{"report_id":"c34de119-1a75-4c3a-9b99-e03061def9a3","version":6,"status":"done","tags":[],"date":"2025-11-11T17:26:37Z","url":{"schema":"http","addr":"1w2m.com/","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"1w2m.com/#/","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"title":"JYT","dom":{"size":59912,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (59888), with no line terminators","md5":"fe884d4de4f0966a927d87853728132e","sha1":"7a304afbb51972f6b226c5a7965307656666f3b0","sha256":"d45664249d9b37e6059f119564b16e71c86b3b995fe58148e3fc9f7ba0fc397e","sha512":"0df56133859049a144f316e0c12bd1818c2cf98000b4157c107786f25001ffabfbec2df158cd7565228d48e820c6c54fcca7d6772e62367aead4beab707c5ae2","ssdeep":"768:s+mDPmUk41urUnZSx3UtxdlS59RtxR0Ml3LaNADhGX9OI3dtg4THlwdkTCv:pUt8cZ83SwviMxLaNA+Lrg4ydA8","tlshash":"16430a31a04050762233cde7b5207f956dd79b0f14309491f6ac0f5ef9aeae07a295bb","dom_hash":"domhash976d09193f65de252125fc0b81c6db1b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"1w2m.com/","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-16T17:26:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"webapi.jytnet.com","ip":{"addr":"172.67.182.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-04-30","domain_rank":0,"first_seen":"2025-10-07T03:56:27.248723Z","last_seen":"2025-10-07T03:56:27.248723Z","alert_count":0,"request_count":5,"received_data":191497,"sent_data":2760,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"wap.jytnet.com","ip":{"addr":"104.21.51.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-04-30","domain_rank":0,"first_seen":"2025-10-07T03:56:27.250802Z","last_seen":"2025-10-07T03:56:27.250802Z","alert_count":0,"request_count":4,"received_data":1567145,"sent_data":1932,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"1w2m.com","ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-07T03:56:27.235909Z","last_seen":"2025-10-07T03:56:27.235909Z","alert_count":276,"request_count":138,"received_data":4125310,"sent_data":60173,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"1w2m.com/js/chunk-115dbe7b.16748bed.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"724716d5a156c9561cc774f25da8a54a","sha1":"a0cd7c79ebdc6f5a391f4eab4330c62a3037b215","sha256":"51d1600c2e704b68c1f6ea9b6a3c080eeea2f28b5108044c97b7fd7da5d98a38","sha512":"ad117cbdbfc7ad0028172caa7b584e415fd6a1d25fa38c5e7bd18d8ab8bf7f099bcaea7b398972e24b9c54e42e9148a11a7c9c118e609ae6d0e7603f5b57004e","ssdeep":"1536:rw+H+2FMxLaNA45Lr3UcZgJyTdj6GdVyn:0KgUKqsn8T56tn","tlshash":"24835d6f71c6b42502b7b1a4001f1500a47329c8a405e0debbbde8d5aaa8d6d763ff7d","size":84007,"data":"","first_seen":"2025-10-07T03:56:36.356906Z","last_seen":"2025-11-11T17:26:48.781974Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/app.1480711a.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d404003446e655aab1933553eb419e5a","sha1":"331a803c9f23468b87fe85998a53117366e59f35","sha256":"6102868e8089d334195ef9b10922ba798429c1973395655c5d28e0672adced89","sha512":"f366f45c05c9bd7d2806ac68493150002b354a6bbb7cfe6967c1efdfed421bc440b7ca89e0ea344e6cbe87dce4938e3273b2165ccb5151bd4775ecfe1a0eb7fb","ssdeep":"3072:1ElgXAM6FwuVVx8CH+CZ8WpR7PVKybATG/8+yZu21b1EHm:qlq6xxBHsqFqcAZu21b1Cm","tlshash":"1ab34b7d1a88654c08791b52bacbfb0a20ee0893d4b5c8171ed8cf7513f6ca87746f5a","size":107906,"data":"","first_seen":"2025-10-07T03:56:36.27516Z","last_seen":"2025-11-11T17:26:48.783302Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-vendors.b68947ec.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"df18ae4c445629fd1d1d7797dba43ac6","sha1":"1ff6c5e640b498ebdb44f4f6315cb2a8937d67ba","sha256":"c77c8ee7bb56162bc1423f69975640e4f47913fe3e1ff42cb5b49745755a7a74","sha512":"43294175ebb8b89e9dda5ee2131ee13e62d3ec3cf007327e537726b0adce2a0818a3b307f9bdd25a08b53093718c057019a8b5097ad14639da0815233fa2b152","ssdeep":"12288:ZbJ51BpOAAINzw21cHix9k+xZcoF7s2JDderZGB:ZbJLOHb/Qk+xWoF7s2FcGB","tlshash":"46d429c9718ab563579225f5403f290ab63e2b65680e8814fa51f4dabc78c6d8337f3c","size":629131,"data":"","first_seen":"2025-10-07T03:56:36.495001Z","last_seen":"2025-11-11T17:26:48.849172Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-bf19119a.e47c68d6.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a83ba6b099540a3e21bc90924a5baaa7","sha1":"765d9bb5653d573febac81c99c87ccef20808212","sha256":"e45cc7c0ef044aba039cfb490fa96ca5a04b9bd048ab1b1576e6e751ee3aa65d","sha512":"4a4ef977bfcf440e4372c847c061a088bd75e5618c9512a8254a36ab1f818419c463231514a8616400ed1bc774c88cc43daf20a8ada2d7b78fa2769df83481b0","ssdeep":"384:QtGWZfVAyO6hl9ezh5FAtIApqCCNOt1lSG5bVNOdxz5VzxzKfJ:0ZfVUGezPemUk41l+aJ","tlshash":"6782fb0db1c3b9340e7770a5701f1500a2b72a98b42ec48df978d9d25ba9e88177eb3d","size":19020,"data":"","first_seen":"2025-10-07T03:56:36.266035Z","last_seen":"2025-11-11T17:26:48.605511Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-15466a2c.92962879.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"04085b4a95c5eef23b4cea31a3738a4f","sha1":"4d073c7d6ca2c54a595bd1b89e8296ee06f4642e","sha256":"b22fa6bac3fb1d2e438ea2477af95150ec4280acd3ef815f8261a81be77f0681","sha512":"3fc6dcbc3e17d6dd00894b3e4458cae58eee422d2299b63a46f4ec249c0578d937232bf1333bd19b91d228327b8875994b21521cadf149f9c8df415fe0f1228e","ssdeep":"192:y3QbE9vLJ/IAiuw0q0rQSw3hPupq+4IUVJ7ZLln++v2Dvhb1WDpSLcuFE8e:ysWpITuw5cQSw3hVJK1MsAuO8e","tlshash":"7652e749f4c6f86513a7b0e8001f150551231a58b40d89ddfebafad69e28b4db22bf3d","size":13846,"data":"","first_seen":"2025-10-07T03:56:36.263839Z","last_seen":"2025-11-11T17:26:48.650828Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-063a5dd6.dcd5e872.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2beb7a514109cbf3a2a5327d48a27699","sha1":"037b14705e758502db01dad993aea8daa3cc364b","sha256":"86638e262927f3bb41c1029c1a354128f55daba2f3485c1b309f5135a873bcc3","sha512":"0b7588485d3628b989dda3a8bc95eea4c16fe36638f62265af9dd3b4b3bdf1edf0f80918fe79ee3cf6376af0097f225ec5ec98523f8cdf77801817b4cc000bf7","ssdeep":"192:KpPZ1pAfRk+UzBCZWbYpG6ROpJFSoYbLl:Kr1pA5kLc4bJ6ROpJF9YbLl","tlshash":"d63215d5b5c2e0e1d145311f48af2729a6a9f680f81b28e18f4264ca7f60d3c7561feb","size":11665,"data":"","first_seen":"2025-10-07T03:56:36.257216Z","last_seen":"2025-11-11T17:26:48.656195Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-2d20fe32.cadb7208.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"acb0841c1826551f114c701f4e3bd917","sha1":"fed9d8395f6b8e1b7f48e353161fbdf6fdcd506f","sha256":"43a2ac7ad143d6a5732839195a613da41839c9385daa894ae8425366d64f9d1e","sha512":"97a57d8c07ae480f7ae14c2ffeb610d646b045171b601aaed617eefbeb27f1878ab625beeaa7dd5d7042061952c8f06457e4fb84e7e2d04b3dd6d017064e1bec","ssdeep":"1536:lFvfRcGiHFFFpyEO8peZjZeSfZK81lNmIywWumR2s/TUwwpfPH1OKCPVyfhyTXnP:bfRgw8petfYRNuzIUwwPH1OKCPVyYLOE","tlshash":"6dd31959721075a282fb26cb53a8c610a3b64855b809c5e871bd4c6b6d7ec5803feffc","size":136982,"data":"","first_seen":"2025-10-07T03:56:36.318434Z","last_seen":"2025-11-11T17:26:48.619028Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"1w2m.com/css/chunk-5d731799.6d28d03c.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:20.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-5d731799.6d28d03c.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:20 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ba39f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UhZEOcnbrBSTj3UMrC08J%2BIdwvFVgV4QklrbVgyWgoojqk1Xz9paZRDch0bkp8K1KIzJyM5wokLUFbOU0%2BxE%2FvcfO07%2BXZ9R\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e782c14c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20859,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (20851), with no line terminators","md5":"a3baa1d5e35996cb2ba423edc66c9f3c","sha1":"8f3e2245524b05c61e07077a4ef13d73c9c169e4","sha256":"4e06a3c9d93d87d2753ba596701048d4ad6c7b7e1f97b8c2f9cc2080f6cd44b9","sha512":"91bd78009aa48d99141f50907dae115c8e722b939ca69c33589bd38f15eb04618937d07cb2db44ac9db06a17fa663ce58396861726c0c9fae467a7807a6ecee9","ssdeep":"192:wyjoJhj2x3WAnWAnWAnWAnWAF/3qLsv25g/NHMEPRTFmZOgGV6HZHyQb43hmrn:wHPoR/3SVySmmZGV6HZgM","tlshash":"f3928123738f091624bfda98a594aa440d1753738080177dbc5526757e8f3e73af2e8d","first_seen":"2025-10-07T03:56:36.260317Z","last_seen":"2025-11-11T17:26:48.598747Z","times_seen":2,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":399,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-5e13fe5a.e2897ce3.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:20.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-5e13fe5a.e2897ce3.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:20 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"57ea173d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r7xVW7UPNa8K2A0blGvFxV6XI5ZmS8qWr5Si2UcEUICxsWGoiWDOMnvQ4On%2By3mAJJ6Z5qihbdVqesSdG92xGFs4LULM9c0Z\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e78dc24c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10708,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (10704), with no line terminators","md5":"8cc09a8dd381483160416fc7c0109972","sha1":"fda833adadf1d7af127f50f07bb4a518ceda4203","sha256":"77be492240c9e07b214e7ae6b956739c703dfa1291fc842822b41236cf095051","sha512":"1adbaa741758f06ff6d3297f67cef26b1fc8ceccd080b911c746eb6c9b78d13789bf65a6e19aaa0f8e99cc96ba87d6575eeb35bf786ab4079db79a472c71f53a","ssdeep":"96:t1AxfilvZt9WxXQGcB18YHKxPJFmYFzmae/LmCkHepHlyVx3SymvVG3CXh6s:NZtMtK3Kk/Lrk+pHYvw+CL","tlshash":"922260527d8c9b0d2c77f9697487ae4c4623e27391850774fb2228273e9b58237e35ca","first_seen":"2025-10-07T03:56:36.242525Z","last_seen":"2025-11-11T17:26:48.601448Z","times_seen":2,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-af8a252a.c445aa6d.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:25.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-af8a252a.c445aa6d.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:26 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"caafa673d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s1CeK2CWlLvhkhILD%2BTndpgwkArWid4JoNKKRp6lJ9xMsHYVvnu2dkh8nRlP1oBnU5i98%2FLv2ObF92agJmWbReqqe%2BnMfVok\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e9baebcc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2980,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2980), with no line terminators","md5":"9d4e1e3c96afc2e9b90c2a5e60bd01eb","sha1":"f9461f4892eb00a9792d2de77dc61b45653a5fa2","sha256":"f14038cd126bb666cb4d52a81a72650d1a87fa376cd236a6293925c9f39aacfd","sha512":"c89a4ed7a4b2150a81ff3a54e9ba1f343a706bc25ff612291f0656dcd24b806d474211cfb861b45fa65e303472b217b714bdbfdcf822f1b1a7c3e169ceafb9bd","ssdeep":"","tlshash":"9151b61b758f90ad297a3064000faf5540a33fa9d01ac4e77d845b90b688e7e1a6ef7c","first_seen":"2025-10-07T03:56:36.391277Z","last_seen":"2025-11-11T17:26:48.603913Z","times_seen":3,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-bf19119a.e47c68d6.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:25.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-bf19119a.e47c68d6.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\naccept-ranges: bytes\r\netag: \"80fe3673d334dc1:0\"\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:25 GMT\r\ncontent-length: 8295\r\nage: 9\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qqORt%2BbFvn0eEmJB%2Ft6gqYzy57BmflSYHg0hXLN7CQxdIeUhqNi3e41H6SKJGbICkG8Ouhzp9n4nkRFPW6MXDbZo4zaCsfRG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e9c3ed4c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19020,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19020), with no line terminators","md5":"a83ba6b099540a3e21bc90924a5baaa7","sha1":"765d9bb5653d573febac81c99c87ccef20808212","sha256":"e45cc7c0ef044aba039cfb490fa96ca5a04b9bd048ab1b1576e6e751ee3aa65d","sha512":"4a4ef977bfcf440e4372c847c061a088bd75e5618c9512a8254a36ab1f818419c463231514a8616400ed1bc774c88cc43daf20a8ada2d7b78fa2769df83481b0","ssdeep":"384:QtGWZfVAyO6hl9ezh5FAtIApqCCNOt1lSG5bVNOdxz5VzxzKfJ:0ZfVUGezPemUk41l+aJ","tlshash":"6782fb0db1c3b9340e7770a5701f1500a2b72a98b42ec48df978d9d25ba9e88177eb3d","first_seen":"2025-10-07T03:56:36.266035Z","last_seen":"2025-11-11T17:26:48.605511Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-4aed644a.58762503.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:19.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-4aed644a.58762503.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:20 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ba39f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RGlNHrsKtgT4xWd5B5pcb7gpK6qGBjqsjAtyFJlpv6OACsAwVzoafHbxBgR6loeKQb8YzKOzUmUTGjFoDN3jo3VWirNZHujB\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e758bdcc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13399,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13387), with no line terminators","md5":"d7b29bdc4bb95a7fc872d3e6401f2583","sha1":"a81d8dfc43818d35ef8b6591507a686094edf8e5","sha256":"38a391ddbdc29d7af3e46e679ac36947b3acf2b6b08cf117fbc088d577896065","sha512":"11e444410a55245e5239e240fc260405a9c179d1a483dd5871ff094d5b4b429390478ba8fea9f859450b51ee6b6e8231111a0a0c9af3ffafb2683625c5042697","ssdeep":"96:PtoYoj9QBTcCOFefZ5cmRFTfFkmoPNxOoyTHiUye09lTcNc9hwMjNcDBFikFbW2d:ijoJhF07hDNX2OCO0Cdwh","tlshash":"7452c9a2b9de391b3337c5262bb0eb8c640632139341df5866596425cec7277327a7ac","first_seen":"2025-10-07T03:56:36.482099Z","last_seen":"2025-11-11T17:26:48.608507Z","times_seen":2,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-vendors.d53611e1.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:14.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-vendors.d53611e1.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:15 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"211ba973d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hMKUrT4Cejn1gCtCUvwisa0Vc62GlOfe3wbiNeQ575Arvio1B%2Bs3o13WDeo7ZNhdaBHdMokRTxOz00ti6ds%2B84v1RVQKmFcQ\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 99cf7e576ef7c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":76762,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"89872323b4523ac6e558a2dcfe374e1f","sha1":"7898d211826e6cecba2902932635ff4c93968196","sha256":"d4cfba9ef821f6926d7726e4d4c34c193b016e448c85b71f49ade789f9468f83","sha512":"afceced8b6cb3a23f4035a66f5782c0ad31b673d770162231f3d0b1b922cc7b7214940a61206ea6f8c6ee9bee55eb1562bc49cd6e7cbbcde635bc8657bb43339","ssdeep":"1536:PMQbFNJ+jqkiHcurx3WqyrtpqoSWEDZgs1jI6vASf65WCXkb:PTrxmNH9yD9c6v7f65WCXkb","tlshash":"5b733bb18a8411ed7337ce158bc0f6f8d694e063c9920cd8f1459a0dcfeba65125af3a","first_seen":"2025-10-07T03:56:36.370904Z","last_seen":"2025-11-11T17:26:48.611871Z","times_seen":3,"resource_available":false,"data":null}},"time_used":793,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":384,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-bf19119a.e47c68d6.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:16.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-bf19119a.e47c68d6.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\naccept-ranges: bytes\r\netag: \"80fe3673d334dc1:0\"\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:16 GMT\r\ncontent-length: 8295\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=143UJIGr2QhOSR%2FKfmobObpm79YDnim%2FNJREC7jCRiRsdsYRAWoI2YRmZCJ7W5B9KoQ8GUiqEUhFnVJxNof5sEDynw8Nx%2FfJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 99cf7e62486bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19020,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19020), with no line terminators","md5":"a83ba6b099540a3e21bc90924a5baaa7","sha1":"765d9bb5653d573febac81c99c87ccef20808212","sha256":"e45cc7c0ef044aba039cfb490fa96ca5a04b9bd048ab1b1576e6e751ee3aa65d","sha512":"4a4ef977bfcf440e4372c847c061a088bd75e5618c9512a8254a36ab1f818419c463231514a8616400ed1bc774c88cc43daf20a8ada2d7b78fa2769df83481b0","ssdeep":"384:QtGWZfVAyO6hl9ezh5FAtIApqCCNOt1lSG5bVNOdxz5VzxzKfJ:0ZfVUGezPemUk41l+aJ","tlshash":"6782fb0db1c3b9340e7770a5701f1500a2b72a98b42ec48df978d9d25ba9e88177eb3d","first_seen":"2025-10-07T03:56:36.266035Z","last_seen":"2025-11-11T17:26:48.605511Z","times_seen":2,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-09f525a8.5eb3171e.