973.3502452-1.0.1.1-M5oSdbtsNfuVlrVgYdBZ3ich1kSymLu39rna8K7eGF0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 23 Apr 2026 18:12:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nlast-modified: Tue, 21 Apr 2026 15:21:05 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: REVALIDATED\r\nexpires: Thu, 23 Apr 2026 22:12:53 GMT\r\ncache-control: public, max-age=14400\r\netag: W/\"69e795e1-266d\"\r\ncontent-encoding: br\r\ncf-ray: 9f0ed6ca7ee7a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9837,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (489)","md5":"2fcd12df7ef4acca26636aa51241089e","sha1":"8a01c5ea4e2eadc9697b7992a3f7fd0ff1fe0ca6","sha256":"e8eaa5daf0142e8627ffbcc08635147b5514cb2b40e4f4e75eb15062dfa0d589","sha512":"1c2d766f6e7e4faa0948cbbc2a607247dee3a2dbac4de48da234f4b3f389bdfa47d5ab3d5e764bbae769b24fab42f3d12cda202813cc4390d2c3a38ca69637a0","ssdeep":"192:WOwlWQkg81WdPE6aHqMHqYaxohLTT2iN/Cus52gsNmWIi9:7QC6JaHrHDvSSKg9","tlshash":"fc12b6b916f224761aa3e13da31f621e603244472d48dcad7fdc07801fda52d94b26ce","first_seen":"2025-10-16T18:41:54.530497Z","last_seen":"2026-04-23T18:13:24.007976Z","times_seen":43,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines/images/logo/logo.svg","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:55.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f1w-045098.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 11:03:12 GMT","end":"Sun, 05 Jul 2026 12:02:59 GMT"},"fingerprint":{"sha1":"2A:31:F0:E3:26:97:D1:9C:13:74:A8:6C:94:FB:31:1F:ED:88:43:DF","sha256":"75:4B:F0:85:32:1C:3B:E8:7E:0F:22:8F:D6:64:CA:0F:55:3E:12:54:0C:B7:11:48:D8:63:73:34:45:74:89:7E"}}},"request":{"raw":"GET /v3/2158/1win-mines/images/logo/logo.svg HTTP/1.1\r\nHost: f1w-045098.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc\r\nCookie: __cf_bm=K53.ZolW0O64y5_.i7I.TAFWdqfyON1UFZQAo12t7xc-1776967974.4594915-1.0.1.1-K5ArkhJaOU69gL47Q7vnnpWLfqe1qjI5oU2ldtzJl4B0yIEW7bpqEDo50_k7HtF8GDLRqwa51ixeuhZAD6ySg.0HRyKk99gtBcqg5tz_D.uQRRKMMjBW8bge5hwtRQtPurq7a2dhvA2MchZ_ltfyEQ; _cfuvid=hwbPJ1.W6fa2OeUvFg2AZH5MUZniWnWuvbSyfeWX5sk-1776967974.550509-1.0.1.1-aZdYt_7rrtvTBlFzkSircdFvQvMnm7CFI.tLQ9HmThU; OTA_device_id=3f4db8cd-8b2d-4ceb-b940-36f3ffe3837a; partner_key=vtwi; visit_domain=f1w-045098.com; sub_ids=sub1=zjeoa69ea6124000bacc2; click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; session_partner_key=vtwi; session_visit_domain=f1w-045098.com; session_sub_ids=sub1=zjeoa69ea6124000bacc2; session_click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyODEzY2Y0Ny0wMTFiLTRlMWQtYWY2OC1jMmU0NmUzZTM0YTElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzc2OTY3OTc0MTg4JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc3Njk2Nzk3NDI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; core-sticky=1a6d4a4cef98cc60; cf_clearance=o6rZflRQ9fY1mcFxW5CyKMUQR6JKo.JINsviROQFdmo-1776967974-1.2.1.1-v0vmPXxRhBtsplnDFyRAk2XGj2keQljaPA83bwnwOhvdI2CpQM_NFHPDmUSDqdZ9ZiThcdANsC1daDkHsQydEPgg2P9n_CeHAGnRfxdrhFC09AJDYcs26ETs55TGPeKDQS5E4Dhe.UmxNEvNONXtKlf0AHKmObV8Kk6COpYY8sSUcXaxnOJQUlQG3a30Qt8U3UwcXMX9oGhdYGJCEg1.wDUPa4iROcc9hlIIS9tB9GPeTfRf4o5C.95SwImW4YA8aDKSWuMoQf8qGEfYWbFwDMO6frtGPsb4Kzrms_fS64iA9nc7n.PaJ0wbWpVlt6gKKxIpfNOnJ.cIfrl1Fnuj8w; _gcl_au=1.1.1253745890.1776967975\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 23 Apr 2026 18:12:55 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nlast-modified: Tue, 21 Apr 2026 15:21:05 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: REVALIDATED\r\nexpires: Thu, 23 Apr 2026 22:12:55 GMT\r\ncache-control: public, max-age=14400\r\netag: W/\"69e795e1-1fd2\"\r\ncontent-encoding: br\r\ncf-ray: 9f0ed6d42e67a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8146,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"40657b1b16d0c7948c7a616aa6803c11","sha1":"316f812acbabbfdebce7f0a8fc8a61d29d430a49","sha256":"b458a745a8cfce1c03933c3b7e25caba9856a2eb0567e2d1dc16228a1b558b99","sha512":"85477401fb8d02d4b8ef4f3651abbe726cd42bd11d27136440dace274eaab077d4dc35ea5548b23dd40a4ff2aaaa74d47ac055b5e648829f5a41d750db29372c","ssdeep":"192:5x/mHff09Fde14oHhHBdy5dRuHz7ixAlyLtTaH08Y:5x/cSf7OhP+RqxWN","tlshash":"bff1b7dc27708ee599c296eebf0204b63812b07ea6d8c6b4d39d9e54748795c9f10ec2","first_seen":"2025-05-27T21:04:19.725047Z","last_seen":"2026-04-23T18:13:24.009112Z","times_seen":41,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines/fonts/Montserrat-ExtraBold.woff2","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:55.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f1w-045098.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 11:03:12 GMT","end":"Sun, 05 Jul 2026 12:02:59 GMT"},"fingerprint":{"sha1":"2A:31:F0:E3:26:97:D1:9C:13:74:A8:6C:94:FB:31:1F:ED:88:43:DF","sha256":"75:4B:F0:85:32:1C:3B:E8:7E:0F:22:8F:D6:64:CA:0F:55:3E:12:54:0C:B7:11:48:D8:63:73:34:45:74:89:7E"}}},"request":{"raw":"GET /v3/2158/1win-mines/fonts/Montserrat-ExtraBold.woff2 HTTP/1.1\r\nHost: f1w-045098.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f1w-045098.com/v3/2158/1win-mines/assets/index-CDpakxPU.css\r\nCookie: __cf_bm=K53.ZolW0O64y5_.i7I.TAFWdqfyON1UFZQAo12t7xc-1776967974.4594915-1.0.1.1-K5ArkhJaOU69gL47Q7vnnpWLfqe1qjI5oU2ldtzJl4B0yIEW7bpqEDo50_k7HtF8GDLRqwa51ixeuhZAD6ySg.0HRyKk99gtBcqg5tz_D.uQRRKMMjBW8bge5hwtRQtPurq7a2dhvA2MchZ_ltfyEQ; _cfuvid=hwbPJ1.W6fa2OeUvFg2AZH5MUZniWnWuvbSyfeWX5sk-1776967974.550509-1.0.1.1-aZdYt_7rrtvTBlFzkSircdFvQvMnm7CFI.tLQ9HmThU; OTA_device_id=3f4db8cd-8b2d-4ceb-b940-36f3ffe3837a; partner_key=vtwi; visit_domain=f1w-045098.com; sub_ids=sub1=zjeoa69ea6124000bacc2; click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; session_partner_key=vtwi; session_visit_domain=f1w-045098.com; session_sub_ids=sub1=zjeoa69ea6124000bacc2; session_click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyODEzY2Y0Ny0wMTFiLTRlMWQtYWY2OC1jMmU0NmUzZTM0YTElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzc2OTY3OTc0MTg4JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc3Njk2Nzk3NDI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; core-sticky=1a6d4a4cef98cc60; cf_clearance=o6rZflRQ9fY1mcFxW5CyKMUQR6JKo.JINsviROQFdmo-1776967974-1.2.1.1-v0vmPXxRhBtsplnDFyRAk2XGj2keQljaPA83bwnwOhvdI2CpQM_NFHPDmUSDqdZ9ZiThcdANsC1daDkHsQydEPgg2P9n_CeHAGnRfxdrhFC09AJDYcs26ETs55TGPeKDQS5E4Dhe.UmxNEvNONXtKlf0AHKmObV8Kk6COpYY8sSUcXaxnOJQUlQG3a30Qt8U3UwcXMX9oGhdYGJCEg1.wDUPa4iROcc9hlIIS9tB9GPeTfRf4o5C.95SwImW4YA8aDKSWuMoQf8qGEfYWbFwDMO6frtGPsb4Kzrms_fS64iA9nc7n.PaJ0wbWpVlt6gKKxIpfNOnJ.cIfrl1Fnuj8w; _gcl_au=1.1.1253745890.1776967975\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 23 Apr 2026 18:12:55 GMT\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nlast-modified: Tue, 21 Apr 2026 15:21:05 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nexpires: Thu, 23 Apr 2026 22:12:55 GMT\r\ncache-control: public, max-age=14400\r\netag: W/\"69e795e1-f9bc\"\r\ncf-ray: 9f0ed6d44e96a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63932,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63932, version 8.0","md5":"24df712be72584f8e84b2f5467d1275c","sha1":"152cfd8d1fe4cb2f87319535e8c5cc5cad475cf0","sha256":"1ef78b4677b2d840ac444cbd5cbcdf7e18c1be8bc803f20b84e055634600ab49","sha512":"824e9e4da040f5afa63035c9e9060d1ff6f6a127eade7c61b3fd8fe6c008730060cff4be2214a40f9070692e9c11e5fa5a2c99eccc050ea335b4a9b922f8a823","ssdeep":"1536:BO6XTk73/wGXPhsCj5ohc/fPLHj+PO1fiNXGugHXkT8fm1lqW:U6q3/wG+1cPL6Wg0eT8u33","tlshash":"515302f18fe43ea896d35db93e78907819c0a8fd81544d41b0a81e37797fbaa4d18d4c","first_seen":"2024-09-19T21:21:20.524113Z","last_seen":"2026-04-23T18:13:24.010235Z","times_seen":9,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=7\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dr=r1w8nq9.life\u0026dl=https%3A%2F%2Ff1w-045098.com%2Fv3%2F2158%2F1win-mines\u0026scrsrc=www.googletagmanager.com\u0026rnd=840914813.1776967975\u0026auid=1253745890.1776967975\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He64m0v894400803za200zd894400803xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938466~115938468~117266401~117884344\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1776967975025\u0026tfd=1752","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:55.