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:22.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-09f525a8.5eb3171e.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:22 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"f34a9d73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CCvcDTox3ij2iUTgZ9VkD%2FQFEnBh3%2BlNnIJH8sp4DJI1HzLZ0bQ3LQvFgiJK3HftnRCNNFIgux8DjoX1rr7U%2F%2BtSYe%2FBkyYT\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e862fc5c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":8899,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8897), with no line terminators","md5":"1d0ccd1b379bfa3f5ef59f5628b3e2ae","sha1":"dff0356bbfce8a1c7b4386862ff580a220927528","sha256":"8047e64cd173ba07e95b87eebd430f2a3a6fe9574589981ccaf8d811f1df0ba5","sha512":"5fa66c5a3be6828046554c01f8c56a39e48909975de43f0d394c74dc07091bf7a2573521174950fc697ca0247fda64029464362dac337c1db71d6c6628b8803d","ssdeep":"96:7MwqdjmaPW58N7LqbvXHHotEtvpucLi1lgNmmbo1+rYXmi2HWFWvEBK4AxarUnHf:7BvGe4adLWW2+rY2Rp04nHIE5","tlshash":"f102931a74c6b07553fbb1a6801f1d0571332584b50785ccbebcf8d49aa8a5d312ee7e","first_seen":"2025-10-07T03:56:36.368529Z","last_seen":"2025-11-11T17:26:48.614528Z","times_seen":2,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-1d7bfcf6.52af114c.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:22.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-1d7bfcf6.52af114c.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:23 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ec9d9e73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d4cjkKwWzwK6daUIIbtRGByN%2B7fH9OhbigRkykEkj%2BUAOzrSY4%2BHHOORJQQ8ee51khbWLc7L2XW5Ch5BWvbhDFZByrCKQcZR\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e88d839c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8467,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8467), with no line terminators","md5":"d7b1e300181fbf3e1fc089a87525b0dc","sha1":"bc5d9e6fbbff53b59b088cba4e5bf43cfdaefccd","sha256":"75c142d1febd33106cec7ab8da6a7c405df938ea38acbceda24794f934c41c39","sha512":"6dfc49159fffefae396b43db5dff81cdaf9e6eec5ad598edac7952e2815a44f1859ad205399cef7a8526457b1bf15a0b133cb54d285a76d1c5b31daf4cd7d204","ssdeep":"96:wlNxRkRkCbsLvUQt5hcLkZVIMSEI0DvV9HHW/VfMhfMhZE5E13FMyVUnHIbamba:wlbiRkCu56LkZVIWDa/VU9sePnHIPW","tlshash":"b1020a1eb1c7b43411fb71a6802f2a0570372688b51741cdfeb9f4d0da68b9d226adbd","first_seen":"2025-10-07T03:56:36.316894Z","last_seen":"2025-11-11T17:26:48.616916Z","times_seen":2,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":413,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-2d20fe32.cadb7208.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:23.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-2d20fe32.cadb7208.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\naccept-ranges: bytes\r\netag: \"80fe3673d334dc1:0\"\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:23 GMT\r\ncontent-length: 35486\r\nage: 6\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ALha2cpSjWpYPWOhJS3wOH5Uq68BqLCXPP6OXpyQXdDeLw%2FRIDZjyGTZR%2B%2BxWDMpfIEDb%2BJN7d3rTe8Exm9sPTDRzuvdyrlE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e8bb93ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":136982,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"acb0841c1826551f114c701f4e3bd917","sha1":"fed9d8395f6b8e1b7f48e353161fbdf6fdcd506f","sha256":"43a2ac7ad143d6a5732839195a613da41839c9385daa894ae8425366d64f9d1e","sha512":"97a57d8c07ae480f7ae14c2ffeb610d646b045171b601aaed617eefbeb27f1878ab625beeaa7dd5d7042061952c8f06457e4fb84e7e2d04b3dd6d017064e1bec","ssdeep":"1536:lFvfRcGiHFFFpyEO8peZjZeSfZK81lNmIywWumR2s/TUwwpfPH1OKCPVyfhyTXnP:bfRgw8petfYRNuzIUwwPH1OKCPVyYLOE","tlshash":"6dd31959721075a282fb26cb53a8c610a3b64855b809c5e871bd4c6b6d7ec5803feffc","first_seen":"2025-10-07T03:56:36.318434Z","last_seen":"2025-11-11T17:26:48.619028Z","times_seen":3,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-548527dc.77fbfccc.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:24.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-548527dc.77fbfccc.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:24 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ba39f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7dGRGKBQQpBV4pW8hn3NVreFukxvbgR9MHGxU7JRsdpdLeCw1O3V5dhUpCtCJfTaY9L5hhmuio1wjNE3RxumTmk0X8cABA7f\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e90eaefc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19410,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19410), with no line terminators","md5":"9a46bf69dd1be22babfe909a70407240","sha1":"e74a2bf22664836558276d05cde9c70062ed0de3","sha256":"1c27724c98b7226f91898f148004ab7d584818d50eb0899304861a5aaa9d62a2","sha512":"a3b3e8dd1a3097a643e1fbe7e0d3fc00c634c79933e04932ec419c387d2180c06183f31228c005e427435acb1ebe2a2e6806715d6474a181a1d092a18b2f066a","ssdeep":"192:bIf2Mz9Kwsm6UKkmAfO+uUsuXw2Z3kpTUvWhFZymBjyqV+yIna8USWdY1v9k:botz0wnBG+uUs4w0shFZFmymlUpdY1q","tlshash":"5292a65a72c1705613abf1a1801f1605507732c8b906c4ddbab9ecf5a9a87bc702fb7e","first_seen":"2025-10-07T03:56:36.359657Z","last_seen":"2025-11-11T17:26:48.621745Z","times_seen":3,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":392,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-5d731799.666f222c.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:24.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-5d731799.666f222c.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:24 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"57ea173d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eIsQ49d%2FgY7SJ35J65jlcH69zf%2F04C9z1GVam8JzdIjSAfa8UijKyGBlgRenfmKUrZhs697d6VQ%2BZmw2A3%2Br5FLCDGRrHOU%2B\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e92dc7fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":15565,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15561), with no line terminators","md5":"04e84a04ce699bcbeaddcb8f773ec7d4","sha1":"ef93c5e463eccf50a0f5df9ea0d192ed36773d52","sha256":"314ed27acf5b67239a56106dac5c916b9ee84c36dbdfe9bc78cb321924691065","sha512":"090df0a64161fd6d987d0197160e209b0c64321c59fae1d4d168c480ed55a69b01de1869e995e7a6fb4e98fb520e47ddf84ff1ad1d3748ead6cbe8ab526de5ec","ssdeep":"192:aBSKnC5AQcVHc6ejyeJ9jQ2d8PdijzHIRAUSWdzvAL:acHBcVHc6ejl58kIAUpdzu","tlshash":"5e62c95a72c7e41d63aef090001f690450632bd4a415c4cfbfb4e8e4d6a4bad663e7be","first_seen":"2025-10-07T03:56:36.40762Z","last_seen":"2025-11-11T17:26:48.624116Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-7af22bdb.089d19be.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:21.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-7af22bdb.089d19be.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:21 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"1112a373d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qsfnHzKoWlKG24jfrNIuAkdB3NoPvbXWlF02gCh8iglNHNpppLMaop%2Bd9ZQo37D0mlS6ujJCha61zgsTLCEj%2Bs4aLTab9qXi\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e7e7d55c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17091,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (17083), with no line terminators","md5":"9be97db52708d83bee472e59dfcfed81","sha1":"80ef550fdadff87d2f75966f933a26646c7576dc","sha256":"a0c2c36ea1449b7c72c8ba5c668a1920adbd4a30e63aec3ef9571d854717bcd5","sha512":"f6bea00f4a797942a5356423df609cd3ab9430f5646deafb5f0f92efe9b6221a22be16ccc5dfc31975b71b9383a37fe01d1e9fd6e8b180e3fe04ac8d941f7fa1","ssdeep":"96:KXFrVIbDhwWa6NXHZfx5WoYIj9QBTcCOFefZ5cmRFTfFkmcwEwpZnw+uR4JYKwOf:KXVKyCT5LjoJh3lJ1/T/d","tlshash":"d47242e371ac0e367237cc7425b7b6c8483392539041d365b2a77526af8b68f37a170a","first_seen":"2025-10-07T03:56:36.403217Z","last_seen":"2025-11-11T17:26:48.627014Z","times_seen":2,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":410,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-7e7ab794.cc964cc8.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:25.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-7e7ab794.cc964cc8.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:25 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"f786a473d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0f7XI9j3F%2FUXJS9N%2FrIG95Jy%2FYkvoz4J0CIUUQPAYGz1bBzK0jFmeelujUtag4VjrU08UXQ751lhki2BTSXc1HMaA220XnjO\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e97ee0ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38384,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38376), with no line terminators","md5":"8808711a8db53ddfa72c0467d9ca16e7","sha1":"69d16584468d612eaa4d48510de7ebcdd09758e4","sha256":"c97160cc062d0fa206f775627b50578b44c25367d616f53e0310b0666f55a9c7","sha512":"09596df6aebe76d056ee3d55439e8f0be3ada45756ad1773bbbf92f0a064183ed7d8a2fba805a36ccdfb5fd071e85639b744dd70b648c6ad10b296a83dd21fc2","ssdeep":"768:FOsRzIK8rUnZYmUk41qFddBSJgq75wY290q:wEWcZiYXdMeZD","tlshash":"2403f95eb2c2b47517a7b0a0006f1504603b2984a846d4cdbfb8ecd299e4e5d227ff7e","first_seen":"2025-10-07T03:56:36.319776Z","last_seen":"2025-11-11T17:26:48.62905Z","times_seen":2,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-ddf76efe.a7fa1afb.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:25.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-ddf76efe.a7fa1afb.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:26 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"211ba973d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nKVTcdKrMGYSh3XpYQciwOMVWRadlFsUbs0CZpaaB1ILYKxjUYMRhos%2BakWRofC%2FZ%2FBwdqeJuWinfkdz7Efbc7LB%2Bk%2BLdGk%2F\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e9c5ee0c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":17175,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17131), with no line terminators","md5":"5be8c27f808c574984b8c6600dc77ea4","sha1":"3fe5b1d6d8e689563d7d0e59a3907df00d8c2810","sha256":"a19225b11778a3f82e3a38120499f466daea8765047d53a2fe53d40dbaaea5e4","sha512":"72ec23e65912b574fc4ee7cd09cc5e7e29d4a82c17a9acd9e4e6dd4d024d80a28773603a65b7d11d185c464631331c883974717c5f46eabf58103f716df09a88","ssdeep":"192:uzfNWLUlEgVxOhMO4bA+bFcim4SXXFI7vFz/RQrajPoWiaMj4UTqEl6ZpnIJg9Z5:uJ8qEK+cPbGNAvFz/R5jQaYghCCQvO/","tlshash":"b27208267343b4ea29ed70d4642e552420722dc8d44bc0debe78dce497c6d2c396e63d","first_seen":"2025-10-07T03:56:36.468376Z","last_seen":"2025-11-11T17:26:48.630748Z","times_seen":2,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":399,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-15466a2c.db587a0e.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:16.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-15466a2c.db587a0e.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:17 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"24b59d73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oh7EqAYQfrBSFUnXTEabY8JQ4n2mrWJNlDNwhCD7zEB4WFEVcNrMwtH%2BE0Ks%2FLRAI%2FJ6H6D24ElhoDxRPPlzlKFsnmvEjjHx\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 99cf7e624867c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3748,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3748), with no line terminators","md5":"c3f219b16b5c87898aa19249156f9770","sha1":"9a622e9a635e245f0f7363cbcb9e33d289e502bc","sha256":"b3b3c3aa53252f0fecd1fb9670b1446ac84aa89b714c395b43f5ad2b0a7ba522","sha512":"6fe1e72cc4c6d4c74baed9ea527f8e319e526e3eda45b3ff94a83b29c365f3e4f656cf531d7d61f980fad593874bd3fb4dee4385bffb38fa9913446cc669ea8d","ssdeep":"","tlshash":"b071521791c91238f28beda536d007e3f622d103a5124277e2a7741dcfcb2e61687b5a","first_seen":"2025-10-07T03:56:36.289894Z","last_seen":"2025-11-11T17:26:48.632993Z","times_seen":3,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-1858c937.90ea7ba9.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:18.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-1858c937.90ea7ba9.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:19 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"24b59d73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Df8wskH71WmucCl3xRsC3BkCIBmIGHm15dD2akE7wk2hdOf8WqUbtlHHS92YywSXYrISyfiitEqTShEWdBR%2FigwYns387IJ0\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e6f1a6fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43490,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (43482), with no line terminators","md5":"7f0ef27b14d6688dc59058067fa32faf","sha1":"cd6f61eaca4ea06de22fc46dfb2f21124b119928","sha256":"ec0523f346d7f1ac2f435ead4132ce740282271f6b893d6b2f5b8269dbb982e4","sha512":"60c809272692c86f5cc3624ad60ddc9b0e1a434984cf7942b218d365bdff0e446b4e7c264342b5121af2392cce8539684a457aa9cf9e741e0c7f92c14ad1a7d7","ssdeep":"192:KXVKOfZSdA6ZjoJhU+WbymLDYxdQdtjSJxXlA6i9aVI3jMQ2ZDCt5R+iLVdim+k0:zqBPU++VSr1AF3j0ZD4/Lim+vx5","tlshash":"7113a6137d8d1e09eb3bcd9427ccf9d8492ca3638a0347a7b536a9118f879532dd2279","first_seen":"2025-10-07T03:56:36.486595Z","last_seen":"2025-11-11T17:26:48.63486Z","times_seen":2,"resource_available":false,"data":null}},"time_used":571,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-1d7bfcf6.26e0c8d8.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:18.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-1d7bfcf6.26e0c8d8.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:19 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ec9d9e73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MkSvDdQqth2PqNg3bLMEpCgnqZ11xpJ2LWblI%2FyjJl963kmbDvStD5fJgbYWN%2B9ck9B7u%2FLXy4vGAvtZblCSwqjJbDPtaqTR\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e6f1a71c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":11617,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (11609), with no line terminators","md5":"b76e0a4fb57b72eb5dcaa7976b4b4b96","sha1":"a38413bc655a6e061a4b1b3095157a122561c52a","sha256":"ae8b99a6352d96abf96802f77384bce43aebdc3b5f5484c0fe2cf6c90fc9c0e2","sha512":"19af73078b402de9221431072665d22cd2551bf03607efa55cd7fa65727c9587ba65920378e29810358e843cc262fc90882f92d3613ed07e93b2638631ab0875","ssdeep":"96:Jz3TdXPYoYIj9QBTcCOFefZ5cmRFTfFkm42Itodz3BYUeXe9i954Zhd/1reeeYGa:JjjoJh2L4VkOYp8","tlshash":"7232c762fe8c11156437cb582c80fa94c1376273918337ecb86da524de8b2e7356f69e","first_seen":"2025-10-07T03:56:36.392259Z","last_seen":"2025-11-11T17:26:48.636501Z","times_seen":2,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-b502d73c.5368d4e5.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:21.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-b502d73c.5368d4e5.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:22 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"48fea673d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8vZRaLVkazwMo8bgtBLvLOlV4vMGlQmk7q%2BQfNfhovphUdx%2FpVQgPtKCu9VrQfdMjXlGOsSZtys7I0624GC0dLNid9e9ep5N\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e837f13c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17673,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (17661), with no line terminators","md5":"e2dd6bf5ec0dea25305ae391d7d44a4b","sha1":"f3058b995c31de94737d5edd3738c585faa95237","sha256":"09071190faa5d24479eabd49c85545e570fa8411c4b93a22d1e02cb91cff1ed8","sha512":"caab3446bda10b17cbb3db31371edd9e0386282f4c9fdc93685e410d01594a9fe6bc41045df69fca983abf985b3b834d95c5220748f0e251fa55269ee6d0febd","ssdeep":"192:ijoJhGzoxv2nC/WAnWAnWAnWAnWAF/3qLsv25g/NHMEPRTFmZCCpeCQM:3PXz5/3SVySmmZ5ptQM","tlshash":"dd82a5d1b28c0b172137f4942853bbdf0075ebc3887107d4a419f5e59e8ba7f3a9a689","first_seen":"2025-10-07T03:56:36.367454Z","last_seen":"2025-11-11T17:26:48.639021Z","times_seen":2,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-4384e9ce.a1ed0ef4.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:19.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-4384e9ce.a1ed0ef4.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:21 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ba39f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sLj2KYzK4bLTVGIO42%2FVXCIaZWdVB9sLx50PcjBTO2NhjuSRXyvkVzb1leoOFCShupvpA2iph%2F3OYga4E2JTL3F8%2FaIi7MRb\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e753bcec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80040,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"71bf2f2c313ff002135bbd30a4f4efa8","sha1":"f30e7ee90d787ab4a8c427ca47fb27b9a707dfb6","sha256":"85cc2fd53698b5423ea27ffee87fe5c333e76445815f15233592b9b4802b357e","sha512":"ecbc432dc51ada7258b1f09dde9348ac24846842f04765e6e16438e2ba3ec2fac8ac442d08a455b1f76def8a98cd7453c152ba724e432797e1d7bfced3d8679b","ssdeep":"768:4PwngJd7YhdoEAfdjuoo2II0cpkAiZ/wJqQK4Mkh6vITRxeGq:4PsgJd8fHAVjhWZ/wJqIMm6ATr6","tlshash":"6a7319327dce1e1e33338d4e97dd99ec0d2ca38f410186ceb56b71da9e4798225d2896","first_seen":"2025-10-07T03:56:36.454284Z","last_seen":"2025-11-11T17:26:48.641726Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2372,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1378,"receive":994,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-291d7058.5f047fb2.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:23.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-291d7058.5f047fb2.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:23 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"61139f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EzWZKNdx0fYpp%2BNEeolIm4RvphScsGvv2ZrXmiRO3POfU3%2FAhEBLWVkHc5xYUlPCPG1WEjtpIl%2BPAkzNzfl4qvACpqhvYpNt\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e8b4919c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50522,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (50522), with no line terminators","md5":"35f3a808dafc1a51b68994a81158385e","sha1":"3d20745917ef20a65eba9722c5fd68bb89ed6f30","sha256":"96a165a2a9f1400faad1f4f04c83118cfcde733677c1046fca16ae1bb0b78922","sha512":"847ea59b21a9a0c7edc51a12a459657818e1b2213cf97ad49b34fd0ad8baea9376e929adf7e1f92b76a4aff728e1be708855009c376a8bc7d0a16b6499af5771","ssdeep":"768:48NvcVwgLHQZx9Kl8gYv6Na8FTLxhYNFpdGk5w0290A:48dcSgLHvl8j07MzdslN","tlshash":"db337d8bf2c6707556a770a1006f2a05643b2588b445e0ddbeb8f8c1aaa8d5d313ff7d","first_seen":"2025-10-07T03:56:36.424961Z","last_seen":"2025-11-11T17:26:48.643279Z","times_seen":2,"resource_available":false,"data":null}},"time_used":817,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":418,"receive":399,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-4aed644a.c8961e14.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:24.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-4aed644a.c8961e14.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:24 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ba39f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HRBlX2LUh%2FQfHxPoO4Y%2BuJMyqsW68r1YdkFU2LqirDkHiVnj52UsxoaEb4EQNsFGNfzkhKsduvyOh9L0sb%2Bvm4%2BBYM%2Bja0NG\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e906a77c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9723,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9723), with no line terminators","md5":"33d53fcfd0f7b71792fc1632f53280a7","sha1":"fb771936856a6df9ead6eaf9692e33918fc6234f","sha256":"bf4e2999deaefe3b6ce3ff3a95686680e9026d55d45a4a25dfba4ea6b1f5fbf8","sha512":"770eeadf6f73af2d4813853bd9fca29289e9f432a77d78ce878e204655086dc3797a4b03ee285242241efd8d029f4d5ee5e39d2f5dee225d4475afac3fcde923","ssdeep":"192:qp4k4fSuiAqwO9qRxswV1iFRROAqQe3TBJArjq:q2qwO9qRxswV1iFRg13TsK","tlshash":"aa12c60574abe51f56beb060121c082060722e695405d58bbe7dcad4b7a4d793e3feec","first_seen":"2025-10-07T03:56:36.305793Z","last_seen":"2025-11-11T17:26:48.64489Z","times_seen":2,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jytnet.com/Index.asmx/GetRotateImageList","fqdn":"webapi.jytnet.com","domain":"jytnet.com","tld":"com"},"ip":{"addr":"172.67.182.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:17.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jytnet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 09:52:43 GMT","end":"Thu, 25 Dec 2025 10:48:40 GMT"},"fingerprint":{"sha1":"AB:5B:AD:9E:0C:EA:0E:A7:CF:A7:3B:CD:33:0C:92:E9:75:F6:DC:35","sha256":"A9:3E:E3:9B:86:46:2A:7B:3D:D4:5F:0A:1E:AB:B0:01:09:B2:28:87:D8:C8:CE:E5:5E:77:D2:35:2C:F1:2D:5F"}}},"request":{"raw":"POST /Index.asmx/GetRotateImageList HTTP/1.1\r\nHost: webapi.jytnet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 73\r\nOrigin: https://1w2m.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 17:26:18 GMT\r\ncontent-type: application/json;charset=utf-8\r\ncache-control: private, max-age=0\r\nserver: cloudflare\r\nx-aspnet-version: 4.0.30319\r\nx-powered-by: ASP.NET\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE,OPTIONS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oN4uDaaH9g%2FU72lyaP%2BA81sbeOvPvYS9UYFLijR%2BRqnvK80qFgq%2FN%2BAxvZ0qEGccHQaujvq09H0GxI4AkaG66fE4YbZVG7UmfsN6ama8ZA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 99cf7e67fba4712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":992,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with very long lines (992), with no line terminators","md5":"501575f7a3a7ac01551590c4dcd9ad65","sha1":"5a656fb978a9fa6c98503d83e0e0ced61963773e","sha256":"79eff39628a0a4812f6d6d3b1375d35a90166fd50288fe737f5526ae2c41fa09","sha512":"5543f2c8b94293e4ca83174ac0f1f204eea994e24fe05607153fbe83a03d517eb4638b881a7f69fe34bc7f10ecc44a3f5dedf859bb326fe1772ad7649f9c668c","ssdeep":"","tlshash":"6d119896b1500e17b8a5d6425083cf84253deebbe1cdc7971e60d3d8112c9d9b25e308","first_seen":"2025-10-07T03:56:36.477858Z","last_seen":"2025-11-11T17:26:48.646411Z","times_seen":2,"resource_available":false,"data":null}},"time_used":625,"timings":{"blocked":42,"dns":5,"connect":1,"send":0,"wait":541,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-134ce872.6aa368b2.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:18.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-134ce872.6aa368b2.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:19 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"24b59d73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4SNVwwB9C4QArNi9brAEgjWG0uflXC%2FmgBhyQpr28OFVTPqLFPIeqM9dqSh%2FiJcOsGY8f%2B%2Fh8QIQ867%2FGebUqthubmSTu1mF\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e6efa68c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":7246,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (7242), with no line terminators","md5":"0f5702a330f80b3c473a048d106ff65a","sha1":"5e28a176fb02d885f400f2d27c531aad4641d86f","sha256":"83036ca346bae8ef6bf85d2dc265bb5cb36d978b9911c95cf58add3e184bd9f9","sha512":"786a816478f497bc9a2d5a50d8ff726ab22f60ac12c1db2b0fb756d52210526ba1be05fdcb937afa386480ff09d7d8fc3a8c789a348727c0838b19357a25eef6","ssdeep":"192:Yo499fgnWbHoo7d9yyaq70u+emg4WmiMhBwBQgauNsO0bZ838Am+9d1Cd5/Ftuie:iS3++2h","tlshash":"5be1d668b78c0c17f533f5502c86b65a13b72663a0911ef0acd13d652d8b2cb3db3a4a","first_seen":"2025-10-07T03:56:36.380586Z","last_seen":"2025-11-11T17:26:48.647921Z","times_seen":2,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-7e3d289a.02e34370.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:21.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-7e3d289a.02e34370.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:21 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"1112a373d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rTLM72W16%2B4hRoRgho8yXIuDNwG5FLJa5ubHAYAFU3Vs7V86q9xovxep5AmAC3rJVz%2BsYlAgqzAktihl8J9KwaSbghIh4JNg\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e7f8d99c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":18383,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (18375), with no line terminators","md5":"c3e6c2a933c27e283e515e1ce9d21bf5","sha1":"1e8b074cf7c669d77896a4d5e8872242c5c133ea","sha256":"275b7198e87fcb76b2b496b293c81fbf8af6ea17747159bc803e6e487984d373","sha512":"5f810dafb93df330919a242c771cc07fa1185848b07a38fd97b653d6091356e0985d5406033d06796c774230abf721d63c21919ba43acc29d40dde0d6ac05da5","ssdeep":"96:v9XFrVIbqxTKoYIj9QBTcCOFefZ5cmRFTfFkmCpNQ5mMUlAFUDG6hUa9iHdczxBH:FXVKWjoJh4BTx7tyun","tlshash":"89820ea2b96841f6b173d6143de0e67c43b7e653c403372aac62a5e14fcb18b3592d4b","first_seen":"2025-10-07T03:56:36.376976Z","last_seen":"2025-11-11T17:26:48.64953Z","times_seen":2,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-15466a2c.92962879.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:16.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-15466a2c.92962879.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\naccept-ranges: bytes\r\netag: \"80fe3673d334dc1:0\"\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:17 GMT\r\ncontent-length: 5146\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qsSEKDkWPbl%2FyBoXOnuWaHz4n5U0cD3HSZpKJ9E2ScU8p2%2BM9BAtwIhoAEAZ%2BOHB6lj8iIOczz7xCsJepAgIUBR9WvEA6De%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 99cf7e624869c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13846,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13846), with no line terminators","md5":"04085b4a95c5eef23b4cea31a3738a4f","sha1":"4d073c7d6ca2c54a595bd1b89e8296ee06f4642e","sha256":"b22fa6bac3fb1d2e438ea2477af95150ec4280acd3ef815f8261a81be77f0681","sha512":"3fc6dcbc3e17d6dd00894b3e4458cae58eee422d2299b63a46f4ec249c0578d937232bf1333bd19b91d228327b8875994b21521cadf149f9c8df415fe0f1228e","ssdeep":"192:y3QbE9vLJ/IAiuw0q0rQSw3hPupq+4IUVJ7ZLln++v2Dvhb1WDpSLcuFE8e:ysWpITuw5cQSw3hVJK1MsAuO8e","tlshash":"7652e749f4c6f86513a7b0e8001f150551231a58b40d89ddfebafad69e28b4db22bf3d","first_seen":"2025-10-07T03:56:36.263839Z","last_seen":"2025-11-11T17:26:48.650828Z","times_seen":3,"resource_available":true,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-0c8eca54.19816e2c.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:18.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-0c8eca54.19816e2c.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:18 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"24b59d73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c8IdBdFMQwq7FEmJcivXBjLwV3LyJWjpApa1ofGBEU9YteiPwxpCEvBdWId73nXCjSEMDI12IZ9wXAHBOZ7FHMdz0rDL%2FV8J\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e6b39c9c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12335,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (12327), with no line terminators","md5":"a9400863179b64f530b04297601f4f02","sha1":"e724951b5197147d4a1e3e3f25b3d1b3367f890a","sha256":"58b03437f577caf93bbe60cb0d89202e87cb30ddba4ac42cb3f03003318a2257","sha512":"e0900177486e5057b57c2f0d77511afc7f4db369702bdebdd2e468d59e888096dfa93024879cc235a5110777c9c7a8f7aef87e5a81a4c3e6bdd1fe2860890a38","ssdeep":"96:vQNoYIj9QBTcCOFefZ5cmRFTfFkmG0qwSr2/M9+hcnuQko6371HaFfbFEw2NCIwB:vQCjoJhnYyZ+2NC9ki3","tlshash":"7e42e736f18cb5363437e52ca892bef4601463535b0123d0b8f56926be8f2c337526ad","first_seen":"2025-10-07T03:56:36.460066Z","last_seen":"2025-11-11T17:26:48.651612Z","times_seen":2,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-3b13f653.cb90b9f4.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:19.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-3b13f653.cb90b9f4.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:19 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ba39f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xyuDlSLgxZBZUzkhCggOHHphrV4v6vCt9SlR%2FKsDT1PgOEPkv6M%2BS0uIbrpjyifG9P2RHMwXkQdEbP5ZHGtf6D8TKuza3hJp\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e72db3cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":5634,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5634), with no line terminators","md5":"7d19998826ca8860c4940d582a8f36f4","sha1":"10ef971553e40eb2d1694273f1632c0027913236","sha256":"ec25c9fd8894106f44044ce78922e2f773f6dca6aa3379f1e197f314ed4012d5","sha512":"70b645061d0bf88315be1fbededa9cc90e873a89db7d675b584ea3c04ca370557f2e3907bb80b43243be6d615dde9e7e22794ab6dd64845e2aa7af2e2072c7ab","ssdeep":"48:LK4V5rWBZ0LMAl6VDLO+3C+9YxC9MlAyQ7JrSxVlrg5kACh56O+l0:OY56BhNmvOOC9XFrVIbl","tlshash":"95c1025b0b81232a701bddb09bf586d5d231c822a4133eb9ed54bf24cfcbb654ad9247","first_seen":"2025-10-07T03:56:36.324853Z","last_seen":"2025-11-11T17:26:48.652907Z","times_seen":3,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-be2d511e.7449f4c3.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:22.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-be2d511e.7449f4c3.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:22 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"123aa873d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bg2VjtN3gTiZ4UkQlFXW2WDBhTLKlaNbwEqJ%2BazJDqkZHlo%2BRv6r2i1riYxMnU67%2FkOsbao1eEHmR%2BlDKUsIZNU59ZUciAhw\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e841f4ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7492,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (7488), with no line terminators","md5":"55b0124d2b5c5122ce3297ec77752729","sha1":"5c08a01ef79a3e421a2ba76075880b7a01b43bbd","sha256":"3dbd8a75a8be651c2569aa826b5d6e785c4136c990d630d0c62c810f10ef468a","sha512":"ee8f55c6a22a7d739640afaf24a40c909b8dd341bce081a332f7cc20b0b66d148a22ecc792e3991d3798fd970123ca14a2566bb078138f2b74210e41c9a34511","ssdeep":"96:VI0CNL32v8f9a55cBO0SCivTtMaCFXbFcR/cer/rr:o1c/0SpGE","tlshash":"1ef12c71f98cd1153437cf372bc4fad43226635392466614a87d39f81e8bac235b2e69","first_seen":"2025-10-07T03:56:36.348313Z","last_seen":"2025-11-11T17:26:48.653712Z","times_seen":2,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-7af22bdb.5ad9cf7f.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:25.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-7af22bdb.5ad9cf7f.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:25 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"1112a373d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DPzUhicRSnrqVqndxA04%2BCbluLdMBN7aRzE6EnTUUTmHLp6Uspfh3QaeR%2B1Dn9dYoZH02woqdb%2B74K7XCmW9kgYZIafqcS4H\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e970df2c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41403,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41401), with no line terminators","md5":"24ab435d6cc7d31000a9de03e6c564c0","sha1":"10b066f33da4a87695631b968504d227fc23142b","sha256":"3b2fb030534c2a13829460d9c947903eacec70eeded83fc53c010b18ad40ce6c","sha512":"17135637eeb38940b2c330af073efde82500f1762b3ab8dfe7bcb967021bbad8f09b54abe817a5ed0a6a75baae742e04abcc6bb04f2db69e910dae1253fbf1fa","ssdeep":"768:qpw+Hox2/Ddhhd8TrSRjDhUyGa7VX9OImy1/w4290u:Ow+HC2/DgiP7H6J5f","tlshash":"8b032b5a71c2b82906b770a4002f2905a433398cb815a1debbfde5d1a7a5d8d703bf7d","first_seen":"2025-10-07T03:56:36.25373Z","last_seen":"2025-11-11T17:26:48.654873Z","times_seen":2,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":223,"receive":201,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-063a5dd6.dcd5e872.