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /ccm/collect?rcb=7\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dr=r1w8nq9.life\u0026dl=https%3A%2F%2Ff1w-045098.com%2Fv3%2F2158%2F1win-mines\u0026scrsrc=www.googletagmanager.com\u0026rnd=840914813.1776967975\u0026auid=1253745890.1776967975\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He64m0v894400803za200zd894400803xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938466~115938468~117266401~117884344\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1776967975025\u0026tfd=1752 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f1w-045098.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npragma: no-cache\r\ndate: Thu, 23 Apr 2026 18:12:55 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T21:02:29.078164Z","times_seen":14117394,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"r1w8nq9.life/api/v1/domains/analytics","fqdn":"r1w8nq9.life","domain":"r1w8nq9.life","tld":"life"},"ip":{"addr":"194.67.193.200","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://r1w8nq9.life/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367","date":"2026-04-23T18:12:53.296Z","timestamp":0,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /api/v1/domains/analytics HTTP/1.1\r\nHost: r1w8nq9.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 45\r\nOrigin: https://r1w8nq9.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://r1w8nq9.life/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc\r\nCookie: __cf_bm=C1r6zpcfCujSlGJT3_NRZSJ6aMDr6WYBdxvfjS0zoew-1776967972.5213346-1.0.1.1-1Kw3_Vo5IXN97fttO7BuTFQ8tADR2euIaW5QYqHTdTQN5W3QIki30eVhj9tFVdNo6BG4iOeYpYeqrP.bg7wiIEzSu0QvwzlHPL8HQk4g7C96SpDM3b9U4Pw_F3JO22n_\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T21:02:29.078164Z","times_seen":14117394,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-548949LWLW\u0026gtm=45je64m0v894728184z8894400803za20gzb894400803zd894400803\u0026_p=1776967974086\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=AAAAAGA\u0026cid=235035134.1776967975\u0026frm=0\u0026pscdl=noapi\u0026rcb=10\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=1\u0026tag_exp=0~115938466~115938469~117266400~117512543\u0026sid=1776967975\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Ff1w-045098.com%2Fv3%2F2158%2F1win-mines%3FSUBID%3D1071243705668612097%26bannerid%3D25960634%26campaignid%3D10811009%26connection_type%3Dbroadband%26osversion%3Dandroid14%26p%3Dvtwi%26region%3Dnh%26sub1%3Dzjeoa69ea6124000bacc2%26user_activity%3Dmedium%26zone_type%3D%26zoneid%3D2235367\u0026dr=https%3A%2F%2Fr1w8nq9.life%2F\u0026dt=1win\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=2052","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:55.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-548949LWLW\u0026gtm=45je64m0v894728184z8894400803za20gzb894400803zd894400803\u0026_p=1776967974086\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=AAAAAGA\u0026cid=235035134.1776967975\u0026frm=0\u0026pscdl=noapi\u0026rcb=10\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=1\u0026tag_exp=0~115938466~115938469~117266400~117512543\u0026sid=1776967975\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Ff1w-045098.com%2Fv3%2F2158%2F1win-mines%3FSUBID%3D1071243705668612097%26bannerid%3D25960634%26campaignid%3D10811009%26connection_type%3Dbroadband%26osversion%3Dandroid14%26p%3Dvtwi%26region%3Dnh%26sub1%3Dzjeoa69ea6124000bacc2%26user_activity%3Dmedium%26zone_type%3D%26zoneid%3D2235367\u0026dr=https%3A%2F%2Fr1w8nq9.life%2F\u0026dt=1win\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=2052 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f1w-045098.com/\r\nOrigin: https://f1w-045098.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://f1w-045098.com\r\ndate: Thu, 23 Apr 2026 18:12:55 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:196:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:196:0\r\nreport-to: {\"group\":\"ascnsrsggc:196:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:196:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T21:02:29.078164Z","times_seen":14117394,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":58,"dns":0,"connect":21,"send":0,"wait":33,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/api/web/v1/tracker","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:13:04.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f1w-045098.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 11:03:12 GMT","end":"Sun, 05 Jul 2026 12:02:59 GMT"},"fingerprint":{"sha1":"2A:31:F0:E3:26:97:D1:9C:13:74:A8:6C:94:FB:31:1F:ED:88:43:DF","sha256":"75:4B:F0:85:32:1C:3B:E8:7E:0F:22:8F:D6:64:CA:0F:55:3E:12:54:0C:B7:11:48:D8:63:73:34:45:74:89:7E"}}},"request":{"raw":"POST /api/web/v1/tracker HTTP/1.1\r\nHost: f1w-045098.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 601\r\nOrigin: https://f1w-045098.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\r\nCookie: __cf_bm=K53.ZolW0O64y5_.i7I.TAFWdqfyON1UFZQAo12t7xc-1776967974.4594915-1.0.1.1-K5ArkhJaOU69gL47Q7vnnpWLfqe1qjI5oU2ldtzJl4B0yIEW7bpqEDo50_k7HtF8GDLRqwa51ixeuhZAD6ySg.0HRyKk99gtBcqg5tz_D.uQRRKMMjBW8bge5hwtRQtPurq7a2dhvA2MchZ_ltfyEQ; _cfuvid=hwbPJ1.W6fa2OeUvFg2AZH5MUZniWnWuvbSyfeWX5sk-1776967974.550509-1.0.1.1-aZdYt_7rrtvTBlFzkSircdFvQvMnm7CFI.tLQ9HmThU; OTA_device_id=3f4db8cd-8b2d-4ceb-b940-36f3ffe3837a; partner_key=vtwi; visit_domain=f1w-045098.com; sub_ids=sub1=zjeoa69ea6124000bacc2; click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; session_partner_key=vtwi; session_visit_domain=f1w-045098.com; session_sub_ids=sub1=zjeoa69ea6124000bacc2; session_click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyODEzY2Y0Ny0wMTFiLTRlMWQtYWY2OC1jMmU0NmUzZTM0YTElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzc2OTY3OTc0MTg4JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc3Njk2Nzk3NTI0NCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMyUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; core-sticky=1a6d4a4cef98cc60; cf_clearance=o6rZflRQ9fY1mcFxW5CyKMUQR6JKo.JINsviROQFdmo-1776967974-1.2.1.1-v0vmPXxRhBtsplnDFyRAk2XGj2keQljaPA83bwnwOhvdI2CpQM_NFHPDmUSDqdZ9ZiThcdANsC1daDkHsQydEPgg2P9n_CeHAGnRfxdrhFC09AJDYcs26ETs55TGPeKDQS5E4Dhe.UmxNEvNONXtKlf0AHKmObV8Kk6COpYY8sSUcXaxnOJQUlQG3a30Qt8U3UwcXMX9oGhdYGJCEg1.wDUPa4iROcc9hlIIS9tB9GPeTfRf4o5C.95SwImW4YA8aDKSWuMoQf8qGEfYWbFwDMO6frtGPsb4Kzrms_fS64iA9nc7n.PaJ0wbWpVlt6gKKxIpfNOnJ.cIfrl1Fnuj8w; _gcl_au=1.1.1253745890.1776967975; visitor-id=0d04ab66-19b7-483b-98a9-5997078a6393; _ga_548949LWLW=GS2.1.s1776967975$o1$g0$t1776967975$j60$l0$h0; _ga=GA1.1.235035134.1776967975\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":601,"data":"{\"events\":[{\"url\":\"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc\",\"sessionId\":\"63c08481-a3ea-441f-99df-fa2e8c29ef9a\",\"project\":\"2158\",\"stream\":\"landings\",\"category\":\"app\",\"type\":\"init\",\"name\":\"mount-started\",\"level\":\"info\",\"schema\":\"ecs\",\"serviceNamespace\":\"landings\",\"appVersion\":\"8082e898\",\"environment\":\"production\",\"createdAt\":\"2026-04-23T18:12:54.087Z\"}]}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 