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:16.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-063a5dd6.dcd5e872.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\naccept-ranges: bytes\r\netag: \"80fe3673d334dc1:0\"\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:17 GMT\r\ncontent-length: 3008\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qXeSSWnLS6vXmB2a00PI7LnB3ZVZz2hRbEaY7i0cO5iZ4YY2Kj2PSB7aiVt6GeFyaOz2s5KMM5BGnPFHg0ZScG%2F4TMXSd18f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 99cf7e623864c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11665,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11665), with no line terminators","md5":"2beb7a514109cbf3a2a5327d48a27699","sha1":"037b14705e758502db01dad993aea8daa3cc364b","sha256":"86638e262927f3bb41c1029c1a354128f55daba2f3485c1b309f5135a873bcc3","sha512":"0b7588485d3628b989dda3a8bc95eea4c16fe36638f62265af9dd3b4b3bdf1edf0f80918fe79ee3cf6376af0097f225ec5ec98523f8cdf77801817b4cc000bf7","ssdeep":"192:KpPZ1pAfRk+UzBCZWbYpG6ROpJFSoYbLl:Kr1pA5kLc4bJ6ROpJF9YbLl","tlshash":"d63215d5b5c2e0e1d145311f48af2729a6a9f680f81b28e18f4264ca7f60d3c7561feb","first_seen":"2025-10-07T03:56:36.257216Z","last_seen":"2025-11-11T17:26:48.656195Z","times_seen":3,"resource_available":true,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-098b977f.0c48eb07.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:22.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-098b977f.0c48eb07.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:22 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"2e859a73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mGyrVXr5PvC1s5dF7vyzccY7zomEPCJp2cBD6bhOV%2B8PAOoWTJ5KtNUcxQM5e8polSD%2BI60SRjJ6rsH5KiA9B8sGEuoqbe%2Fk\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e860fc1c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5269,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5261), with no line terminators","md5":"b64dc4e1b6fa3c5624922c2c04c7f170","sha1":"a99d9462e12af1e63134459666cc7cc84013a3ed","sha256":"8e65c66daec645779e822dafb0b059f1afbb09f4b39bc2b562dd949849114316","sha512":"42ce2dae4dde87e7be337889ec3ae8274a7a561f2a77fd746192db625a7b8faae9dca40a77c9e0a647a28b65bdc59421b6d7cf754c3fc21e388657dedd7fadbb","ssdeep":"48:lD/bZFY3C4+Oa2lko04EDy2/EnYsjPSssgtjpSssqDhfArSssYEfAibrkzuWdz/G:x4usyTy2/wdhtMUiz/60CCMQcmmvhiOd","tlshash":"0eb1b85fb49bb4a90c6fb06410563c11a0fa94459443c9aaff34ede44fa5fac126f63c","first_seen":"2025-10-07T03:56:36.48883Z","last_seen":"2025-11-11T17:26:48.657484Z","times_seen":2,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-1014a0b7.c5aff791.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:22.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-1014a0b7.c5aff791.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:22 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"24b59d73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5equcRj9V3xBjS0L%2BIzRuwsvYZoegmFgbfuMy4T5HLJlgAKQnChcs90obTE4xPZ3LcDKcTMiPYAZytzpnPQH8ZoI0oTygA7n\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e875fe9c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":24839,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24839), with no line terminators","md5":"37b001e220c05e99cc19129b93b9ae07","sha1":"33f654ae705d7b6c110a2eed5fd9eed2cd420597","sha256":"6e8055c8c6980a36f3101b9a43b3bb10d1176b561c98e9b0eef11ffc639028da","sha512":"c4c5d58dc5aadf65cd39dbc3fcc124e02b102ab90ef42deb72190a223b6d0a3ba625646940f20097fd191b9938e426de34ec4f6c2cd9bee6ecaacfe1ae7235c2","ssdeep":"384:YUCreD5qrxcVH+CxSRaPHTJDq1+GEGbnhGJfwt6EWKe290FA:tIm9D8HEG1Eww2e2902","tlshash":"dcb2c84b72c2b41913ebf090006f1505a1372698a805d4ddbff9e8d1daa8a5e613ffbd","first_seen":"2025-10-07T03:56:36.247758Z","last_seen":"2025-11-11T17:26:48.659309Z","times_seen":2,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-7e3d289a.18584cb8.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:25.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-7e3d289a.18584cb8.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:25 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"cfda373d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MpzmyDF5u1adzZTacEu2CEtmEqwH4mE2x6QKvwslcnfNcIOgS%2B%2BJiZm4wSi0n2wxWXi4iTTmwMRMTR2ofC9KUMk9DjjJOACR\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e974df6c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":27975,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (27975), with no line terminators","md5":"3811f0cfe599118c610a8629778f274b","sha1":"b09ee9e1e9b1ed383a6df64edf94bb2526606c3d","sha256":"22135ae0c8c62effa261c3accd0b19751693fc338c298998aa3d42630e600896","sha512":"8cf7c9cf14ca94bb460435eaa77522a577477bd096c43ebe18f58d076261448b3a0ce9eaa34e2683be6c9210d1e3635ed29bbb11e540778af625c254876d02b4","ssdeep":"384:CXSwTJapJfVlDaj+vO0P5b+k5XVIvFzCJjfxYrettHLer6FWN290VL:1Sj+/pCmW290V","tlshash":"47c2d84ab5c3b42e16abb054005f190561362e9ca805d0debeb8ddd1ea64e6d313ffbc","first_seen":"2025-10-07T03:56:36.309322Z","last_seen":"2025-11-11T17:26:48.66076Z","times_seen":2,"resource_available":false,"data":null}},"time_used":581,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":395,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-92672360.0d3c191f.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:25.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-92672360.0d3c191f.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:25 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"4c61a673d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qVMuzqAdjd2ekcoCpugEWEOEZgXvvoCkwKvE70TFQ95sdaYcUTDBW4HVBY54rk1Wzur9nEpnp0NKO1yCPeE2zAwcbxU3o2%2BU\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e9ade8ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":24762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24760), with no line terminators","md5":"0a57d4f29c0f4016365609d234f022ce","sha1":"f004a32a11ba5011afe099aadce603ba7185b7dc","sha256":"58cec94a82960b5dfa1aa9d11c18ebbaba9516183798d051b2d2693037a94e40","sha512":"6ff21d211fe3ce17178fa24bfcdd3ecec91996080a26d86165f8c34179d2901c933d36a8164447c8a798d192f6d6c334a2977870c6db1400e324d6d934170665","ssdeep":"384:yq/z688lKQr5dqJ+82mlioeTIYWsEx4DSBmwVMldXVH3+sRkaGapKgh2aWri7:ykF893TOsENBKqW7","tlshash":"13b2f91b79c7f56e547a5060201d2410a1b11e98a444e06f7a78aee1e9c4e7c373ff7d","first_seen":"2025-10-07T03:56:36.271609Z","last_seen":"2025-11-11T17:26:48.662284Z","times_seen":2,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-da11241c.036be545.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:25.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-da11241c.036be545.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:26 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"211ba973d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s0YxsvTcJEw2qYp62sFKUWby4V7PoxFfqBCotKlrTYVFBl9%2F8RMYdYm3hkDHauDk6Ge4H68BdG8yIRGW1AEQu6MlhI6tt0Ps\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e9c4edec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28720,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28720), with no line terminators","md5":"d0e0ea94e3eb6e896eaeb46e4a9401b0","sha1":"7610d68e3315f32d4107cc606cb0a2f2edaf310e","sha256":"a4a62de81c40ce00251aa4952e7c66ef3ce396af1b3c99a3bded617f925ad2e9","sha512":"0b5aa6eccc1dc14448af160286be26b1f58333e4b7c9ed1cb42b13123ed2358afa4bac16ea1fde23e53185f55f236b508b241cf7e04d54761287d44c20b6d260","ssdeep":"384:Lyddj9qT11kXfUCxKkLHyN1aKnoveadLdy0vHXWSZ6oWN29019Q1b+dXVsz+rVal:LUdj9gAPvLOaKnJaTywGSEV290Pv7wh","tlshash":"d5d23c8ab1c2b82557bbb095006f250571372948e80690ddfef9e5c1eab894e213ff7c","first_seen":"2025-10-07T03:56:36.394458Z","last_seen":"2025-11-11T17:26:48.664031Z","times_seen":3,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-0c8eca54.1473ec7b.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:22.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-0c8eca54.1473ec7b.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:22 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"24b59d73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VzeFJlX5glswWpcMfRrF4B8PkfTV%2BPi9AWf3YjYDD%2FOYihJW7KjU0bqkfA9J1uuyLj1IBBpDiexe9JYJGaUpcEnHH5l%2FlWeL\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e86bfdfc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7535,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7535), with no line terminators","md5":"8238fdca10c32ce0324b1a6fe24a7cad","sha1":"2ca1190a1ad94863e52c348b59a1d5496b3ce74a","sha256":"ba7f57316b236dac798ef60666f0cbaa85580985c7370d93243279a2b855c935","sha512":"557632fbbe3c97533465e0a786abf60df18055018ab3e9da06459d393c7bf29a25134c4438288e50029a86b509921a3c6d99fce0f3795d83eec4757d1c73b984","ssdeep":"96:sQbBC4Y9Y6o70I2/fqKj/FANJ6IDubevd4XhVxkcV1vRdVHWDZNNIfUT:sZD8snqU9I1Dl4XhVxkcV1vRdVHWDgY","tlshash":"18f1e85b208f747f0d7570e0211a2a5720722e42e549d4fbbfb8d9e09298d69122ffad","first_seen":"2025-10-07T03:56:36.295841Z","last_seen":"2025-11-11T17:26:48.665759Z","times_seen":2,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-2acbdf4e.48f860e2.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:23.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-2acbdf4e.48f860e2.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:23 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ba39f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7GyCwcdowUakTFU8hoKwnxA%2BahK7llS9Ih8cJxdXHUHH4gdWMlJc2JssdEeN8D9F0KLML363g%2FzxWf%2BCBRhfgAJUVIOpPVhy\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e8b7923c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":14086,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14082), with no line terminators","md5":"9b5241d768d2b691223c5dc8abdb3151","sha1":"a2b10d441d7ee9159ca96c24552ab30c3e3e7ff3","sha256":"4706eef1a81592951e2ef0df0eaae682e29bd4d02e8860109c0d60d60942aa6d","sha512":"7e4794f7083a853e69039e75f3243aa3f3ab301b8b69d0c940808df1583be9c3a44738ec56e3b062f1a8cc0acd9d4af34421325eeefa21e3764b7522face52ec","ssdeep":"192:CcVIWDa/VsifukCsVMHFzeLJtCQ7slbuYnvLTI1r9ZAYCCQvO/:CcVlDagCMHFze1s1ljTUrhCCQvO/","tlshash":"69523c1bb28374a719baf0a0101f290520b319c5e487d5e97e68f8d18bd4e6c35bbb7d","first_seen":"2025-10-07T03:56:36.229857Z","last_seen":"2025-11-11T17:26:48.667998Z","times_seen":2,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-7f76c49b.9c0d5a85.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:25.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-7f76c49b.9c0d5a85.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:25 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"23d9a473d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EedsZDVLhu8M2xrnEPl2aXegJ9CKsM3L8BNvnE8TA8pKsd%2FWgs4Ey1k7VgkC5kpmIBLnrmfngb85fuPX0F5P8uF3DopFAtml\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e981e0ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":18225,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18225), with no line terminators","md5":"de07d8da719309f91a0ad3771370c6aa","sha1":"2f521483b8aae8d40d3584e22cdb6080cef6d0ad","sha256":"6525f3bbcdc1308c17ce84a20eb92bca34ab54e7e5f69d7ae10aace631e90ac9","sha512":"876013397f1168edbef7ff3fb7b36b213a0922eb23817069708e34af42de190128a3d75df50cbada5148f8d1e6f6ccc2eb85e410eddca4f246bb7256bf3b0a6c","ssdeep":"192:W+7d9H+rRybMnp04nHIEk5AaHcSsYnEIibFIky6SrZ2WN216Y10IL3F:WYH+rRJGkHtk5vEHbly69WN290wF","tlshash":"0382ba4bb2c2b42516ebb190009f1905a13735c8b806d4ddbebde4c1daa895e613ff7d","first_seen":"2025-10-07T03:56:36.310746Z","last_seen":"2025-11-11T17:26:48.670335Z","times_seen":3,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":418,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-063a5dd6.42e1b85f.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:16.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-063a5dd6.42e1b85f.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:17 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"2e859a73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2COnW0B2DcGN2JbyBBChzGvTE06AoAUaH7OXLmknB1z8OpBgRFagG%2FLCVRx2ixSIQJpkxNzB3%2BoAs5f6UdLa7N%2FAY8GDF6%2BV\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 99cf7e623863c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1064,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1064), with no line terminators","md5":"410123a1d1e42f89b81c369b67516959","sha1":"556fe1efecb89a7563d884487eb43e40d59c766b","sha256":"8bdc2551564e4ec3c4e082d2680dbe005dd1d92618eefc3e59122a1a03049f18","sha512":"c949430942a1fb6f055f5fc5ae5c278a8f6291600b048de0ebb3425c19da8536f1c5f365edefaee3441a0ecd93542727ad7eaab99f020f2ede605acf59989e8b","ssdeep":"","tlshash":"0f11600241912208a417bc5adfe0d1d18370c412576762d5fca0e525dbcb7d32765b96","first_seen":"2023-05-28T17:39:02Z","last_seen":"2025-11-11T17:26:48.672161Z","times_seen":5,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-bf19119a.baa3188d.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:22.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-bf19119a.baa3188d.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\naccept-ranges: bytes\r\netag: \"80fe3673d334dc1:0\"\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:22 GMT\r\ncontent-length: 8264\r\nage: 5\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8X5XCiS%2BXheUBxKnoRUSREtZlUuvAtnclaTxetv2t7i9BMo3eajXmy%2BGeCDC6L7o7skg6HnTBMYRYCC32qceppmJyh3rMFtc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e84cf6fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36489,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (36485), with no line terminators","md5":"2b26203f85af4245c5cd7783afd921ba","sha1":"27cd8dc24eb0c8de4dc8a4d611b113617179cb04","sha256":"6069892fce188f87383309514f4aa526b57c50744fc22176dfcb456c3f1fe7ed","sha512":"3f759bd7aa8cfe044e308165de10209ee85798efeedc1826da71553342982f7614f11d24163d742c1541b4002345aa45ec4a8546a7b143a925ea25a3a79b1df8","ssdeep":"192:QfZSdA6ALHYQDMPGLiQdtjSJxXlA6i9aVI3jMQ2ZDCt5R+iLVdim+kDoe7wcOn5o:cP4mSr1AF3j0ZD4/Lim+vo3","tlshash":"fdf254127c8e2f23a727ce8694cdd5d4c52c736b8a420ffca267aa714e5723270e3195","first_seen":"2025-10-07T03:56:36.38639Z","last_seen":"2025-11-11T17:26:48.674261Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-1858c937.71ebd668.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:22.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-1858c937.71ebd668.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:23 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ec9d9e73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xFWxvuzL7hJ6EXJ8SWM7dpLi0ckjTXa663grjqXNNJHxwmp%2F%2F4FHUoz13%2F8YbGI9MRlPf5jl48ElOlICcHL6rEhr7wLrRlLa\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e88c837c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37533,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37525), with no line terminators","md5":"3cecda636bc370d35f9bec1e28fd8726","sha1":"6cf2a8cf636846946d4dc1f2a2e535c769526be0","sha256":"f673b9cf53cd862b0e9c06fe21fa2d3565a30aaff3236acb881d5101fcd36552","sha512":"4d4de3d8de8c40d90ba3d19fc0981884407f0ea94838fef87fb65832a5447d8eb9871b6c392c7269570114416d7162865f2065ce20927899b4bce5b6a6f41fd6","ssdeep":"384:w+mKAWWEfVbVObBlGGQ5zDGXNzb+dxz5Vz6rHr/DFdP8oHxQuX+GE9DnfsjrVY6l:2EfVQ+Gaz5cZdxyuXHE9jYVt5e290y","tlshash":"99f2eb4ab2c2b42507bbb0a0506f1505a1772588b816d4ddbfb8e8d19ae8e4c213ff7d","first_seen":"2025-10-07T03:56:36.470803Z","last_seen":"2025-11-11T17:26:48.676553Z","times_seen":2,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-115dbe7b.49bf453c.