23 Apr 2026 18:13:04 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 15\r\npriority: u=6,i=?0\r\netag: W/\"f-v/Y1JusChTxrQUzPtNAKycooOTA\"\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9f0ed70c8d76a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0c776997933eb60833b37beaf43814c8","sha1":"bff63526eb02853c6b414ccfb4d00ac9ca283930","sha256":"3d23d39a30bb7323f8ccfd64c52cf286138fba4f83e78f7edcf66703b7c23aaa","sha512":"6897c20156465a410c333ac1932c5b0d0db14bacf6b8c915ea25ef2ed5f8a2fc446c195b75a69572e6db398651bd040b3e1f8c61f31d4b94fae782f488cee9c9","ssdeep":"","tlshash":"99600000000300030cc00c000300c0303ff00fc0003f00c0030fc0300c000c0c0cf000","first_seen":"2023-04-05T15:38:54Z","last_seen":"2026-04-23T21:01:29.080771Z","times_seen":8631,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flowmetric.life/api/v1/product-visits","fqdn":"flowmetric.life","domain":"flowmetric.life","tld":"life"},"ip":{"addr":"194.67.193.200","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:54.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flowmetric.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 17:26:40 GMT","end":"Tue, 07 Jul 2026 18:26:27 GMT"},"fingerprint":{"sha1":"AD:FC:32:DD:7B:0D:E7:7C:7F:A1:59:3C:3D:09:3E:4F:18:45:89:AD","sha256":"38:78:FF:49:67:95:49:41:AF:46:1C:65:90:FA:0D:FD:E0:14:D5:2A:24:D9:3A:41:32:35:CF:E7:4E:EF:83:3A"}}},"request":{"raw":"OPTIONS /api/v1/product-visits HTTP/1.1\r\nHost: flowmetric.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-unique-key\r\nReferer: https://f1w-045098.com/\r\nOrigin: https://f1w-045098.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Apr 2026 18:12:55 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://f1w-045098.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, x-unique-key\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nx-frame-options: DENY\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=8aQf6eRZKyZIgFftaeMJSE0bjPpvlxbJkNTl_eN1RAQ-1776967974.878348-1.0.1.1-rw7ab.ThhszzRRlXZfs7p4JNglDYmfmkyFB6ER_capF7YwFC19lJvSeOyDSB7j12zTNRqgyCIi46MeTJVbEa4vWlXqNJqgqWyK4DYZURwuhu0Db4UlD.n9mQu1m5pTar; HttpOnly; Secure; Path=/; Domain=flowmetric.life; Expires=Thu, 23 Apr 2026 18:42:55 GMT\r\nserver: cloudflare\r\ncf-ray: 9f0ed6d2fb44783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T21:02:29.078164Z","times_seen":14117394,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":42,"dns":19,"connect":4,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=7\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dr=r1w8nq9.life\u0026dl=https%3A%2F%2Ff1w-045098.com%2Fv3%2F2158%2F1win-mines\u0026scrsrc=www.googletagmanager.com\u0026rnd=840914813.1776967975\u0026auid=1253745890.1776967975\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He64m0v894400803za200zd894400803xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938466~115938468~117266401~117884344\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1776967975025\u0026tfd=1752","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:55.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:37:36 GMT","end":"Mon, 22 Jun 2026 08:37:35 GMT"},"fingerprint":{"sha1":"08:79:9D:7F:DB:8C:0A:9F:3E:E2:C7:8A:F2:4D:E4:E2:5B:36:28:22","sha256":"07:42:F0:13:40:B6:A1:62:31:62:8E:96:2F:96:8C:7C:C0:5B:F0:8A:DB:0B:A6:E2:44:14:41:7D:B2:7C:B9:74"}}},"request":{"raw":"POST /ccm/collect?rcb=7\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dr=r1w8nq9.life\u0026dl=https%3A%2F%2Ff1w-045098.com%2Fv3%2F2158%2F1win-mines\u0026scrsrc=www.googletagmanager.com\u0026rnd=840914813.1776967975\u0026auid=1253745890.1776967975\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He64m0v894400803za200zd894400803xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938466~115938468~117266401~117884344\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1776967975025\u0026tfd=1752 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f1w-045098.com/\r\nOrigin: https://f1w-045098.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\ndate: Thu, 23 Apr 2026 18:12:55 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncontent-type: text/plain\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://f1w-045098.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T21:02:29.078164Z","times_seen":14117394,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":51,"dns":0,"connect":8,"send":0,"wait":19,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"r1w8nq9.life/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367","fqdn":"r1w8nq9.life","domain":"r1w8nq9.life","tld":"life"},"ip":{"addr":"194.67.193.200","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-23T18:12:52.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"r1w8nq9.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 06:50:33 GMT","end":"Mon, 22 Jun 2026 07:50:24 GMT"},"fingerprint":{"sha1":"41:83:0A:96:5F:EB:A3:2F:AC:7C:25:E0:E0:5D:B3:4F:CD:19:C8:E6","sha256":"3A:30:73:14:3D:9B:00:AC:8E:D0:0D:47:E8:BC:C2:25:45:E9:0C:E6:2F:7A:B7:E6:8A:19:6F:C3:56:44:C0:30"}}},"request":{"raw":"GET /v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367 HTTP/1.1\r\nHost: r1w8nq9.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Apr 2026 18:12:53 GMT\r\ncontent-type: text/html\r\nset-cookie: __cf_bm=C1r6zpcfCujSlGJT3_NRZSJ6aMDr6WYBdxvfjS0zoew-1776967972.5213346-1.0.1.1-1Kw3_Vo5IXN97fttO7BuTFQ8tADR2euIaW5QYqHTdTQN5W3QIki30eVhj9tFVdNo6BG4iOeYpYeqrP.bg7wiIEzSu0QvwzlHPL8HQk4g7C96SpDM3b9U4Pw_F3JO22n_; HttpOnly; Secure; Path=/; Domain=r1w8nq9.life; Expires=Thu, 23 Apr 2026 18:42:53 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9f0ed6c44ee1c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":6112,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5745)","md5":"e4c9b51cc1c727a63902b8be08e2ea1b","sha1":"3a3ded6cc94475224b07c522641fe169a952e082","sha256":"b48adcb6b14f72a943b305225c745d0205faeeff456da8428491ad9e51541d5c","sha512":"cc0638c7977da33d608d37d0d610b62b9f2878efa7f8ded62b2d321b5292f8fefc0e1f80b9a287ce56846f5b54319d8a79cc7068e5c243f81b9f4c638b9c0a33","ssdeep":"96:ZL5adTNtDXWYWsism5N1iAGafIEU7yxloBvpqzPTJiOiJxkSffTeHlDmbktJItmH:ZlwWsNm1xGuU7yxloBQzjPFDxtWUk6u+","tlshash":"e2c11a80d1b86039b1e4458df039a212ff726e113d57d4f0f93d2a2a6a99f40d6b9edc","first_seen":"2026-04-23T18:13:24.013716Z","last_seen":"2026-04-23T18:13:24.013716Z","times_seen":1,"resource_available":true,"data":null}},"time_used":652,"timings":{"blocked":42,"dns":22,"connect":1,"send":0,"wait":568,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines/assets/bg-footer_1024-COUywxyQ.avif","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:55.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f1w-045098.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 11:03:12 GMT","end":"Sun, 05 Jul 2026 12:02:59 GMT"},"fingerprint":{"sha1":"2A:31:F0:E3:26:97:D1:9C:13:74:A8:6C:94:FB:31:1F:ED:88:43:DF","sha256":"75:4B:F0:85:32:1C:3B:E8:7E:0F:22:8F:D6:64:CA:0F:55:3E:12:54:0C:B7:11:48:D8:63:73:34:45:74:89:7E"}}},"request":{"raw":"GET /v3/2158/1win-mines/assets/bg-footer_1024-COUywxyQ.avif HTTP/1.1\r\nHost: f1w-045098.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f1w-045098.com/v3/2158/1win-mines/assets/index-CDpakxPU.css\r\nCookie: __cf_bm=K53.ZolW0O64y5_.i7I.TAFWdqfyON1UFZQAo12t7xc-1776967974.4594915-1.0.1.1-K5ArkhJaOU69gL47Q7vnnpWLfqe1qjI5oU2ldtzJl4B0yIEW7bpqEDo50_k7HtF8GDLRqwa51ixeuhZAD6ySg.0HRyKk99gtBcqg5tz_D.uQRRKMMjBW8bge5hwtRQtPurq7a2dhvA2MchZ_ltfyEQ; _cfuvid=hwbPJ1.W6fa2OeUvFg2AZH5MUZniWnWuvbSyfeWX5sk-1776967974.550509-1.0.1.1-aZdYt_7rrtvTBlFzkSircdFvQvMnm7CFI.tLQ9HmThU; OTA_device_id=3f4db8cd-8b2d-4ceb-b940-36f3ffe3837a; partner_key=vtwi; visit_domain=f1w-045098.com; sub_ids=sub1=zjeoa69ea6124000bacc2; click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; session_partner_key=vtwi; session_visit_domain=f1w-045098.com; session_sub_ids=sub1=zjeoa69ea6124000bacc2; session_click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyODEzY2Y0Ny0wMTFiLTRlMWQtYWY2OC1jMmU0NmUzZTM0YTElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzc2OTY3OTc0MTg4JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc3Njk2Nzk3NDI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; core-sticky=1a6d4a4cef98cc60; cf_clearance=o6rZflRQ9fY1mcFxW5CyKMUQR6JKo.JINsviROQFdmo-1776967974-1.2.1.1-v0vmPXxRhBtsplnDFyRAk2XGj2keQljaPA83bwnwOhvdI2CpQM_NFHPDmUSDqdZ9ZiThcdANsC1daDkHsQydEPgg2P9n_CeHAGnRfxdrhFC09AJDYcs26ETs55TGPeKDQS5E4Dhe.UmxNEvNONXtKlf0AHKmObV8Kk6COpYY8sSUcXaxnOJQUlQG3a30Qt8U3UwcXMX9oGhdYGJCEg1.wDUPa4iROcc9hlIIS9tB9GPeTfRf4o5C.95SwImW4YA8aDKSWuMoQf8qGEfYWbFwDMO6frtGPsb4Kzrms_fS64iA9nc7n.PaJ0wbWpVlt6gKKxIpfNOnJ.cIfrl1Fnuj8w; _gcl_au=1.1.1253745890.1776967975\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 23 Apr 2026 18:12:55 GMT\r\ncontent-type: image/avif\r\nlast-modified: Tue, 21 Apr 2026 15:21:05 GMT\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nexpires: Thu, 23 Apr 2026 22:12:55 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69e795e1-5589\"\r\ncontent-encoding: br\r\ncf-ray: 9f0ed6d43e76a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21897,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"829b6fb9e0dadf402daf2b55df4f3d0f","sha1":"21aa3b565a04c19036862ab8600815012faa4301","sha256":"b17445a1449ed649b6a60b9948311c544023df7cfd5f841a0849783f7fa0f6e5","sha512":"3e4bdba189be1201459a5a5a6531c7085eb4ed899b5f532825613cf3459e9e374334d96c5ec453c055560643bb3dbc14c8bda9511f018650e60590c39254d61f","ssdeep":"384:D4VriD9emcB3ujVcFGs5xCqM7GMqbas9xOuqzsfC3JMPACBqnjRk9:0F09eNmVcFvx5nmRJqLBqVI","tlshash":"dea2e08121636d6dd00822333f6f51e4922370cfb89f52285d89bdd3dbaace23490637","first_seen":"2024-09-19T21:21:20.536312Z","last_seen":"2026-04-23T18:13:24.016265Z","times_seen":9,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-548949LWLW\u0026cid=235035134.1776967975\u0026gtm=45je64m0v894728184z8894400803za20gzb894400803zd894400803\u0026rcb=10\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115938466~115938469~117266400~117512543\u0026z=550749636","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"216.58.201.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:55.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:38:39 GMT","end":"Mon, 22 Jun 2026 08:38:38 GMT"},"fingerprint":{"sha1":"28:27:63:E6:8D:9F:5E:83:2F:93:1D:17:8F:A5:D2:B4:07:94:69:56","sha256":"86:54:70:19:0A:EA:E1:98:29:B7:6F:10:12:6D:C3:A7:B8:98:D6:2B:0A:87:0F:67:18:D0:50:E3:8A:88:B0:BF"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-548949LWLW\u0026cid=235035134.1776967975\u0026gtm=45je64m0v894728184z8894400803za20gzb894400803zd894400803\u0026rcb=10\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115938466~115938469~117266400~117512543\u0026z=550749636 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f1w-045098.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Thu, 23 Apr 2026 18:12:55 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-23T21:01:54.538618Z","times_seen":816146,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":52,"dns":0,"connect":8,"send":0,"wait":24,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/afh.js","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:53.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f1w-045098.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 11:03:12 GMT","end":"Sun, 05 Jul 2026 12:02:59 GMT"},"fingerprint":{"sha1":"2A:31:F0:E3:26:97:D1:9C:13:74:A8:6C:94:FB:31:1F:ED:88:43:DF","sha256":"75:4B:F0:85:32:1C:3B:E8:7E:0F:22:8F:D6:64:CA:0F:55:3E:12:54:0C:B7:11:48:D8:63:73:34:45:74:89:7E"}}},"request":{"raw":"GET /afh.js HTTP/1.1\r\nHost: f1w-045098.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc\r\nCookie: __cf_bm=F7yasPdeZU2zTTGVQVdqimmszaBtQ.b.HM30eqOnuMw-1776967973.3502452-1.0.1.1-7t8MNCNazWYYcCNCKyeDI.9addDzW7Jey6uylpkJSGqIlVYRg14AXFxROl.JzsASMtnp1o2hemASjDF2C8QEkERkt5VRc2UobSXUx6BL.EqBh4By7RikrQ0momOWkJKnGJjSBADBPc5WbWeiwmz6LA; _cfuvid=rqrJeIq5SED_8s8TueHY52V_SsHsLx7BGT4_OuGMJ0I-1776967973.3502452-1.0.1.1-M5oSdbtsNfuVlrVgYdBZ3ich1kSymLu39rna8K7eGF0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 23 Apr 2026 18:12:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d7bdc3-ca7e\"\r\nlast-modified: Thu, 09 Apr 2026 14:54:59 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 6519\r\nexpires: Thu, 23 Apr 2026 22:12:53 GMT\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\ncf-ray: 9f0ed6ca7ee6a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51838,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22301)","md5":"61441690eb523492e37a71bd260d6923","sha1":"3755a390e48e596333118d4ec4243e7dd6a71da6","sha256":"6b8f991a1e9040144ffbe54feb707a9639abf64906dbd1e27c73a5978cb87026","sha512":"c76474acda6e8802f10386aefde1470a19eed80a26afa41adbb4932f251b1a0c5bfa87f9f6f12098f523a9c3f5a76cb90d6e8096b079deaae7617189c83d18ff","ssdeep":"768:/F8h7vlnpzOpaHzBIE1m6rMPSdpkucWl4IopUL5XOrv5714Vhai+7RB6hJg4tNqe:N8xHzCwdpkuUIg07si+7RB8J1tNqJut","tlshash":"b8332ad87183b078436758b9407f5117b23a7d51745c8882e02bd9993dbae1e823bfbd","first_seen":"2026-04-09T19:09:38.661072Z","last_seen":"2026-04-23T18:13:24.018089Z","times_seen":9,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.geetest.com/v4/gt4.js","fqdn":"static.geetest.com","domain":"geetest.com","tld":"com"},"ip":{"addr":"104.17.6.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:53.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geetest.com","organization":"Wuhan Jiyi Network Technology Co., Ltd."},"issuer":{"commonName":"GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Fri, 19 Dec 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CA:8B:31:34:03:03:4F:25:DE:AF:F1:76:9E:25:19:08:18:0C:04:EA","sha256":"F3:25:0F:0B:68:0B:B5:E2:F6:2A:F2:FE:E9:AA:10:6C:61:1C:7D:A6:FA:3F:D9:45:0F:E6:58:6D:71:F9:2E:2E"}}},"request":{"raw":"GET /v4/gt4.js HTTP/1.1\r\nHost: static.geetest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f1w-045098.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Apr 2026 18:12:53 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9f0ed6cb0f5556a9-OSL\r\ncf-cache-status: HIT\r\nage: 822280\r\ncache-control: public, max-age=86400\r\ncontent-encoding: gzip\r\netag: \"3E10F4BC47F2FCD630ED843E9061CF44\"\r\nexpires: Fri, 24 Apr 2026 18:12:53 GMT\r\nlast-modified: Mon, 28 Jul 2025 15:58:23 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncontent-md5: PhD0vEfy/NYw7YQ+kGHPRA==\r\nx-oss-hash-crc64ecma: 8068022385750826956\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 698E040160B01E3736243956\r\nx-oss-server-time: 17\r\nx-oss-storage-class: Standard\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":15364,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"3e10f4bc47f2fcd630ed843e9061cf44","sha1":"35b9e07ec532b978d2f92adcdb3d31a9f706383e","sha256":"d16f159d776bfadf27a75099cd3a16e3de499a39d26e7587d0831322f767cc4d","sha512":"8953dcdc7bf40d7c7d849719a6663c66f21fbee4460f2b7ee73d9ce2ee202a9ca68ccae586fd05b1bfa0768cddbdf4c99ce77819f8d2ec03f77ddf412fae8621","ssdeep":"384:0BDAKWacAauzIuUMYVbFX7YoUBXdwNRGjv:0BEKRa2c0","tlshash":"5b62538e68a6a05349b3b778cb5fa514fe694b7340248141bd5ce3586fb043487abfdc","first_seen":"2024-12-27T01:11:33.480297Z","last_seen":"2026-04-23T18:13:24.019031Z","times_seen":1319,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":93,"dns":84,"connect":1,"send":0,"wait":16,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines/images/logo/logo.svg","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:55.