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:16.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-115dbe7b.49bf453c.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:17 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"24b59d73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e%2BNBePkEC7kYn2D8vahsn3QA%2FADhSG7jS50MubxFIQd0TLZUs7LUJ0w%2FZ9TaqaCWb6I62MaH3yTvlCh7MXXzQatmhHv1J28U\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 99cf7e62586dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31325,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (31313), with no line terminators","md5":"131272dd3e827ff4e5fe19297510af72","sha1":"a3ab14dbc2c9c6f030903bcdc86df12dcbd04b87","sha256":"5e82348a5063dd9f58d1f1d9e46cb606e40ff6cae1192bdd95225dddf3df37dd","sha512":"37fce8b170997d5dd972c454c0897d5925d01ba4a8901b550703c80793b24788cb0afef7e64e1da6910f7df6b2417841c9d3f3b8580c43a1ef2843e6c4278c2f","ssdeep":"384:t80hPz8m+AhDx6RYrZ03k5npmIk69xpm6+T:60hPz8m+AhDx6RYrZ03k5npmIk69xpIT","tlshash":"cee26233718c5a263033d8a16a90bad4ade6bb53a04117ddf47527267ecf343389a71e","first_seen":"2025-10-07T03:56:36.373338Z","last_seen":"2025-11-11T17:26:48.6786Z","times_seen":2,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":402,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.jytnet.com/Resource/RotateImage/20250814/73ddeaa938604fe3972ec63e6433a98b.jpg","fqdn":"wap.jytnet.com","domain":"jytnet.com","tld":"com"},"ip":{"addr":"104.21.51.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:18.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jytnet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 09:52:43 GMT","end":"Thu, 25 Dec 2025 10:48:40 GMT"},"fingerprint":{"sha1":"AB:5B:AD:9E:0C:EA:0E:A7:CF:A7:3B:CD:33:0C:92:E9:75:F6:DC:35","sha256":"A9:3E:E3:9B:86:46:2A:7B:3D:D4:5F:0A:1E:AB:B0:01:09:B2:28:87:D8:C8:CE:E5:5E:77:D2:35:2C:F1:2D:5F"}}},"request":{"raw":"GET /Resource/RotateImage/20250814/73ddeaa938604fe3972ec63e6433a98b.jpg HTTP/1.1\r\nHost: wap.jytnet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 14 Aug 2025 07:45:31 GMT\r\naccept-ranges: bytes\r\netag: \"6a7be968efcdc1:0\"\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:18 GMT\r\ncontent-length: 250316\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dFTx30I2LO0mpaVyzRDr%2Bi%2B1tlpGSYs6M9vUie7VGjAQbMCjktro6wC%2BOdQLLTFZ%2FVr7RekmucMLuPTE8wvHgZsFkfvyC%2BAM4B731g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 99cf7e6b7c0f5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":250316,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1280x510, components 3","md5":"f2da8c275efa3def5e7a8e1424dc7404","sha1":"c027f7681d0f2392fbea0a87cf9081d9e653b4ec","sha256":"68eaaab1dacaca4e454de89da2037f19d84aac2ef24575df833e2af1c4f167e8","sha512":"c98de488479a9d5355fcd2fc470d0d535068b801e3c6436bf326c42542ba631a9c94f5a8115ecffe695bcccd88a6ccb920acdc4b7f4b5619d348db3d092973fd","ssdeep":"6144:ivfU7GQ+2Op5luNuNVezF5aP7s046glIzN5A7p+wqjd1M:ivfUqj5MYLez3aPg0YIYN+wqp+","tlshash":"5334cd395a72118fd69f8a21d27a4bc713370754d08fa67ab2a8c9d34b77358339ad0c","first_seen":"2025-10-07T03:56:36.381619Z","last_seen":"2025-11-11T17:26:48.680483Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":401,"receive":932,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-695e2f31.f9dc5671.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:20.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-695e2f31.f9dc5671.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:20 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"57ea173d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FvYFzdAtJGlij%2FANVE8mbxqcm6Z8Q4XEjP4PZ5%2Ft%2BIAJiLo7Dzry0LHA6XC1bSxAYcgc3GOy6WiZrJSvNBsZaVZujhR9nf92\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e798c40c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":20817,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (20809), with no line terminators","md5":"69e348087a98be0e492a54772604fbf9","sha1":"aca7028c1026602d5f7aec43ca6631c9614cf392","sha256":"d292e50ae92316fbd21c1e89a160cf5693b67165c7fbfab87f38c00ae897b80b","sha512":"f5b893a11bc183ad990c71dbf0e18edd261af10ae0fdbf24fe7aa4b1246d2063cfc1b144bb9b3bd78fd82b13494e35e8f05eb7be7682d6a2c672e192f01bc6a5","ssdeep":"192:vQuLHNWAnWAnWAnWAnWAF/3qLsv25g/NHMEPRTFmZbJyJA2gCsjoJh4c:4EL/3SVySmmZc1JPr","tlshash":"d192b6217ec814152c37db5435e9f9580139e28381cb16f4e87d26a99ecb3e336af789","first_seen":"2025-10-07T03:56:36.236974Z","last_seen":"2025-11-11T17:26:48.682448Z","times_seen":2,"resource_available":false,"data":null}},"time_used":608,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":411,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-3b423979.88b2d8de.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:23.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-3b423979.88b2d8de.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:23 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ba39f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pfjHPCg41umu%2FCWQnGy4RRzFvbMh2XXJr4B4OZYRMyxMTp4dgRXKwcrs0wrdIzZ4GqvIivcjiY3xP3qB5z9cfErCKf%2F1lD%2FR\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e8d198dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34748,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34748), with no line terminators","md5":"3de274adcaf0c71c62df317dcdbb36d6","sha1":"2a7f64c9229cb7e2ec1e6c2a02dcef7668abc66a","sha256":"b89f1668191c13c948d4f34dd80d05255de428c05931b0b350886d43e3e4fdd2","sha512":"24c651ef0389c209c42a25374715f764b1734c72079fee0b91567cae45fd2c687486fa90284734c6ea6796e0399195950f1f87839a6ded9be7fd3a8fa5a7ff0e","ssdeep":"384:lyddj9qT11kXfUCxKkLHyN1aKnunK7DS9pU8i5MaajOPRxswVHFRTe8xJ1AfQxMC:lUdj9gAPvLOaKngK7+9pUR1e8xJ15I+B","tlshash":"25f24b4b708bb56f0a26a051501f290451711e88e40ad19ffebcdee0ba98d7d376eb3d","first_seen":"2025-10-07T03:56:36.297608Z","last_seen":"2025-11-11T17:26:48.685089Z","times_seen":2,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":204,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-bf19119a.baa3188d.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:16.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-bf19119a.baa3188d.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\naccept-ranges: bytes\r\netag: \"80fe3673d334dc1:0\"\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:17 GMT\r\ncontent-length: 8264\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uw5bJp1VfY5D1%2BD8QfunZSEGrPXeM0rPFm2qPq%2B2jubcZ9oOB84lY8s3yVCwb4%2B5ApVug31xChrqUhKuLZLC%2B1iz9auxCnxe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 99cf7e62486ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36489,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (36485), with no line terminators","md5":"2b26203f85af4245c5cd7783afd921ba","sha1":"27cd8dc24eb0c8de4dc8a4d611b113617179cb04","sha256":"6069892fce188f87383309514f4aa526b57c50744fc22176dfcb456c3f1fe7ed","sha512":"3f759bd7aa8cfe044e308165de10209ee85798efeedc1826da71553342982f7614f11d24163d742c1541b4002345aa45ec4a8546a7b143a925ea25a3a79b1df8","ssdeep":"192:QfZSdA6ALHYQDMPGLiQdtjSJxXlA6i9aVI3jMQ2ZDCt5R+iLVdim+kDoe7wcOn5o:cP4mSr1AF3j0ZD4/Lim+vo3","tlshash":"fdf254127c8e2f23a727ce8694cdd5d4c52c736b8a420ffca267aa714e5723270e3195","first_seen":"2025-10-07T03:56:36.38639Z","last_seen":"2025-11-11T17:26:48.674261Z","times_seen":2,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-115dbe7b.49bf453c.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:18.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-115dbe7b.49bf453c.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:18 GMT\r\ncontent-encoding: br\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"24b59d73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3ItYchbh6FJHo3dHKmeBI1SeD9QaJ7iBwTXi%2BfggwK%2FpZRUA%2BpWrgWx7qac3oXwmqAMr%2FLhpoKvv7xJA0C0jz08WK%2F2Udh%2F2\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e6efa66c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31325,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (31313), with no line terminators","md5":"131272dd3e827ff4e5fe19297510af72","sha1":"a3ab14dbc2c9c6f030903bcdc86df12dcbd04b87","sha256":"5e82348a5063dd9f58d1f1d9e46cb606e40ff6cae1192bdd95225dddf3df37dd","sha512":"37fce8b170997d5dd972c454c0897d5925d01ba4a8901b550703c80793b24788cb0afef7e64e1da6910f7df6b2417841c9d3f3b8580c43a1ef2843e6c4278c2f","ssdeep":"384:t80hPz8m+AhDx6RYrZ03k5npmIk69xpm6+T:60hPz8m+AhDx6RYrZ03k5npmIk69xpIT","tlshash":"cee26233718c5a263033d8a16a90bad4ade6bb53a04117ddf47527267ecf343389a71e","first_seen":"2025-10-07T03:56:36.373338Z","last_seen":"2025-11-11T17:26:48.6786Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-15717348.06b9bc8f.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:22.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-15717348.06b9bc8f.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:23 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ec9d9e73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DSuixKW7rCVfJ%2BSfOZQagRRLH7qUoGGrAFA0IR7gmtnEJhWFPP6OxDKwQ4jqI1HIqL%2FPovUO5REE1JJjA0mFFAdf4soTaa61\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e88b831c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5567,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5567), with no line terminators","md5":"f57b65b64b10c99d02a59678b91ca9a3","sha1":"45c7cd48d98f351b4a1d49b679eb59ce2cfb4d49","sha256":"59c5a7d93decca356a7527fa14d683ac4a21f95c24d6146e0dd55cc754a039dc","sha512":"aa6c3a4b3a7efb4a644a75775a80c1ece5358cb9595f4afe992a3d4ad0c715274bff9eb52afc2612f4474930ce1393b631b3fe89140e63d2cee43e1a0381437e","ssdeep":"96:X93aWwm8BxOcbefYZw/MJC/M+BHsjEBKdAxrUnHI/+E4c:X8BxOca9TBupPnHI1z","tlshash":"efb1754f72c6b07415ea7191501f5e19a07331c4b40694cdbea8f8d0d6a4aae326efbd","first_seen":"2025-10-07T03:56:36.38392Z","last_seen":"2025-11-11T17:26:48.687064Z","times_seen":2,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-6ee46af0.87afec22.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:24.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-6ee46af0.87afec22.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:25 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"75f3a173d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6exQLLfY9Y6GLQ7Ayd1V%2BC5SKb1zhbGrq8hKkMxKSO5IwOWGlyqWTjATOdRIw8XxV67VSi3eqWJQHoi9PPi%2BMlD3IILHDcqN\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e943d5ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21230,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21222), with no line terminators","md5":"199ecb715f1e456a71cf7a684b2ea384","sha1":"ebcc480ba3fcb8923e8fd46049a6ec1da33c688b","sha256":"e1eb088fb03cf96cd5612df33510e22c238ad1f9e46d128a643da210763ccd57","sha512":"9232fcb2c3e6d3cd4a2ecd4ed9aa92b7009b4d5f350bcda1abb76cd483697ef83da18c395aefb102a9e650e4b2de10c92ed256ef93411b8e38ba81a3ac9783fb","ssdeep":"192:z4hIvIzEyIz+rRwfYQG7RCr7qBMXp04nHIEg5Ak2KdsYCEIRdFIwSZ6Srd2WN21s:zXz+rRqHDWkHtgy0zwdxSZ6tWN290J/","tlshash":"cf92a84bb2c2b47516a7b09010af1508a1373588bc0a94dcbeb9edd19ea4e4d613ff7d","first_seen":"2025-10-07T03:56:36.327729Z","last_seen":"2025-11-11T17:26:48.689439Z","times_seen":2,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-70365c1c.fc7b43ec.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:24.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-70365c1c.fc7b43ec.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:24 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"26d7a273d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zj4Y00PaBK2MEc9OPlsrRc8rG%2BQYYRE%2BafvmQ2XPk2nTuc1mpFRSpbJs2rhJpta078yLxLjNPKryi4neEghlxNhxKrfoiOQs\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e947d62c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":210008,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60600)","md5":"b4dce4d0cd4f0d83e2ad9c310c911f3b","sha1":"3c9741474dd2391c87dc6da8fbee7b7153e2c115","sha256":"e78b36ec6ef07c0c1719fcb71b8240a1a8dd5e2c4911dde9fe1f6c45255b6486","sha512":"284be77a31971751d689157c543ab08aec35b0d81e6b2a5b085319e6e433d1415c858e1cdb5735666fdd126170f5015dcba784019e5b7f83fb623847150df865","ssdeep":"3072:yLK4t7IayQQZcYWL8+Zm0sHXBaGVl5jskKcJuP:yLPzqlWkNMP","tlshash":"2b2458b46ba72cde0b7ef49b101b2d439d981b13117fc1a8f24aada22d74706ceb1574","first_seen":"2025-10-07T03:56:36.288305Z","last_seen":"2025-11-11T17:26:48.691763Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1014,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":213,"receive":801,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-098b977f.be5e5d82.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:18.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-098b977f.be5e5d82.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:18 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"2e859a73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G69nq%2BmcctTVqvLVcSv%2FOPcGwElbtayxibdzl7Q7BNY%2FMVAD1Zitm3hQx3J6SMnxV52KClDxpnlPpIX0hZlCuccINE882RCL\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e6b39c6c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11583,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (11575), with no line terminators","md5":"91844655b73215dcdd2f1bfbb7bedd83","sha1":"f284e3dddaa55a5f91b66b8f00281d86b0ee7462","sha256":"ce594d58fd776032ebc5035d4c236a8c3bacf00f16ac81b465fbede05f5a350a","sha512":"689e9ebc3ac668be769cdaf258472c3f69622baf79a02f0543bba49657ade0aadb0a7f93b95d50d1c3601a023145403c46877d7f41fe371d16de299d86ceeaaa","ssdeep":"96:vQNoYIj9QBTcCOFefZ5cmRFTfFkml3Ps1yyt8Gb2X+9pGHlcshGTGMGikmGJ2OjJ:vQCjoJh9wTchw5ucY/zB","tlshash":"75322e26b28c9816233fcde824d0fea459196b538351c36cb724752c7f87e8f37a2659","first_seen":"2025-10-07T03:56:36.292533Z","last_seen":"2025-11-11T17:26:48.693843Z","times_seen":2,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-7a71de7e.9e6bd29f.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:21.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-7a71de7e.9e6bd29f.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:21 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"1112a373d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qxU8DmczQbhJpo1Em3CX%2B82%2FMOT%2FQPQSHwJ6gMPcz0XMq9LSLcqg%2BOEtUl5MjraepoFG8jQ5H53JNSgltJW7XuYE60C8EyZe\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e7e2d49c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":7613,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (7609), with no line terminators","md5":"8e415452198476716e7fa20a70459489","sha1":"5494d15026176cc46d0364b139152be4972451f4","sha256":"3480649cb1a419421f4a3435b7acc538bec6190d6729e3c42533b5c71d4508d7","sha512":"bc21adce5e9838cf9e9a1da953b812c855f0b63ce8ca9118beace9bc1b9a28af5bdec042a6cbdf075418bfa17c2e527108307fc7a079fd3704df6bab933bfb84","ssdeep":"96:VjfXYhnW9x9OBcfvkaXo/vFAqF9OLz50/y7:xvb37","tlshash":"f6f14052728eded52433c8d42884ae957325f773c0831694e8ee3de5de8b2a33751ac9","first_seen":"2025-10-07T03:56:36.225665Z","last_seen":"2025-11-11T17:26:48.695983Z","times_seen":2,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-92672360.61aa4ed1.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:21.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-92672360.61aa4ed1.