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f1w-045098.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 11:03:12 GMT","end":"Sun, 05 Jul 2026 12:02:59 GMT"},"fingerprint":{"sha1":"2A:31:F0:E3:26:97:D1:9C:13:74:A8:6C:94:FB:31:1F:ED:88:43:DF","sha256":"75:4B:F0:85:32:1C:3B:E8:7E:0F:22:8F:D6:64:CA:0F:55:3E:12:54:0C:B7:11:48:D8:63:73:34:45:74:89:7E"}}},"request":{"raw":"GET /v3/2158/1win-mines/images/logo/logo.svg HTTP/1.1\r\nHost: f1w-045098.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc\r\nCookie: __cf_bm=K53.ZolW0O64y5_.i7I.TAFWdqfyON1UFZQAo12t7xc-1776967974.4594915-1.0.1.1-K5ArkhJaOU69gL47Q7vnnpWLfqe1qjI5oU2ldtzJl4B0yIEW7bpqEDo50_k7HtF8GDLRqwa51ixeuhZAD6ySg.0HRyKk99gtBcqg5tz_D.uQRRKMMjBW8bge5hwtRQtPurq7a2dhvA2MchZ_ltfyEQ; _cfuvid=hwbPJ1.W6fa2OeUvFg2AZH5MUZniWnWuvbSyfeWX5sk-1776967974.550509-1.0.1.1-aZdYt_7rrtvTBlFzkSircdFvQvMnm7CFI.tLQ9HmThU; OTA_device_id=3f4db8cd-8b2d-4ceb-b940-36f3ffe3837a; partner_key=vtwi; visit_domain=f1w-045098.com; sub_ids=sub1=zjeoa69ea6124000bacc2; click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; session_partner_key=vtwi; session_visit_domain=f1w-045098.com; session_sub_ids=sub1=zjeoa69ea6124000bacc2; session_click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyODEzY2Y0Ny0wMTFiLTRlMWQtYWY2OC1jMmU0NmUzZTM0YTElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzc2OTY3OTc0MTg4JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc3Njk2Nzk3NDI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; core-sticky=1a6d4a4cef98cc60; cf_clearance=o6rZflRQ9fY1mcFxW5CyKMUQR6JKo.JINsviROQFdmo-1776967974-1.2.1.1-v0vmPXxRhBtsplnDFyRAk2XGj2keQljaPA83bwnwOhvdI2CpQM_NFHPDmUSDqdZ9ZiThcdANsC1daDkHsQydEPgg2P9n_CeHAGnRfxdrhFC09AJDYcs26ETs55TGPeKDQS5E4Dhe.UmxNEvNONXtKlf0AHKmObV8Kk6COpYY8sSUcXaxnOJQUlQG3a30Qt8U3UwcXMX9oGhdYGJCEg1.wDUPa4iROcc9hlIIS9tB9GPeTfRf4o5C.95SwImW4YA8aDKSWuMoQf8qGEfYWbFwDMO6frtGPsb4Kzrms_fS64iA9nc7n.PaJ0wbWpVlt6gKKxIpfNOnJ.cIfrl1Fnuj8w; _gcl_au=1.1.1253745890.1776967975\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T21:02:29.078164Z","times_seen":14117394,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Cairo:wght@200..1000\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:53.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=Cairo:wght@200..1000\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f1w-045098.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 23 Apr 2026 18:12:54 GMT\r\ndate: Thu, 23 Apr 2026 18:12:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1777,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"41090b97ad0dc022fb35e5a4fe39f0ef","sha1":"030a31c77d798da6015949c8aaaf54fd3c443fd4","sha256":"23971d2f62b2084de2c3163558059fecafa9a671f283faef5d238daeb4a6ca0e","sha512":"2358971d0aa563972aa616239e91b317e75e14c465a1cefe9f97f88d7794e5a289abcaebd4d5f7db358404c2eaa8e6bc82a11e9f78bd40bc7934ebe44ac35ea0","ssdeep":"","tlshash":"97318fd00c1e4184bb475dc1638d6e23de0ef1956494886ca7fc278b9cabc27b35575c","first_seen":"2025-09-17T03:23:35.251664Z","last_seen":"2026-04-23T18:13:24.019854Z","times_seen":359,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":87,"dns":1,"connect":21,"send":0,"wait":35,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"f1w-045098.com/v4/socket.io/?Language=en\u0026xorigin=f1w-045098.com\u0026EIO=4\u0026transport=websocket","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:54.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f1w-045098.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 11:03:12 GMT","end":"Sun, 05 Jul 2026 12:02:59 GMT"},"fingerprint":{"sha1":"2A:31:F0:E3:26:97:D1:9C:13:74:A8:6C:94:FB:31:1F:ED:88:43:DF","sha256":"75:4B:F0:85:32:1C:3B:E8:7E:0F:22:8F:D6:64:CA:0F:55:3E:12:54:0C:B7:11:48:D8:63:73:34:45:74:89:7E"}}},"request":{"raw":"GET /v4/socket.io/?Language=en\u0026xorigin=f1w-045098.com\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: f1w-045098.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://f1w-045098.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: yq9V47pWywPCS8TwwyEwNw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: __cf_bm=F7yasPdeZU2zTTGVQVdqimmszaBtQ.b.HM30eqOnuMw-1776967973.3502452-1.0.1.1-7t8MNCNazWYYcCNCKyeDI.9addDzW7Jey6uylpkJSGqIlVYRg14AXFxROl.JzsASMtnp1o2hemASjDF2C8QEkERkt5VRc2UobSXUx6BL.EqBh4By7RikrQ0momOWkJKnGJjSBADBPc5WbWeiwmz6LA; _cfuvid=rqrJeIq5SED_8s8TueHY52V_SsHsLx7BGT4_OuGMJ0I-1776967973.3502452-1.0.1.1-M5oSdbtsNfuVlrVgYdBZ3ich1kSymLu39rna8K7eGF0; OTA_device_id=3f4db8cd-8b2d-4ceb-b940-36f3ffe3837a; AMP_TEST=JTIyMTc3Njk2Nzk3NDA5MyUyMg==\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Thu, 23 Apr 2026 18:12:54 GMT\r\nConnection: upgrade\r\nSec-Websocket-Accept: nuWbz2lpcRnOFxz9HyDTqQGZh6A=\r\nSec-Websocket-Extensions: permessage-deflate\r\nUpgrade: websocket\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nSet-Cookie: core-sticky=1a6d4a4cef98cc60; Path=/; HttpOnly\n__cf_bm=9cWoOQtFU4pkgpqL6Eaf_72hKpAVQi1NNLm_tsLITSI-1776967974-1.0.1.1-HuFNJTtapClnS1ta_gmxbNnR03uRGifoZz9XwmXxFPuTt1p71tMmNlMnb7bRtBmNgdcC.mKt58r_vRDOMZJPQ.2CHNy1psfMpWgvD2T9_XXdrLdkfBXzlmrYFrOjpPlN; path=/; expires=Thu, 23-Apr-26 18:42:54 GMT; domain=.f1w-045098.com; HttpOnly; Secure; SameSite=None\n_cfuvid=qu3EtfoVwb5vrf.bkH6QCVjlBrU89C4LnxKFjrveYuQ-1776967974340-0.0.1.1-604800000; path=/; domain=.f1w-045098.com; HttpOnly; Secure; SameSite=None\r\nServer: cloudflare\r\nCF-RAY: 9f0ed6cebd4d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T21:02:29.078164Z","times_seen":14117394,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":0,"dns":21,"connect":21,"send":0,"wait":146,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/0b8fb825cb67/main.js?","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:54.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f1w-045098.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 11:03:12 GMT","end":"Sun, 05 Jul 2026 12:02:59 GMT"},"fingerprint":{"sha1":"2A:31:F0:E3:26:97:D1:9C:13:74:A8:6C:94:FB:31:1F:ED:88:43:DF","sha256":"75:4B:F0:85:32:1C:3B:E8:7E:0F:22:8F:D6:64:CA:0F:55:3E:12:54:0C:B7:11:48:D8:63:73:34:45:74:89:7E"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/0b8fb825cb67/main.js? HTTP/1.1\r\nHost: f1w-045098.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=xoZwpvW42WLzJkuOBNLQ3PHvj9gKhhmUw7qgzi0yajU-1776967974.2306147-1.0.1.1-U7ylPv3_uMwszEZJ9uy57.4hqFB0wqTOglNkZTOFyKc.hnWm7JvEmreHZgzBSw6CVhkPAMZ9chqC6EFCe05GVegDqGJkopNxQ642EkkndkGbfsLNXbcDGVJy1W.tPYf4cHZTZA1hv.ltNozzcYnnmg; _cfuvid=rqrJeIq5SED_8s8TueHY52V_SsHsLx7BGT4_OuGMJ0I-1776967973.3502452-1.0.1.1-M5oSdbtsNfuVlrVgYdBZ3ich1kSymLu39rna8K7eGF0; OTA_device_id=3f4db8cd-8b2d-4ceb-b940-36f3ffe3837a; partner_key=vtwi; visit_domain=f1w-045098.com; sub_ids=sub1=zjeoa69ea6124000bacc2; click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; session_partner_key=vtwi; session_visit_domain=f1w-045098.com; session_sub_ids=sub1=zjeoa69ea6124000bacc2; session_click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyODEzY2Y0Ny0wMTFiLTRlMWQtYWY2OC1jMmU0NmUzZTM0YTElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzc2OTY3OTc0MTg4JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 23 Apr 2026 18:12:54 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=9.YdG63rHt6X1alKDFa4123Xp1t9iAUDkk819r2zsyU-1776967974.2484467-1.0.1.1-pKpHk_9AhAVRiOzvBRVrbTjSiKlo6qLqZapVvg4KlEfsW5mI8u.x1yWpmUsRu.BquUpV.l6Cuz7L4epvRAxUQXFL93V6ZgLiuzOeZ654lztVz12E70.qcD12i9OaMy5GXY8cBQgxNSOyAk9iU_Umrw; HttpOnly; Secure; Path=/; Domain=f1w-045098.com; Expires=Thu, 23 Apr 2026 18:42:54 GMT\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f0ed6cf0a82a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":31473,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31473), with no line terminators","md5":"c4c3ab9c6ef5eb1f7ac772de037c3205","sha1":"fe7d35f8194524a24e11f3b83c0d62e21b9c83d2","sha256":"dc9dfade73d33d3810b3f88d557112a154484a0ca886d00afbdcf45a3c055f4d","sha512":"e51b67d331747587db06f5ef8cf607565aea96acece867807886cf3df8fb9d3f131bfad127a15876202daec26d93c3bdee75afcec99df1317532d8cbea5db981","ssdeep":"384:UeC4aI6bpbmKtwdWv3J+X73+hFNqFcGzrE/c4X1eDYE8tIStPCR9nKXswm+PG/ZV:U8aI6b9oIE+hFNqF8b1oUtFUnKXm+GV","tlshash":"ece2c4c939c97265efaa783020bf34c76b7dbf4430099554d320a9f4f668329b626f58","first_seen":"2026-04-23T18:13:24.020603Z","last_seen":"2026-04-23T18:13:24.020603Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines/fonts/Inter-Medium.woff2","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:55.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f1w-045098.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 11:03:12 GMT","end":"Sun, 05 Jul 2026 12:02:59 GMT"},"fingerprint":{"sha1":"2A:31:F0:E3:26:97:D1:9C:13:74:A8:6C:94:FB:31:1F:ED:88:43:DF","sha256":"75:4B:F0:85:32:1C:3B:E8:7E:0F:22:8F:D6:64:CA:0F:55:3E:12:54:0C:B7:11:48:D8:63:73:34:45:74:89:7E"}}},"request":{"raw":"GET /v3/2158/1win-mines/fonts/Inter-Medium.woff2 HTTP/1.1\r\nHost: f1w-045098.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f1w-045098.com/v3/2158/1win-mines/assets/index-CDpakxPU.css\r\nCookie: __cf_bm=K53.ZolW0O64y5_.i7I.TAFWdqfyON1UFZQAo12t7xc-1776967974.4594915-1.0.1.1-K5ArkhJaOU69gL47Q7vnnpWLfqe1qjI5oU2ldtzJl4B0yIEW7bpqEDo50_k7HtF8GDLRqwa51ixeuhZAD6ySg.0HRyKk99gtBcqg5tz_D.uQRRKMMjBW8bge5hwtRQtPurq7a2dhvA2MchZ_ltfyEQ; _cfuvid=hwbPJ1.W6fa2OeUvFg2AZH5MUZniWnWuvbSyfeWX5sk-1776967974.550509-1.0.1.1-aZdYt_7rrtvTBlFzkSircdFvQvMnm7CFI.tLQ9HmThU; OTA_device_id=3f4db8cd-8b2d-4ceb-b940-36f3ffe3837a; partner_key=vtwi; visit_domain=f1w-045098.com; sub_ids=sub1=zjeoa69ea6124000bacc2; click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; session_partner_key=vtwi; session_visit_domain=f1w-045098.com; session_sub_ids=sub1=zjeoa69ea6124000bacc2; session_click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyODEzY2Y0Ny0wMTFiLTRlMWQtYWY2OC1jMmU0NmUzZTM0YTElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzc2OTY3OTc0MTg4JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc3Njk2Nzk3NDI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; core-sticky=1a6d4a4cef98cc60; cf_clearance=o6rZflRQ9fY1mcFxW5CyKMUQR6JKo.JINsviROQFdmo-1776967974-1.2.1.1-v0vmPXxRhBtsplnDFyRAk2XGj2keQljaPA83bwnwOhvdI2CpQM_NFHPDmUSDqdZ9ZiThcdANsC1daDkHsQydEPgg2P9n_CeHAGnRfxdrhFC09AJDYcs26ETs55TGPeKDQS5E4Dhe.UmxNEvNONXtKlf0AHKmObV8Kk6COpYY8sSUcXaxnOJQUlQG3a30Qt8U3UwcXMX9oGhdYGJCEg1.wDUPa4iROcc9hlIIS9tB9GPeTfRf4o5C.95SwImW4YA8aDKSWuMoQf8qGEfYWbFwDMO6frtGPsb4Kzrms_fS64iA9nc7n.PaJ0wbWpVlt6gKKxIpfNOnJ.cIfrl1Fnuj8w; _gcl_au=1.1.1253745890.1776967975\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 23 Apr 2026 18:12:55 GMT\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nlast-modified: Tue, 21 Apr 2026 15:21:05 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nexpires: Thu, 23 Apr 2026 22:12:55 GMT\r\ncache-control: public, max-age=14400\r\netag: W/\"69e795e1-1ac24\"\r\ncf-ray: 9f0ed6d43e7fa41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109604,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 109604, version 3.1245","md5":"f0740bda9ae5dd83cea8bca8a7c1a7d3","sha1":"ec499f99bf1f43ed5e22857531ca491a6477eae0","sha256":"86952cdde19c4cc7ef002ee463b73a26e5b6747510557299b65064d9bf76d8a7","sha512":"294f3ab0a5ba241c09ed58d47aa44b3eae455efabf6bb792b8fc73a03844894db70e6c30b7cb55db77ae1a0fce3845e11f2147f6aafbc69d198239fee54c93db","ssdeep":"3072:sqZ1XgmvsgDZKslATlWJSLG+WDOZGwQ63:sqZ1XgmvPssWTo7VuTQm","tlshash":"1cb31279b5d098cce7c79efb0cb5efd878d46ee985211bb0a421e63963c05d05bc9184","first_seen":"2024-01-10T23:47:19Z","last_seen":"2026-04-23T18:13:24.023193Z","times_seen":333,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.igamingeasy.com/c/0b4c7cf4f9da9c9b?cost=0.000000\u0026SUBID=1071243705668612097\u0026bannerid=25960634\u0026user_activity=medium\u0026zone_type=\u0026campaignid=10811009\u0026zoneid=2235367\u0026osversion=android14\u0026region=nh\u0026connection_type=broadband","fqdn":"www.igamingeasy.com","domain":"igamingeasy.com","tld":"com"},"ip":{"addr":"52.51.27.131","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-23T18:12:52.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.igamingeasy.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 14:02:06 GMT","end":"Thu, 02 Jul 2026 14:02:05 GMT"},"fingerprint":{"sha1":"3F:FD:21:8C:8C:6A:CE:F3:CC:E5:3D:9B:B8:6C:CA:9E:D0:3C:26:A5","sha256":"2D:8B:D4:07:47:65:B1:3B:71:74:78:90:F7:34:59:46:EE:81:39:A1:DB:69:71:C8:09:43:7D:5C:CE:E5:FF:58"}}},"request":{"raw":"GET /c/0b4c7cf4f9da9c9b?cost=0.000000\u0026SUBID=1071243705668612097\u0026bannerid=25960634\u0026user_activity=medium\u0026zone_type=\u0026campaignid=10811009\u0026zoneid=2235367\u0026osversion=android14\u0026region=nh\u0026connection_type=broadband HTTP/1.1\r\nHost: www.igamingeasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 18:12:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 303\r\nlocation: https://r1w8nq9.life/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\r\nset-cookie: unique_id=69ea61240007b773; Path=/; Expires=Mon, 22 Jun 2026 18:12:52 GMT; Secure; SameSite=None\nunique_id2=69ea61240007bef3; Path=/; Expires=Wed, 22 Jul 2026 18:12:52 GMT; Secure; SameSite=None\nimpression=; Path=/; Expires=Thu, 23 Apr 2026 18:12:52 GMT; Secure; SameSite=None\ntid=zjeoa69ea6124000bacc2; Path=/; Expires=Fri, 28 Mar 2031 18:12:52 GMT; Secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6112,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T21:02:29.078164Z","times_seen":14117394,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":161,"dns":86,"connect":33,"send":0,"wait":48,"receive":3,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"www.igamingeasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/api/web/v1/tracker/events","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:13:04.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f1w-045098.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 11:03:12 GMT","end":"Sun, 05 Jul 2026 12:02:59 GMT"},"fingerprint":{"sha1":"2A:31:F0:E3:26:97:D1:9C:13:74:A8:6C:94:FB:31:1F:ED:88:43:DF","sha256":"75:4B:F0:85:32:1C:3B:E8:7E:0F:22:8F:D6:64:CA:0F:55:3E:12:54:0C:B7:11:48:D8:63:73:34:45:74:89:7E"}}},"request":{"raw":"POST /api/web/v1/tracker/events HTTP/1.1\r\nHost: f1w-045098.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 1727\r\nOrigin: https://f1w-045098.