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:22 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"d612a673d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eeGSNBOmaY0q2wHImjBLsKaugzQde%2BwkNDGbwigdDjheZx01G%2BsXfCf9LZNsX6hfBo71smCiCdnnYmqOwGABNVEmSJNnaMiw\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e824ea2c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21994,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (21986), with no line terminators","md5":"70d2a5adcbbdd8c6626a29c2aead0d36","sha1":"2cef3d2f863d21202f42a9da4d1b1b973dbe9422","sha256":"a4a2db244555f982648551f70203bc0f068f326dab597637ce978fc7e8e479ea","sha512":"fb59d42a96adc7549346bc23896e8eac9ef5d699cdcfd6116332a765541a566a6f14f73fd7e28531c16871df26beacd966c487b3cc4b79e0d147d8e8bc3397ed","ssdeep":"96:PQNoYIj9QBTcCOFefZ5cmRFTfFkmBONBxwJVfl6tbb9fuBcXVX50Enm/VFa8FH/B:PQCjoJh6NtpPf2AC66ly2","tlshash":"56a2be52b2c5066738e7ea14b5a4e64eb834e7b3c405873e9212fb520fcb2cb365395d","first_seen":"2025-10-07T03:56:36.404752Z","last_seen":"2025-11-11T17:26:48.698631Z","times_seen":2,"resource_available":false,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-29f7c546.8c8b312d.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:23.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-29f7c546.8c8b312d.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:23 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"9d689f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V1VyiT6xDkIUQ3EZMZcpqYpDrWZb3sv2dWWLKzgv%2BjKhJc8AXlvHGFaBM3l0dAHujPMg8gHSQQ3HE%2FVF2caO%2Bmr2TKkdHtrL\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e8b691dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6309,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6309), with no line terminators","md5":"c85f60c17d80bea7b1fa7d27e43e3a42","sha1":"c5060695351fbfb89529787e52c913a179568f20","sha256":"c22bd25067635f15a1e94567f21ab57c917b0beb699ee94fb9afd9b90cd91252","sha512":"f4d59e2a4f306472f9c6a77f00d28d210d7484f688e37ae5c2ac237f99161aeb93865f676f2eada2391a559a0addc3f1973a5c65155bb4e0a05be23f61cb8c63","ssdeep":"48:lD/itEAkQ9KlTSss9FB85hSssKySssA7px3r0qJ3JwHba4doRjE+DrYq3fvgGqVS:iMR+L/r0do++lqb4z6YW4fDRQj2IA3Km","tlshash":"8cd1832a7193b4e515aab190401fba24503710d5a44b84cdfe38ddf49fa0aad236e77f","first_seen":"2025-10-07T03:56:36.240939Z","last_seen":"2025-11-11T17:26:48.700819Z","times_seen":2,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":402,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-863aee5e.4d075865.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:25.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-863aee5e.4d075865.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:25 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6bc4a573d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7oCQ5Hjl3%2BSKeODcXtfeM7rfvoDtZdAOQpp2qMVVWLlpCq1EfoU7Xodc%2BSo5l8GDV3dh2jmTb4rd%2FZvvvSZoc4qdpLVCeRQG\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e995e32c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4411,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4411), with no line terminators","md5":"b25ece13b7fddada2644eedf9307ec64","sha1":"991cc2104f2aeeb1a01fe471ef11e33e3286dad8","sha256":"c7487426713e4ce7d700dd226fb44af571bbfb1f07889bb4a3c1afeb23a00ac3","sha512":"924cf8150c8a4ff17753b4395174f38c0218ce167416d05a5539f564ad7028b44f1b0d5717b17b5435f44012603cabf2c6e9156cdd3c485565d611d963a68cb9","ssdeep":"96:Uqn8+sryvlUwrYStw7oPVszFyVILtvuGpp756qicy79gjUKLbe0135:DnYyvl70Sa7oPVszFyVILtSqEijRJ","tlshash":"8a91ca493043991d4cf46021652e3e5854b23e58a4c992af3eb8cec05795cdf377dbb5","first_seen":"2025-10-07T03:56:36.273653Z","last_seen":"2025-11-11T17:26:48.703101Z","times_seen":3,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":427,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-be2d511e.60b9c387.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:25.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-be2d511e.60b9c387.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:26 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"f3d6a873d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=io0Zt3TJNTxV5HnGtaR7ZNkyyv7WLHZWiog5un0VxP8jJlxBXteYB9EDNoZjqOVdig%2FW8y72HbVeZHUlNdzppu4kY5C6ztKc\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e9c0eccc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24935,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24935), with no line terminators","md5":"35cba2aaa48502a4b2cf0c2b11254032","sha1":"8b05c8dc8b815bb11bfb536e796ca918bffa26b5","sha256":"f858e19ab0a3c431fc4d92f6ee245e55fe475e8bf8587ed5a3d5cfa4d4a9d44c","sha512":"503352a51e4b17f7b76656c7839495f771fa3dd326cd822be9879a0cec331064bfacd1dccc56fac172fe9cbd41794c4837d752919049aeaef09cc1fb1159b9f7","ssdeep":"384:zO4F2umAtIApqCCNOt1bVlDauT8H9j7v9tzMO0rVECvQ/Uh3GH6UxjVxJj:S4F2uNmUk41u/90XVQSUt","tlshash":"5db2190eb0d3f46916bb72e4406f0509a0372a99754ac4d9be30e8c1997ce2e217ef7d","first_seen":"2025-10-07T03:56:36.363041Z","last_seen":"2025-11-11T17:26:48.704099Z","times_seen":2,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-7e7ab794.90e2fdde.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:21.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-7e7ab794.90e2fdde.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:21 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"1112a373d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VfZi%2BUnD5k1R2cJ5DhXWFBWM%2FLQf8OCuEat08Ncy2pTP900Vs2eqjc1piJ9rqSdHJdXTIdbEYwC273ku5AxbsKeTpz08JXWc\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e7fcdacc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":48625,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (48613), with no line terminators","md5":"b08ef2885ed5473a025070b8ac4714b4","sha1":"3e1d2d1dc33f9642935040c3bf7d2c719a7b7231","sha256":"e3316765daf0e60e43b5dae236b76c7337c6bea004a9156d006e3acea3b7e0de","sha512":"0952fa980d6e73d6f517f87f6b33e252c852c3967e4a15f703ec4217bbc147b4e21fddb366505dce65cb89ca22fe67628df6edef66003a50e3e5e3bb6308b871","ssdeep":"384:zM8m+AhDx6YPMjFSr1AF3j0ZD4/Lim+vnlDtIfZQ:zM8m+AhDx6YPMj4g3aD4/Lim+DeZQ","tlshash":"0d2387d27d4d3e076333d9b55acda9d4a0ac3353e081079ef52aa7604e8b153f8db249","first_seen":"2025-10-07T03:56:36.267777Z","last_seen":"2025-11-11T17:26:48.706328Z","times_seen":2,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":193,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-01c736bf.cb96668b.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:22.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-01c736bf.cb96668b.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:22 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"2e859a73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8kqtNwxMwRdEbYGEbNOLEknJGJtj6RjZaeHu50kUF%2BQOP9ArSj%2BYNJUkzHT3XIQc8vmIrxh6YTntFFQ8AZFFjJaHCCesfLv8\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e853f8fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20817,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20817), with no line terminators","md5":"d56bc457ef66cdaca1594a863d95f423","sha1":"b3faf0ca2d067abb5f43abcc7eb7d3f6998f73db","sha256":"3160f6a9dac09e23dee2bbc6a3cc92e1d7b40a95f635f9600cc2ff17f69a15d1","sha512":"48a49b466330bb0e6463bd3c3100aba881deec176a182ab8dab66d4d7b093e8a85560eea419462535c47f2250d17fa5d95cf8fa0d851415a2b8022f5d25a26a4","ssdeep":"384:zhGQ0kze1xUJz6VlDa0YaVdfjPSvbSHn/HHqcXKGL3cfrk+Q:9GQ05I0Ya/PSvmnyG77V","tlshash":"6092ae0e32c770e964a7b198801f2615983619d5200aa8c5ff68f9c05694e7e33fefbd","first_seen":"2025-10-07T03:56:36.281363Z","last_seen":"2025-11-11T17:26:48.709203Z","times_seen":2,"resource_available":false,"data":null}},"time_used":610,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":412,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-a5a32970.4bfabe87.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:25.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-a5a32970.4bfabe87.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:25 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"4c61a673d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lbWJkg%2BPgw5LLZGW0eykHVC2%2FyZ%2F%2B3JREbw24v9d4E59J6ca1Um9Ajnhx4kRp3EPQDuCSlVc4A2g5l%2BcGXdGQl1u6Kc3EoEQ\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e9b0e93c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1698,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1698), with no line terminators","md5":"7858cf6959e1394afb8288345685327d","sha1":"9de9e53a6f32a844485f1814e1e39a0a05d91a32","sha256":"116f484152cdbbfdda2cb530f39562399672d4e49829f55a6896efebfad83e01","sha512":"9a7848be212af7c6a037de637a6fb87ac95362303007b5f84701cc88838770109481b88e4c15c119c727802fa7714527b57797e9772dd256aaa7dbbd4d5d981f","ssdeep":"","tlshash":"9b31761e70e7e4f8596b7054311b7a3450923cd4905748fef9b4ccc8a67899c2aba73c","first_seen":"2025-10-07T03:56:36.485471Z","last_seen":"2025-11-11T17:26:48.712752Z","times_seen":3,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":216,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jytnet.com/Index.asmx/GetSymbolsPageList","fqdn":"webapi.jytnet.com","domain":"jytnet.com","tld":"com"},"ip":{"addr":"172.67.182.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:17.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jytnet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 09:52:43 GMT","end":"Thu, 25 Dec 2025 10:48:40 GMT"},"fingerprint":{"sha1":"AB:5B:AD:9E:0C:EA:0E:A7:CF:A7:3B:CD:33:0C:92:E9:75:F6:DC:35","sha256":"A9:3E:E3:9B:86:46:2A:7B:3D:D4:5F:0A:1E:AB:B0:01:09:B2:28:87:D8:C8:CE:E5:5E:77:D2:35:2C:F1:2D:5F"}}},"request":{"raw":"POST /Index.asmx/GetSymbolsPageList HTTP/1.1\r\nHost: webapi.jytnet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 203\r\nOrigin: https://1w2m.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 17:26:18 GMT\r\ncontent-type: application/json;charset=utf-8\r\ncache-control: private, max-age=0\r\nserver: cloudflare\r\nx-aspnet-version: 4.0.30319\r\nx-powered-by: ASP.NET\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE,OPTIONS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HosizuEnfqjP2IOKvdPRoOUoA0vwIUA6VchqPiz9tYd9%2BO6rhy5pS6xpLfJMlm91fClD0rmfbDlZAYooBsnsnmECLbT1fD1m5IjvyE2%2BkQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 99cf7e680ba8712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62048,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with very long lines (62048), with no line terminators","md5":"f10b518300c1071e0f5dbd575440ce09","sha1":"e5f6f44b8c2b111649d7c250eb96775831c63cdb","sha256":"82294fd66598e54e7909f0730469d3448c8678d24645ec258d5e18cc65189f79","sha512":"80e341fbd0845ffa04399a88772a85098c44220fcc39ba128a2b5e9f067ab0972f9c64ea5a08563d9152650ed45626b2ea895709df65ece11bbd05122439c7b7","ssdeep":"1536:N85lbLyABi49MB6O9cRULOhaXcyY7HFROc+57bmY8:N8xBibAOQZacyY7A5PmY8","tlshash":"be5302b928d64b12bc407f3212ef659b154f8c12c92f4ffea24ac82008758774d79f9a","first_seen":"2025-11-11T17:26:48.713929Z","last_seen":"2025-11-11T17:26:48.713929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":39,"dns":0,"connect":1,"send":0,"wait":462,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-12689f14.2a792755.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:18.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-12689f14.2a792755.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:18 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"24b59d73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mq%2Bbqnrmv5HTKYqyTQ5fhdbOGQiQbfHrsYIV9Cr78A1bWRJ7k9rX0gQ6yS5979ZBvYlIn2HXXVF61cdiF48tqtRz%2FrYX46EL\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e6efa67c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":18799,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (18791), with no line terminators","md5":"622c42d57f4c6bf7817fea58416faaf9","sha1":"5ae879e99483584c6fab9c0ddd5df5422c6ee313","sha256":"efa763d53da371aedf47e33c2029a2423b21070498120f5d792ec570be1b9eb8","sha512":"da4f9effb3de2368da1cce334932d70b462f984d03b7ff94569f00f30a2ac64e9dd4282c60dbf5b93d9d1a1906695d07b28f8f019183f26df40546ae640a95a1","ssdeep":"192:lXVKLjoJhb/NfKC+KiXibgoNi6Y6ACZDnXmKUm5U8295T78:iQPdhv0QrNipoXm1WgXw","tlshash":"fd82a5767dac3d86ad37c95cb597fea44315e29b90410774bc23b524ce8b09733aa20a","first_seen":"2025-10-07T03:56:36.395399Z","last_seen":"2025-11-11T17:26:48.716517Z","times_seen":2,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-2530ebca.dd75b21b.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:18.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-2530ebca.dd75b21b.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:19 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ec9d9e73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1RwvaT9dT5Ud5B4oxPw1VsamMKDfnACKR1CV%2FEtVRKszzcM0n4LjZ3HKSpzXa%2FB2474Rqhnqo7IwIwfEWNvHgz0hHxeC%2B3ht\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e705abec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3511,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3511), with no line terminators","md5":"c8fb2f3bedbf626e9e475f15d3081d6a","sha1":"e84cc196e52887e4c02345b93b24f60e93597db9","sha256":"38c66b42e293635d99bab6621d3f14026a1ad6f8cb9c9a277851ca8154ad0c7d","sha512":"a332abd0ff6a68975c9986e4097ea7da34fc53cbb0825561ba2618875d3912363b6f4fa90e46687e80784b1427e8e532eab2269ea484dbf1d80501232c5b76e8","ssdeep":"","tlshash":"7a7112171281230aa027dd906be85795c266c973e81627fae561b724cfcff8707e9346","first_seen":"2025-10-07T03:56:36.439904Z","last_seen":"2025-11-11T17:26:48.719233Z","times_seen":3,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-26605602.1a7a6be3.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:18.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-26605602.1a7a6be3.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:19 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ec9d9e73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BSw4m%2FF%2BwrrEIEiyI3TeX%2FxiPd0%2F5Qj%2FymiQ7NmcHRpfdFqw7L1iR5kephn88Xuzga4dxO1cAxq%2BZmWoBMGke9suUh%2BLzjrS\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e707ac7c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2361,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2361), with no line terminators","md5":"99a9a551d935aac1e1d6f445d3e00225","sha1":"3b2d9df72c00180d6a501b078ab3506b389eee68","sha256":"e61a5e2a835f96b45ce70b4dca5ad3ebd2fe1519b974139b988305eeca3af9be","sha512":"b88da45f6fe69902e32f93a82ec27c6ca420617a6896842eb299060a7b61f624aaf9526dade99824a626a271e7f37d158e091497321dcaf27e9dd99677f6bb46","ssdeep":"","tlshash":"5841bca70281130ba037eda06bf99395c151c963b81226eaf155b625cfdfa8b06f6702","first_seen":"2025-10-07T03:56:36.361958Z","last_seen":"2025-11-11T17:26:48.720934Z","times_seen":3,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-6ec2b9d6.6519ec91.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:20.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-6ec2b9d6.6519ec91.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:21 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"57ea173d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bdpUaSfOMv5hX%2F59ecw%2BH3wT%2Bx0pW8WsH6k7%2BwB0PTReGM2QBV0cx3pKwRspI84bldXBMA6ECFaVreSvTh3XZhBg%2BMLnSLy1\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e7b8c95c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":4721,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4721), with no line terminators","md5":"299ef9ea00db6044927f7f595e049890","sha1":"0b1469f0d028b8b1b14b64db06e94060f8631aab","sha256":"5cb868fbcc3b87b6e6901ef91b690a67226bc4db312827c516b17387bffc5996","sha512":"4148596401c43d85b55569bc95ee29699007f6398eded011b89ca65d8ec1a1666a6336582898a1f3958338fecc97567574adf99dcb6ad06b655633aa257641e0","ssdeep":"48:DqIhWlS8QMnOlnlPX3WNsMlAyQ7JrSxVlrg5kACh56O+l0:eIr1rnWCXFrVIbl","tlshash":"eda1f11b0296271ee027dd505bf853d9c211c533e80227fee594ba25cfcbe8606e778a","first_seen":"2025-10-07T03:56:36.438052Z","last_seen":"2025-11-11T17:26:48.724399Z","times_seen":3,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-875906a4.22ae703d.