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\r\nCookie: __cf_bm=K53.ZolW0O64y5_.i7I.TAFWdqfyON1UFZQAo12t7xc-1776967974.4594915-1.0.1.1-K5ArkhJaOU69gL47Q7vnnpWLfqe1qjI5oU2ldtzJl4B0yIEW7bpqEDo50_k7HtF8GDLRqwa51ixeuhZAD6ySg.0HRyKk99gtBcqg5tz_D.uQRRKMMjBW8bge5hwtRQtPurq7a2dhvA2MchZ_ltfyEQ; _cfuvid=hwbPJ1.W6fa2OeUvFg2AZH5MUZniWnWuvbSyfeWX5sk-1776967974.550509-1.0.1.1-aZdYt_7rrtvTBlFzkSircdFvQvMnm7CFI.tLQ9HmThU; OTA_device_id=3f4db8cd-8b2d-4ceb-b940-36f3ffe3837a; partner_key=vtwi; visit_domain=f1w-045098.com; sub_ids=sub1=zjeoa69ea6124000bacc2; click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; session_partner_key=vtwi; session_visit_domain=f1w-045098.com; session_sub_ids=sub1=zjeoa69ea6124000bacc2; session_click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyODEzY2Y0Ny0wMTFiLTRlMWQtYWY2OC1jMmU0NmUzZTM0YTElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzc2OTY3OTc0MTg4JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc3Njk2Nzk3NTI0NCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMyUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; core-sticky=1a6d4a4cef98cc60; cf_clearance=o6rZflRQ9fY1mcFxW5CyKMUQR6JKo.JINsviROQFdmo-1776967974-1.2.1.1-v0vmPXxRhBtsplnDFyRAk2XGj2keQljaPA83bwnwOhvdI2CpQM_NFHPDmUSDqdZ9ZiThcdANsC1daDkHsQydEPgg2P9n_CeHAGnRfxdrhFC09AJDYcs26ETs55TGPeKDQS5E4Dhe.UmxNEvNONXtKlf0AHKmObV8Kk6COpYY8sSUcXaxnOJQUlQG3a30Qt8U3UwcXMX9oGhdYGJCEg1.wDUPa4iROcc9hlIIS9tB9GPeTfRf4o5C.95SwImW4YA8aDKSWuMoQf8qGEfYWbFwDMO6frtGPsb4Kzrms_fS64iA9nc7n.PaJ0wbWpVlt6gKKxIpfNOnJ.cIfrl1Fnuj8w; _gcl_au=1.1.1253745890.1776967975; visitor-id=0d04ab66-19b7-483b-98a9-5997078a6393; _ga_548949LWLW=GS2.1.s1776967975$o1$g0$t1776967975$j60$l0$h0; _ga=GA1.1.235035134.1776967975\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1727,"data":"{\"events\":[{\"eventSchemaVersion\":1,\"eventType\":\"page_view\",\"source\":{\"app\":\"web\",\"appVersion\":\"8082e898\"},\"eventContext\":{\"client_time_zone\":\"UTC\",\"device_type\":\"desktop\",\"device_id\":\"3f4db8cd-8b2d-4ceb-b940-36f3ffe3837a\",\"session_id\":\"1776967974088\",\"is_landing\":\"true\",\"landing_id\":\"2158\",\"is_webview\":\"false\"},\"eventData\":{\"client_event_time_utc\":\"2026-04-23T18:12:54.169Z\",\"page_url\":\"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc\",\"event_type\":\"page_view\",\"event_cat\":\"page\",\"referrer\":\"https://r1w8nq9.life/\",\"country_code\":\"\",\"currency\":\"USD\",\"locale\":\"\"}},{\"eventSchemaVersion\":1,\"eventType\":\"time_first_load\",\"source\":{\"app\":\"web\",\"appVersion\":\"8082e898\"},\"eventContext\":{\"client_time_zone\":\"UTC\",\"device_type\":\"desktop\",\"device_id\":\"3f4db8cd-8b2d-4ceb-b940-36f3ffe3837a\",\"session_id\":\"1776967974088\",\"is_landing\":\"true\",\"landing_id\":\"2158\",\"is_webview\":\"false\"},\"eventData\":{\"client_event_time_utc\":\"2026-04-23T18:12:54.836Z\",\"page_url\":\"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc\",\"event_type\":\"time_first_load\",\"event_cat\":\"time\",\"referrer\":\"https://r1w8nq9.life/\",\"country_code\":\"no\",\"currency\":\"USD\",\"locale\":\"en\",\"token_ready_time\":775,\"config_ready_time\":775,\"page_load_time\":770,\"lang_load_time\":121,\"banners_load_time\":0}}]}"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Thu, 23 Apr 2026 18:13:04 GMT\r\netag: W/\"2-vyGp6PvFo4RvsFtPoIWeCReyIC8\"\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9f0ed70c8d78a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T21:02:29.078164Z","times_seen":14117394,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines/fonts/Inter-Regular.woff2","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:54.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f1w-045098.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 11:03:12 GMT","end":"Sun, 05 Jul 2026 12:02:59 GMT"},"fingerprint":{"sha1":"2A:31:F0:E3:26:97:D1:9C:13:74:A8:6C:94:FB:31:1F:ED:88:43:DF","sha256":"75:4B:F0:85:32:1C:3B:E8:7E:0F:22:8F:D6:64:CA:0F:55:3E:12:54:0C:B7:11:48:D8:63:73:34:45:74:89:7E"}}},"request":{"raw":"GET /v3/2158/1win-mines/fonts/Inter-Regular.woff2 HTTP/1.1\r\nHost: f1w-045098.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f1w-045098.com/v3/2158/1win-mines/assets/index-CDpakxPU.css\r\nCookie: __cf_bm=F7yasPdeZU2zTTGVQVdqimmszaBtQ.b.HM30eqOnuMw-1776967973.3502452-1.0.1.1-7t8MNCNazWYYcCNCKyeDI.9addDzW7Jey6uylpkJSGqIlVYRg14AXFxROl.JzsASMtnp1o2hemASjDF2C8QEkERkt5VRc2UobSXUx6BL.EqBh4By7RikrQ0momOWkJKnGJjSBADBPc5WbWeiwmz6LA; _cfuvid=rqrJeIq5SED_8s8TueHY52V_SsHsLx7BGT4_OuGMJ0I-1776967973.3502452-1.0.1.1-M5oSdbtsNfuVlrVgYdBZ3ich1kSymLu39rna8K7eGF0; OTA_device_id=3f4db8cd-8b2d-4ceb-b940-36f3ffe3837a; partner_key=vtwi; visit_domain=f1w-045098.com; sub_ids=sub1=zjeoa69ea6124000bacc2; click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; session_partner_key=vtwi; session_visit_domain=f1w-045098.com; session_sub_ids=sub1=zjeoa69ea6124000bacc2; session_click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyODEzY2Y0Ny0wMTFiLTRlMWQtYWY2OC1jMmU0NmUzZTM0YTElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzc2OTY3OTc0MTg4JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 23 Apr 2026 18:12:54 GMT\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nlast-modified: Tue, 21 Apr 2026 15:21:05 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nexpires: Thu, 23 Apr 2026 22:12:54 GMT\r\ncache-control: public, max-age=14400\r\netag: W/\"69e795e1-190cc\"\r\ncf-ray: 9f0ed6ceca51a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102604,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 102604, version 3.1245","md5":"136ccf10feeed1f95c3a0c5e91a24333","sha1":"7b5b5c831a9f75918d1d6660222cd7aebc0acab1","sha256":"78302f9c9577ab7c8dd7e26e486b355ac31bbd86dc1103cd654a8eb074f52f22","sha512":"75c5a164784fe88dc630308ab05c3822154008b194db65b5a183dd84124326bd51b24c4368cc7d1d76a4554f3a106767c33ac385ebc0cda9d8a7eb62c97a4618","ssdeep":"3072:eZ3rBkhYt/bCQLOZQtbIUehpAJD9zqeuE21tXbn92:eJlYu3LOZAzx9sDM","tlshash":"29a312d8f156cb4ec9778d77713a116163e817fb302ae7b8b6cd7951e099e8809c880e","first_seen":"2024-01-10T23:47:19Z","last_seen":"2026-04-23T18:13:23.996788Z","times_seen":484,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/api/v1/ms-affiliate-links/linkVisit","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:12:55.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f1w-045098.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 11:03:12 GMT","end":"Sun, 05 Jul 2026 12:02:59 GMT"},"fingerprint":{"sha1":"2A:31:F0:E3:26:97:D1:9C:13:74:A8:6C:94:FB:31:1F:ED:88:43:DF","sha256":"75:4B:F0:85:32:1C:3B:E8:7E:0F:22:8F:D6:64:CA:0F:55:3E:12:54:0C:B7:11:48:D8:63:73:34:45:74:89:7E"}}},"request":{"raw":"POST /api/v1/ms-affiliate-links/linkVisit HTTP/1.1\r\nHost: f1w-045098.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 581\r\nOrigin: https://f1w-045098.