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:21.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-875906a4.22ae703d.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:21 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"d612a673d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BpnomRXTB57n0masEoSWHHKh2XQehIv0NNZwF4ifYMqknlbLs1evYhGaF5mpzOInKfRtvxdJ%2BcB5%2B%2FYiKAXJhehRVepaiccg\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e80ddd8c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":13539,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13531), with no line terminators","md5":"3bbae4df7f53ee9daa06260c91ded0f2","sha1":"77272657a77e9e26c205cfc59380be2d25aae80c","sha256":"767daf5a28dbfd2f113c3892eb9aa6510aeef4f8a6a9daa102b06b97ab1c1da7","sha512":"bc8bd4d9904b0feb08035d75cf6b6ac75928a29bd1764f58731d32f62e82695998ca3472a8143734a72563bdb5ca17e0e82d5992f9089915e46f8fd70827c3ae","ssdeep":"96:W7UXKQwtoYIj9QBTcCOFefZ5cmRFTfFkmw8RFG1bi5P9mNcvRlAgj2TdF2AF/aM/:EQZjoJhmWr3R7dP0","tlshash":"7152fd16b98c351bb837c9fca9d0fa8641e56e0382115b64b561fb279f872833362f4d","first_seen":"2025-10-07T03:56:36.243945Z","last_seen":"2025-11-11T17:26:48.725414Z","times_seen":2,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-5e13fe5a.b6fa6e24.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:24.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-5e13fe5a.b6fa6e24.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:24 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"57ea173d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TCMxpvM23ldlqlLT0rfDipZ7kpms19jsDoimfQjHHnvj4yxMojtmD9%2Fnb8SAMbPRvb1il7%2BxswwEMJI7hdwjGZakREdlboeI\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e92dc80c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9157,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9157), with no line terminators","md5":"3e354610adbc1a60b1a880ae2b72fe9b","sha1":"1bd112ab50dbbfecaafca68f2ed3cf8e4e2ee241","sha256":"08d9780313265af4bc02cbf0329468a7903cc4bcd8c8de27c51791b92b66146f","sha512":"9ecf258e67d20ca7d1a8dc8c2daffb1454bd3f5486413edadbaef267ee6cf9e2f63032b54e3472a9e20d7f5a6cd6e94ff4c2ae84c52ca38480ba0012b760b9e8","ssdeep":"192:C6TWhZFr8bFFRBt1IS+46qZdAtIApxUCCJQ0fcFt17VE3:C6TnR1JH6WdAtIApqCCNOt17W3","tlshash":"29126d081187625f5afc22d5a01e0118e0ae29dbd088d54ebe75ccd232d8dbc3a79f6d","first_seen":"2025-10-07T03:56:36.385405Z","last_seen":"2025-11-11T17:26:48.72755Z","times_seen":2,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-509cf7ea.e0b7c78a.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:19.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-509cf7ea.e0b7c78a.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:20 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ba39f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tSDZALpT%2BVMXVd%2Bj3cE2xtg3JBq5BWKk5S9HNInosG3XFkuQdRLEtSTiCCZy0fYp7mceeaGDYwIR3N2xxmkDmSSgBQUgAXrw\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e76cbf7c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13586,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13578), with no line terminators","md5":"ece351c2000124f86b4c64857e3f51c7","sha1":"ff8137528831b7bebee03c6e80d4bdf0f3faf256","sha256":"0b44f4cca9629d8a7596f0396b18a7ec4f69e11501b85eb5cb131012d3c7b3a2","sha512":"332cb116ab634862e98c0f86a46b5b49ae21ea9452fc70844d0170a663e799d82bb50ed444490592e6687f0cde16594b9bd4f7ca9363b7eeb760b3c39b5ad15d","ssdeep":"96:Gq1yD8oXFrVIbPYoYIj9QBTcCOFefZ5cmRFTfFkm9ZzDz0TEXVxbMyIZIT5E7L/b:OXVK5joJhN9i0b3YxqRA","tlshash":"a3520f5273ca11066837c9d6a6c0e694a155a2f3d20a9f56b818ffe04f8b9c737b134f","first_seen":"2025-10-07T03:56:36.38289Z","last_seen":"2025-11-11T17:26:48.730563Z","times_seen":2,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-6756b30e.caae1fed.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:20.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-6756b30e.caae1fed.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:20 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"57ea173d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WwA6GYfpfyB%2BD2iJhLbxKOgCvQIJ45kMvlxb9UI2PYZYhZqfj4Unpt3lVH%2FWtgIqH7VTmgXbqzK1RK%2FyiD5IlcSA09yMT9r9\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e793c32c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":11030,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (11022), with no line terminators","md5":"d1ad0c1a31218bd96e4917c43cf39d77","sha1":"56a4e26680c1966e92c12318e8f193e16ca0fb8c","sha256":"734058a2b47f738416d2d2041d45d3741ea56eea3ddf3cc8e64547280f127d78","sha512":"e2a8c7f52ce49bd6d491b52cbf194d2e272ad8af0e58b8309b850f3134d57515d0b7cb238c365571c66b980e9895eccfe20e269c4f397e1fde80e85a554e13c2","ssdeep":"192:QjoJhQja8zomH5DfOfGfJfifrfxfxfbf6fKfcfBfvfXf/:VP98zNl","tlshash":"c9328551f2ac1433b537ce582482fe9fc33d6263a08506e1a465e5b77e872c735a3b89","first_seen":"2025-10-07T03:56:36.389784Z","last_seen":"2025-11-11T17:26:48.732916Z","times_seen":2,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":412,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jytnet.com/Index.asmx/GetSymbolsPageList","fqdn":"webapi.jytnet.com","domain":"jytnet.com","tld":"com"},"ip":{"addr":"104.21.51.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:29.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jytnet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 09:52:43 GMT","end":"Thu, 25 Dec 2025 10:48:40 GMT"},"fingerprint":{"sha1":"AB:5B:AD:9E:0C:EA:0E:A7:CF:A7:3B:CD:33:0C:92:E9:75:F6:DC:35","sha256":"A9:3E:E3:9B:86:46:2A:7B:3D:D4:5F:0A:1E:AB:B0:01:09:B2:28:87:D8:C8:CE:E5:5E:77:D2:35:2C:F1:2D:5F"}}},"request":{"raw":"POST /Index.asmx/GetSymbolsPageList HTTP/1.1\r\nHost: webapi.jytnet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 203\r\nOrigin: https://1w2m.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: private, max-age=0\r\ncontent-type: application/json;charset=utf-8\r\nserver: cloudflare\r\nx-aspnet-version: 4.0.30319\r\nx-powered-by: ASP.NET\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE,OPTIONS\r\ndate: Tue, 11 Nov 2025 17:26:29 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YBDH1QBEwOMkMra8MFxMsNyfpt%2BjJC4U1eKLUQBRHUzsgNwmmvGKIBNWV%2Fz%2BZWqJtOD%2F5L0BHJTSJnC8r%2FOsO5t%2B08stVj4SyfSqAUDWDg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 99cf7eb2a8695697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62048,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with very long lines (62048), with no line terminators","md5":"e0daadbb59608edfb7a09990bb1e3d4e","sha1":"66213bcecc6706cdcdd0be4febb6d4dad15c6653","sha256":"f2a6996cf1bdfec7eec5d66ac4a6120dcf2cdd62801cc02993f8c85224c58ccb","sha512":"706b3c666433cf4a61a848683b3758d3d81dafa9dd98373b98f21dc47360602c1c0d39581d7d13c57a2240f1161a1f554160549964f09f008cfeb13aa7ce4a29","ssdeep":"1536:/013+tnCUBlzQUVPIjMPlwrfgFgzmvQUEdMGSJj:/0138MkPIjMNioFgeadOx","tlshash":"6053026693bb855be96c8f20a444050b88c1cf94a53553f7e53428e7d3aa7ccac3a1fd","first_seen":"2025-11-11T17:26:48.735435Z","last_seen":"2025-11-11T17:26:48.735435Z","times_seen":1,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-3d4eae04.abf8abb9.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:19.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-3d4eae04.abf8abb9.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:19 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ba39f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oNBSYQgkV3eFew3M9Cu3hltq8UE4H5xF%2BxsVrU9%2Bax8JwHcXgpYm%2FlV2ID0Lmprngtn7GoD65%2FvSdQrvtzY8IPy%2BUuO2QhXW\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e744b77c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":13376,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13368), with no line terminators","md5":"88a4da4e4771ec5f4d40348e942b4ed7","sha1":"db0845bf62b4ee5652ca73709be16ac1b3282775","sha256":"7b4ab2de5f70eb6b775fcd200314841cbfded0b133a7599213d9906959d1a0a1","sha512":"9bf7ac0023fd6839e9a0f901288228b2591ba2b2e2c584b834c6fc5425ddc81919fc7158b4407bd3da5dd78647228394fa6823fcdcd1334f18409ffba5cc2d6b","ssdeep":"96:P9XFrVIbyoYIj9QBTcCOFefZ5cmRFTfFkmpyehqciHm9XuFc8MiB//78FxdFKZ20:lXVKLjoJhesF25NSw","tlshash":"ba520b52b2ac0e06ec37c9652fd0fa56c114a273d8833767e451ff364e8b29377aa605","first_seen":"2025-10-07T03:56:36.294034Z","last_seen":"2025-11-11T17:26:48.737539Z","times_seen":2,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-3b13f653.de52d5e1.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:23.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-3b13f653.de52d5e1.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:23 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ba39f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AazZyRtloJOoDg9gcEMDFqjjxnipY22nMIbB30ePYEpClf%2FhvTBhwtASzREEimupZNmOC%2Fg4Jj05CX4PR14jxntRjDIdGLzc\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e8cc97cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27860,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (27860), with no line terminators","md5":"408f3ebb8a3f8dc944f1b52f37dbe150","sha1":"30a580d1872f88812c2c269051a1426ab9c97339","sha256":"3ed3c1dcdd8e2fb70d7bd456018bf8b61472fe0eeb0bd18b3d7cdaf13fe00ee9","sha512":"820902a0b3f05693e7d3a6f8236666f3c8c20f972ad77a069dd03bb9b4e59c7249ab2cc06bfe6167c64203a78c5946668eee7e158ff259b2a3375d120c51b75a","ssdeep":"384:03sy/dUrztKzn6KG8xI29j1y6MWczf0Lmz:08HBKzn6QI29Jnozf0Ly","tlshash":"4ac2a886f1c1b42543e77164006f1609a237398ca84594ddfebae4d6ed6860ea03ff7d","first_seen":"2025-10-07T03:56:36.23133Z","last_seen":"2025-11-11T17:26:48.739605Z","times_seen":3,"resource_available":false,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jytnet.com/Index.asmx/GetSymbolsPageList","fqdn":"webapi.jytnet.com","domain":"jytnet.com","tld":"com"},"ip":{"addr":"104.21.51.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:23.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jytnet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 09:52:43 GMT","end":"Thu, 25 Dec 2025 10:48:40 GMT"},"fingerprint":{"sha1":"AB:5B:AD:9E:0C:EA:0E:A7:CF:A7:3B:CD:33:0C:92:E9:75:F6:DC:35","sha256":"A9:3E:E3:9B:86:46:2A:7B:3D:D4:5F:0A:1E:AB:B0:01:09:B2:28:87:D8:C8:CE:E5:5E:77:D2:35:2C:F1:2D:5F"}}},"request":{"raw":"POST /Index.asmx/GetSymbolsPageList HTTP/1.1\r\nHost: webapi.jytnet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 203\r\nOrigin: https://1w2m.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: private, max-age=0\r\ncontent-type: application/json;charset=utf-8\r\nserver: cloudflare\r\nx-aspnet-version: 4.0.30319\r\nx-powered-by: ASP.NET\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE,OPTIONS\r\ndate: Tue, 11 Nov 2025 17:26:23 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kupnhIdpnYxNhdXqRohTBRnAYiQEzPhLSrEs7upxtmEUVUKOJSzoQyhBawAeUM3f4%2BRqAW4y6KdDdjN%2FIkdYKY4L63z8L5ltUvb1FXAL%2Fw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 99cf7e8d2e515697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":62048,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with very long lines (62048), with no line terminators","md5":"95ea3125cd5995fd9a35f9295ad5a3ce","sha1":"8c53ef14d02d56d5400c374a9369f1e26f51318e","sha256":"b77a856d17dbc39e0d0d2eab0b28aee93c603b5532313705514b362bd7ef559e","sha512":"bc25821e4c98a1d6485a6e8fe39e514f392308f04a887765d3fb744cb34b38b76a34eda33cf0b1527f4b93164ddc22cbb19609616693590c681ba78c5e0c667d","ssdeep":"1536:/0Net8qoF7g5w4Ql/kQib0aTE1EIMcXXNirtLxhOFzsTqoPkl:/0kw749MkQyTTIMuirtdh7Tqoq","tlshash":"a5530171d908ccbea89d50e5c9e8c36cf8d71fa8501fa573415029eda0fa99244f4f64","first_seen":"2025-11-11T17:26:48.740533Z","last_seen":"2025-11-11T17:26:48.740533Z","times_seen":1,"resource_available":false,"data":null}},"time_used":646,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":244,"receive":402,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-74ef85a9.1bba7133.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:24.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-74ef85a9.1bba7133.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:25 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"26d7a273d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2BnVLZVbouuecuvLGdRE5Yp6ByzQ1%2BuII66wU6kWwH9v29Apk17QXP5Pb9Nr8rO2KC6XvRPb30CvXYHF%2FZ9rzf%2BC3LgvcOio\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e95ada6c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24796,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24796), with no line terminators","md5":"4ba9be2ba0d557f12690efeb23185182","sha1":"496134e46d0b1e99507fb746e89e8fa3584c037f","sha256":"c8921e836273582f9ce9f39c31aeed73c24aac3e561eb39063b52e4ebf7ba80b","sha512":"5eae378a6d408c6fdfddb79384a6b6e6d78a4a458104ce681f1bc4eef23d906aabe105404e5465a87f7b5c563769ffdfcd850da29e0179b53d84c3378b84119d","ssdeep":"384:RT3WBalxcVH+CxlkRaPHTJDq1+GEGbnZGynwt6AWKe290fx:ZaIm9D8HEG1Jww6e290J","tlshash":"c3b2c94bb2c2b41913ebf090006f150561372698a805d4ddbff9e8d1daa8a5e613ffbd","first_seen":"2025-10-07T03:56:36.393325Z","last_seen":"2025-11-11T17:26:48.742622Z","times_seen":3,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/app.7d894951.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:14.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/app.7d894951.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:15 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"f3b79873d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cP%2BfDJoJ4%2BY%2B7Z2SZRnIdQH7yrvls0ycvw4LrClKOnyqVZuECwzA39ZVSqKELi3r79p3xHidltrRqpq0%2FaJkzyv6gnXwdVDH\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 99cf7e576ef6c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":23004,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (22996), with no line terminators","md5":"e0a7f3a588d5dd5ec7839d29eb710d9c","sha1":"94fb0c98c60cde806fac1d40574672ff14b17ab6","sha256":"262190df15cc6b07514d42cf29f979c236cb3eac0a4d7b409556b09815f46708","sha512":"a06966e7db471b70e6eff75f282949c49210cbbce66766594bb41cffe2c04065f98d71d3eeac7000cd3480e3451f0900d9fa0cb844f19d8f632eef0dae6b5ddf","ssdeep":"384:YSAPyukoVD2uBIJkoVD2uBIJzIWvN/Swt2oVD2uBIL:YSAPN9ZY9ZevNtvZ6","tlshash":"eca2a6f2b78c9c47ed37d94668607e5d1c197643d1382f6cf95d60e43e8b152ba202e8","first_seen":"2025-10-07T03:56:36.360893Z","last_seen":"2025-11-11T17:26:48.744752Z","times_seen":2,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-89904b76.2f965567.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:21.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-89904b76.2f965567.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:21 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"d612a673d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pqQQHC2UfBOs13Owc7jnqgdz78PwRsHoHfRnU1AtqlljzfYt3Rcu20qeNp%2FpUgstb0arvbDvUToGc1oudTYLvIDOCCCe4LxO\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e822e50c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9452,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (9448), with no line terminators","md5":"13d67ef01460ac095b2887b682ca12f9","sha1":"6ed271b1f5641f00a34ab3fe48353e2ee0017d0b","sha256":"1cc03ea5bffacd9edfca3af0285a3023ae7174163ec011b2dae634fcb59172be","sha512":"dffdcbb110720e552861249aa187699e1403dd521ade30e0389319d56dc75aafef848f9a32840905f9e4636c2d64109d56321de5f66f3955cf052ad2b0487107","ssdeep":"96:P9XFrVIbhbMBa0SBB9Y3Vc3s/qbkKn63LbFoCFxT5leGCeGIeGceGPeG8eGRVeGT:lXVKdzL/OSiDkXW","tlshash":"ab12c853328c1e062c37cb5865b2aea6c1c3ef93e01b8e5cac7265a44f8f54733a1745","first_seen":"2025-10-07T03:56:36.4228Z","last_seen":"2025-11-11T17:26:48.747074Z","times_seen":2,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-45a2ccc6.3595069e.