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc\r\nCookie: __cf_bm=K53.ZolW0O64y5_.i7I.TAFWdqfyON1UFZQAo12t7xc-1776967974.4594915-1.0.1.1-K5ArkhJaOU69gL47Q7vnnpWLfqe1qjI5oU2ldtzJl4B0yIEW7bpqEDo50_k7HtF8GDLRqwa51ixeuhZAD6ySg.0HRyKk99gtBcqg5tz_D.uQRRKMMjBW8bge5hwtRQtPurq7a2dhvA2MchZ_ltfyEQ; _cfuvid=hwbPJ1.W6fa2OeUvFg2AZH5MUZniWnWuvbSyfeWX5sk-1776967974.550509-1.0.1.1-aZdYt_7rrtvTBlFzkSircdFvQvMnm7CFI.tLQ9HmThU; OTA_device_id=3f4db8cd-8b2d-4ceb-b940-36f3ffe3837a; partner_key=vtwi; visit_domain=f1w-045098.com; sub_ids=sub1=zjeoa69ea6124000bacc2; click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; session_partner_key=vtwi; session_visit_domain=f1w-045098.com; session_sub_ids=sub1=zjeoa69ea6124000bacc2; session_click_id=776819c1-20f5-4085-87bb-def6b9acbfbc; AMP_494cccfe21=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyODEzY2Y0Ny0wMTFiLTRlMWQtYWY2OC1jMmU0NmUzZTM0YTElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzc2OTY3OTc0MTg4JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc3Njk2Nzk3NDI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; core-sticky=1a6d4a4cef98cc60; cf_clearance=o6rZflRQ9fY1mcFxW5CyKMUQR6JKo.JINsviROQFdmo-1776967974-1.2.1.1-v0vmPXxRhBtsplnDFyRAk2XGj2keQljaPA83bwnwOhvdI2CpQM_NFHPDmUSDqdZ9ZiThcdANsC1daDkHsQydEPgg2P9n_CeHAGnRfxdrhFC09AJDYcs26ETs55TGPeKDQS5E4Dhe.UmxNEvNONXtKlf0AHKmObV8Kk6COpYY8sSUcXaxnOJQUlQG3a30Qt8U3UwcXMX9oGhdYGJCEg1.wDUPa4iROcc9hlIIS9tB9GPeTfRf4o5C.95SwImW4YA8aDKSWuMoQf8qGEfYWbFwDMO6frtGPsb4Kzrms_fS64iA9nc7n.PaJ0wbWpVlt6gKKxIpfNOnJ.cIfrl1Fnuj8w; _gcl_au=1.1.1253745890.1776967975; visitor-id=0d04ab66-19b7-483b-98a9-5997078a6393\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":581,"data":"{\"href\":\"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc\",\"referer\":\"https://r1w8nq9.life/\",\"landing_id\":\"2158\",\"page_type\":\"landing\",\"unique\":true,\"visit_domain\":\"f1w-045098.com\",\"partner_key\":\"vtwi\",\"sub_ids\":\"sub1=zjeoa69ea6124000bacc2\",\"click_id\":\"776819c1-20f5-4085-87bb-def6b9acbfbc\",\"visitor_id\":\"0d04ab66-19b7-483b-98a9-5997078a6393\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 23 Apr 2026 18:12:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 15\r\npriority: u=6,i=?0\r\netag: W/\"f-v/Y1JusChTxrQUzPtNAKycooOTA\"\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9f0ed6d4ef04a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0c776997933eb60833b37beaf43814c8","sha1":"bff63526eb02853c6b414ccfb4d00ac9ca283930","sha256":"3d23d39a30bb7323f8ccfd64c52cf286138fba4f83e78f7edcf66703b7c23aaa","sha512":"6897c20156465a410c333ac1932c5b0d0db14bacf6b8c915ea25ef2ed5f8a2fc446c195b75a69572e6db398651bd040b3e1f8c61f31d4b94fae782f488cee9c9","ssdeep":"","tlshash":"99600000000300030cc00c000300c0303ff00fc0003f00c0030fc0300c000c0c0cf000","first_seen":"2023-04-05T15:38:54Z","last_seen":"2026-04-23T21:01:29.080771Z","times_seen":8631,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-548949LWLW\u0026gtm=45je64m0v894728184z8894400803za20gzb894400803zd894400803\u0026_p=1776967974086\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=AAAAAGQ\u0026cid=235035134.1776967975\u0026frm=0\u0026pscdl=noapi\u0026rcb=10\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026tag_exp=0~115938466~115938469~117266400~117512543\u0026sid=1776967975\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Ff1w-045098.com%2Fv3%2F2158%2F1win-mines%3FSUBID%3D1071243705668612097%26bannerid%3D25960634%26campaignid%3D10811009%26connection_type%3Dbroadband%26osversion%3Dandroid14%26p%3Dvtwi%26region%3Dnh%26sub1%3Dzjeoa69ea6124000bacc2%26user_activity%3Dmedium%26zone_type%3D%26zoneid%3D2235367\u0026dr=https%3A%2F%2Fr1w8nq9.life%2F\u0026dt=1win\u0026_s=2\u0026tfd=7062","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","date":"2026-04-23T18:13:00.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-548949LWLW\u0026gtm=45je64m0v894728184z8894400803za20gzb894400803zd894400803\u0026_p=1776967974086\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=AAAAAGQ\u0026cid=235035134.1776967975\u0026frm=0\u0026pscdl=noapi\u0026rcb=10\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026tag_exp=0~115938466~115938469~117266400~117512543\u0026sid=1776967975\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Ff1w-045098.com%2Fv3%2F2158%2F1win-mines%3FSUBID%3D1071243705668612097%26bannerid%3D25960634%26campaignid%3D10811009%26connection_type%3Dbroadband%26osversion%3Dandroid14%26p%3Dvtwi%26region%3Dnh%26sub1%3Dzjeoa69ea6124000bacc2%26user_activity%3Dmedium%26zone_type%3D%26zoneid%3D2235367\u0026dr=https%3A%2F%2Fr1w8nq9.life%2F\u0026dt=1win\u0026_s=2\u0026tfd=7062 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f1w-045098.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 58\r\nOrigin: https://f1w-045098.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":58,"data":"en=time_first_load\r\nen=time_first_load\r\nen=time_first_load"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://f1w-045098.com\r\ndate: Thu, 23 Apr 2026 18:13:00 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:196:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:196:0\r\nreport-to: {\"group\":\"ascnsrsggc:196:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:196:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T21:02:29.078164Z","times_seen":14117394,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f1w-045098.com/v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc","fqdn":"f1w-045098.com","domain":"f1w-045098.com","tld":"com"},"ip":{"addr":"194.67.193.199","port":443,"asn":214231,"as":"Cloud Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-23T18:12:53.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f1w-045098.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 11:03:12 GMT","end":"Sun, 05 Jul 2026 12:02:59 GMT"},"fingerprint":{"sha1":"2A:31:F0:E3:26:97:D1:9C:13:74:A8:6C:94:FB:31:1F:ED:88:43:DF","sha256":"75:4B:F0:85:32:1C:3B:E8:7E:0F:22:8F:D6:64:CA:0F:55:3E:12:54:0C:B7:11:48:D8:63:73:34:45:74:89:7E"}}},"request":{"raw":"GET /v3/2158/1win-mines?SUBID=1071243705668612097\u0026bannerid=25960634\u0026campaignid=10811009\u0026connection_type=broadband\u0026osversion=android14\u0026p=vtwi\u0026region=nh\u0026sub1=zjeoa69ea6124000bacc2\u0026user_activity=medium\u0026zone_type=\u0026zoneid=2235367\u0026castId=776819c1-20f5-4085-87bb-def6b9acbfbc HTTP/1.1\r\nHost: f1w-045098.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://r1w8nq9.life/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Apr 2026 18:12:53 GMT\r\ncontent-type: text/html\r\ncf-cache-status: DYNAMIC\r\nlast-modified: Tue, 21 Apr 2026 15:21:05 GMT\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nset-cookie: __cf_bm=F7yasPdeZU2zTTGVQVdqimmszaBtQ.b.HM30eqOnuMw-1776967973.3502452-1.0.1.1-7t8MNCNazWYYcCNCKyeDI.9addDzW7Jey6uylpkJSGqIlVYRg14AXFxROl.JzsASMtnp1o2hemASjDF2C8QEkERkt5VRc2UobSXUx6BL.EqBh4By7RikrQ0momOWkJKnGJjSBADBPc5WbWeiwmz6LA; HttpOnly; Secure; Path=/; Domain=f1w-045098.com; Expires=Thu, 23 Apr 2026 18:42:53 GMT\n_cfuvid=rqrJeIq5SED_8s8TueHY52V_SsHsLx7BGT4_OuGMJ0I-1776967973.3502452-1.0.1.1-M5oSdbtsNfuVlrVgYdBZ3ich1kSymLu39rna8K7eGF0; HttpOnly; SameSite=None; Secure; Path=/; Domain=f1w-045098.com\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9f0ed6c96ca18deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"GeeTest","description":"GeeTest is a CAPTCHA and bot management provider, protects websites, mobile apps, and APIs from automated bot-driven attacks, like ATO, credential stuffing, web scalping, etc.","website":"https://www.geetest.com","common_platform_enumeration":"","icon":"GeeTest.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1642,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (928)","md5":"aee03584760dd120e89dc2085b6d7404","sha1":"c20a156915000b7670c608f6801ec06c39c5d3c3","sha256":"aedd292cfb03cb99a3cc888f999e97949e0ffa908b74b3008a1f5e39ce181713","sha512":"67ac12f404b58c803e40e184b0e6cf106800301bb4200a5fb519b657efc81f72067463762408ea4e762d25d9cada05115fbcb1e3073e125196b1ede7770da972","ssdeep":"","tlshash":"fd31ccb97e69c53995a0054a24f9f36d3e72b1177a06e048a2ecc8355f04fd64cafc78","first_seen":"2026-04-23T18:13:24.024398Z","last_seen":"2026-04-23T18:13:24.024398Z","times_seen":1,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":54,"dns":35,"connect":1,"send":0,"wait":82,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