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:23.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-45a2ccc6.3595069e.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:24 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ba39f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZCBVi41RJxbgZ68zeVYy9PUgTcWpf11fsKFS1eGWTsah58PH79kUFge%2BfaTYsAbdPEk5M1d5GEWsBzO7mxyzNF%2BqlxsArDlx\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e8f3a19c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18345,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18345), with no line terminators","md5":"a744334bd93afc636006cb0dca141450","sha1":"d8cf2dff82938bd1e06aaf0e48802ebdf5557646","sha256":"3b52c30a9054d3e593aa57abf9c499b682648a2d98ee99292581e3f2462da2c1","sha512":"6ada51202d0d32b1483159c4e07f365b8286462a1ff18ef97b471d60cdfde6e6c659aa24804c536d23e7965adbf0f7c0b9ea4bc94ea410ca018ec12b9942c5e9","ssdeep":"384:m02b+dxcVHFO9C7dXnTHx55t6bWN290ur:yRdjz5wc2906","tlshash":"d882da8bb1c2b42953b7b090005f1905a5373988a805e4ddbef9e9c1ea7894e613ff7c","first_seen":"2025-10-07T03:56:36.409966Z","last_seen":"2025-11-11T17:26:48.749121Z","times_seen":2,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-481827c3.ee56cc6c.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:23.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-481827c3.ee56cc6c.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:24 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ba39f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jY1TTwMeJF0Cz87oKmQkMgzTvL3CFXAlLc%2Bs520y9%2FaDJ%2BFQ6pFLk7ThGsVcSq5nPE%2BZtmaEk%2BXX81tuzdUs%2BRqbb%2FuWz766\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e8f8a28c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11554,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11554), with no line terminators","md5":"0c0df417bdfd5bf953d8ca1b0d1f6a19","sha1":"64d320bf83a9b8e9031b46b0ea310c39b58901ba","sha256":"8b83b6835b61a0a5f012e0b8865ee7f635c6fc38ed416a997c0ef80380c3ea85","sha512":"8e4abde0237d4d0515c63a185c1d4b1e44274df4839df905991fcf81d0bf041ca77a607f2f0b794919ee3970ba95e8ed63c93c9e673f99406f2169027f3af0af","ssdeep":"192:+NL3zidjpdBDNI2IUVJYZElc++E2n+Nq2makC0ZP5b7ZwcVIvFRUMQ47xgw+ql2p:+BzidjpdHJM2mbC0ZP5b7ZwcVIvFRUPX","tlshash":"ab32d849b4c7f46e16b7b0a5101f2a0410632948a809c6dffdb9e5c58b64a9e313ff7d","first_seen":"2025-10-07T03:56:36.299474Z","last_seen":"2025-11-11T17:26:48.751149Z","times_seen":2,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-4ec5011c.512413cd.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:24.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-4ec5011c.512413cd.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:24 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ba39f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EH8b24odGa9RIZSiIIGldZwgtwbkElm8NnBDfe01sRRx0Z6iT%2Fq8wvyf2Jb0pAEDziSpMlw2vPAmrJqgBB3iXWjMWUTF7nX9\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e908a96c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82526,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"727f07f976da06724232272d33d6368b","sha1":"2a24fb383842f58f4684124679b35ee33e716376","sha256":"de34cb42458fe3c55dbc478679d685a9a0703049aeddbc66883d8c2c6f42fd2b","sha512":"b25f14db2316f3fe2be16fe95f807bfb3b7237530bff6f477d8b6047e8f9134bec4d89e09c0e0abf7803f53ab90e808852f5d423385175ebaf5927840fc085c8","ssdeep":"1536:dUG784w+Hk2PJSgLHvl8AHJvFtxm+T16J7JzItAo2G/zR:yG8KhPHNJJdm+x6J9zI2o2uzR","tlshash":"5f83af5a75c67835197b70e4001f2a04587719cda045a0cebbb8e9d5aae8e2c363ff7c","first_seen":"2025-10-07T03:56:36.251852Z","last_seen":"2025-11-11T17:26:48.752999Z","times_seen":2,"resource_available":false,"data":null}},"time_used":567,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":196,"receive":371,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-2d20fe32.cadb7208.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:16.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-2d20fe32.cadb7208.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\naccept-ranges: bytes\r\netag: \"80fe3673d334dc1:0\"\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:17 GMT\r\ncontent-length: 35486\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lzpaq%2BzGZBqhccWESa%2F8%2F%2BYsy6DUg4jIv6dhU8cdyA%2B7oVeQQoCWJ9Q1jwZZ1aiLGqfFCUxy7txJFWsrXl55dG8R4LVkrMaQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 99cf7e62586cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":136982,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"acb0841c1826551f114c701f4e3bd917","sha1":"fed9d8395f6b8e1b7f48e353161fbdf6fdcd506f","sha256":"43a2ac7ad143d6a5732839195a613da41839c9385daa894ae8425366d64f9d1e","sha512":"97a57d8c07ae480f7ae14c2ffeb610d646b045171b601aaed617eefbeb27f1878ab625beeaa7dd5d7042061952c8f06457e4fb84e7e2d04b3dd6d017064e1bec","ssdeep":"1536:lFvfRcGiHFFFpyEO8peZjZeSfZK81lNmIywWumR2s/TUwwpfPH1OKCPVyfhyTXnP:bfRgw8petfYRNuzIUwwPH1OKCPVyYLOE","tlshash":"6dd31959721075a282fb26cb53a8c610a3b64855b809c5e871bd4c6b6d7ec5803feffc","first_seen":"2025-10-07T03:56:36.318434Z","last_seen":"2025-11-11T17:26:48.619028Z","times_seen":3,"resource_available":true,"data":null}},"time_used":587,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":193,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.jytnet.com/Resource/RotateImage/20250927/eaad6a96476f4fca89dc6bd7f1b8599a.png","fqdn":"wap.jytnet.com","domain":"jytnet.com","tld":"com"},"ip":{"addr":"104.21.51.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:18.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jytnet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 09:52:43 GMT","end":"Thu, 25 Dec 2025 10:48:40 GMT"},"fingerprint":{"sha1":"AB:5B:AD:9E:0C:EA:0E:A7:CF:A7:3B:CD:33:0C:92:E9:75:F6:DC:35","sha256":"A9:3E:E3:9B:86:46:2A:7B:3D:D4:5F:0A:1E:AB:B0:01:09:B2:28:87:D8:C8:CE:E5:5E:77:D2:35:2C:F1:2D:5F"}}},"request":{"raw":"GET /Resource/RotateImage/20250927/eaad6a96476f4fca89dc6bd7f1b8599a.png HTTP/1.1\r\nHost: wap.jytnet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\nlast-modified: Sat, 27 Sep 2025 10:54:48 GMT\r\naccept-ranges: bytes\r\netag: \"cefa83249d2fdc1:0\"\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:18 GMT\r\ncontent-length: 673627\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eAOXtRszzaUHRUBhAkbmJ6H2v9Weo8Llur45a1z2ohFiiKptXbMBP8FTXSK6kSeqIblHXop%2BjTD%2BWm5u%2Ff6%2FJnMoqIbPGFfbhdEikg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 99cf7e6b7c0e5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":673627,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1065 x 474, 8-bit/color RGBA, non-interlaced","md5":"e32339390052c1030c1d1d76fb850d02","sha1":"41e3e322414be42d552627ba38b8a98b38ac1ad4","sha256":"a4a34e4e7ab51a86448185e987fb1bf790cee6d14087b4373476e4667d509c01","sha512":"b10083dbbe3a6676debc26c8e90214346abd3b71f817382dd9d0d61c5820bd43cff6160c87902c05a02b0a5347bbfe4ff6a07f0dd103d99586a18fdf9fac0aec","ssdeep":"12288:+OWQR3ofg2C+7yUtUbT3AqFGdZCHAWWR/r2jolg6G5w9koFI7VELwSJSf+1ZPv:+O5qg2C+2f3FgTJ7RKolg6sw5FI7+LwW","tlshash":"6ce42384b2838e7d05e12a23ac627ab99cd74cd55bb093c53653c18972bedec4844ff4","first_seen":"2025-10-07T03:56:36.462193Z","last_seen":"2025-11-11T17:26:48.754751Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3711,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":3286,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-15466a2c.db587a0e.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:18.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-15466a2c.db587a0e.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:18 GMT\r\ncontent-encoding: br\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"24b59d73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qt4xod6kaUNXMr%2FcLLEdn%2BPeFBe%2BHEt1crgJXvY9T6iJP7pMWpEgsk%2Blxl2TZE9dkNeXn%2BG2AIUthBwZCzQT4dPZRJjqkbKx\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e6efa69c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":3748,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3748), with no line terminators","md5":"c3f219b16b5c87898aa19249156f9770","sha1":"9a622e9a635e245f0f7363cbcb9e33d289e502bc","sha256":"b3b3c3aa53252f0fecd1fb9670b1446ac84aa89b714c395b43f5ad2b0a7ba522","sha512":"6fe1e72cc4c6d4c74baed9ea527f8e319e526e3eda45b3ff94a83b29c365f3e4f656cf531d7d61f980fad593874bd3fb4dee4385bffb38fa9913446cc669ea8d","ssdeep":"","tlshash":"b071521791c91238f28beda536d007e3f622d103a5124277e2a7741dcfcb2e61687b5a","first_seen":"2025-10-07T03:56:36.289894Z","last_seen":"2025-11-11T17:26:48.632993Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-204a289b.ab4ddaa8.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:18.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-204a289b.ab4ddaa8.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:18 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ec9d9e73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CqyPbqytQm7UNkPfAiGScLYLB4wjL0pBAGAxe0A4EwGR4E8Na9GdshcBurZPtK7OQh9%2BDY4BnUIHb7K7%2F0286J96dqI4k%2FwU\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e6f2a74c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8655,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (8651), with no line terminators","md5":"e2795e90557312941c0c4bd6339ec7af","sha1":"5fa89f3c2278679146f4146614c58e19b08e9cf2","sha256":"f63d0ddc4c7e0632555a7259d08615c211cf817fc9d044b22ed32c55cafbeef0","sha512":"2ee83f97c612a6c31ed8409dc0e1ffedcfa0332871b6002a6060c55d6454aeb769d4069301bea8dbb64c5c0aa2abe1cf0dc0af604f9c98ee3c92f13dc3eae079","ssdeep":"96:VRpvc5Hehv9mVc9Nok7SXNFewFPUDH/V3:5htTt","tlshash":"a10264d17d9c1f112c33fb942c90aa54112973f3bc3d1ea4a853a667ce8b277b852a4d","first_seen":"2025-10-07T03:56:36.314742Z","last_seen":"2025-11-11T17:26:48.756339Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-32e28c06.4a5503ae.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:23.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-32e28c06.4a5503ae.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:23 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ba39f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hjnKt5ZU2n4iqmguE%2BOZvuk81%2BUV7tniPeycVdqxZE%2BdXx30drVhnfeqGbl3IGsW%2F6R43pbcsbA1aA697ip4IyG1xZIa0CAv\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e8cc97bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10817,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10817), with no line terminators","md5":"4127ba5f7c23932e750d37675ee906e5","sha1":"2be8d574561820f97a89bd3a86bd6a5e2fa52906","sha256":"290d0d182d17aa3ac38ca9a8d51fdac89d43502d9ae77202b08dba30ea777062","sha512":"85d04abdc5333662cd454d89542e4956b8d5921ab6b81f57415ec8784e5e688e4508f4f5b6ebea7485b4911fcb3b1026599b1fc295c3d84373b68f4dde742ab0","ssdeep":"192:VvcYAlV2jNcxz3xqDNV5SuMO5SURztvtL:VvcYpcxz3xqDrY9O5JRztp","tlshash":"ab22f95b75c7645c676bf050502f2400506a1b986401c8cfbff8e9e9d6a4afc2a3e7be","first_seen":"2025-10-07T03:56:36.249977Z","last_seen":"2025-11-11T17:26:48.758424Z","times_seen":3,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-54c2066b.b87e496c.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:24.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-54c2066b.b87e496c.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:24 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"57ea173d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ynxkFClVi4128JRjcVNmOwrxSMkJ25jCKE7F5Gvx54O70%2FW1JWKilHQSVFiQRW037h5ChtrJ0HIrF3hfLhxVHsywM4EIEtIN\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e90faf0c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94781,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"87e1bcd032f2c70eedddd28d69b30caf","sha1":"19215434e7d8f95e4c798098a1ddf4398891590a","sha256":"9d01f0980684044299610d5547daa4e339d674658545a7fe606eda77568ab00c","sha512":"e7a53b70335ac0198655d1dd7d35e0cc6b8e988d6f140723401a480d94128275a1f5a43c0b376738645ed2ef9d6b17c92ae20728f61f1d2b2f085190438ec69b","ssdeep":"1536:kOw+H8U2GzmYrDjBRZf8yZ6pf9/ncy9v1tO+j/6PgJ:kTK1mYrBYykpfqM5/wgJ","tlshash":"2a937e1eb1c3f439497a6064501f2901a0b62ec8f41990debbb4e9d167d8e9c263ef7d","first_seen":"2025-10-07T03:56:36.301204Z","last_seen":"2025-11-11T17:26:48.759221Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1006,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":416,"receive":590,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.jytnet.com/Resource/RotateImage/20250814/d2a5968b33a948b19cf40ce48d72f935.jpg","fqdn":"wap.jytnet.com","domain":"jytnet.com","tld":"com"},"ip":{"addr":"104.21.51.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:18.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jytnet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 09:52:43 GMT","end":"Thu, 25 Dec 2025 10:48:40 GMT"},"fingerprint":{"sha1":"AB:5B:AD:9E:0C:EA:0E:A7:CF:A7:3B:CD:33:0C:92:E9:75:F6:DC:35","sha256":"A9:3E:E3:9B:86:46:2A:7B:3D:D4:5F:0A:1E:AB:B0:01:09:B2:28:87:D8:C8:CE:E5:5E:77:D2:35:2C:F1:2D:5F"}}},"request":{"raw":"GET /Resource/RotateImage/20250814/d2a5968b33a948b19cf40ce48d72f935.jpg HTTP/1.1\r\nHost: wap.jytnet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 14 Aug 2025 07:45:38 GMT\r\naccept-ranges: bytes\r\netag: \"83a23e6defcdc1:0\"\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:18 GMT\r\ncontent-length: 299747\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CypHeImuvf%2BH8ujXSN%2Fb29Q8UZkzsswDJ9RA%2F2zLyEOFeSquUMIJKtf9HhXzSDZHsPhFSV3hZDFnse3UZ2tLIBCJP8lJ52PGEpWTQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 99cf7e6b8c115697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":299747,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1280x510, components 3","md5":"b55d777a67651cb4853c0d4810e53546","sha1":"729bae48b3ae98f2dbe33f50228e911e00959e74","sha256":"6c4671c9f29cac53bc13a0745321a7efa7f5ca786a1a0401472d70fa5ea02946","sha512":"952158d5ce2e9b6c125cca561d3c9e2e8b7b97f7638122452477db827d3bb50529cbf0038809dbe6e415794804154a1810b24895c7bd5680e8c45de42da9142d","ssdeep":"6144:Qqk2jMgofoi/aT4bf26/7+V1IrSZEcLYe8hipz/uOsy8qakV2lAc:xkf3SAOCe6SZE8Qipz/uOx8qakV2lAc","tlshash":"395401bbcbd15c120fb1d366a007d940748807ae7daa92064a44b2bcedf7c0e76875d7","first_seen":"2025-10-07T03:56:36.458906Z","last_seen":"2025-11-11T17:26:48.760918Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":961,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-3dee8786.0043af7a.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:19.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-3dee8786.0043af7a.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:19 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ba39f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gLK0N33TvjxnE4QGjb%2FX8pG3qv7uJqei1OJdNn5JZj%2BXJps56%2BIdgZ63qmNyuIf0zNULarsFRqjzm03yZusdR%2FxbebZmZzoN\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e744b78c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10650,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (10642), with no line terminators","md5":"d246e039c5a3716572df269dfd5d2744","sha1":"5e258d3cd961a3b7e72323dbd36ae6fc49e10b6d","sha256":"ad356a600a8d98aba8a2133b791a3d3da0c2a5b977f0c4f59a16a9f52233d80b","sha512":"d7083df20a583c093ac31460316e6541dd33f210d4d18dae0300ba75023cf763bc7afe38cdedd4c8b5000a7cbc24564dd244acf48cdd451122574106767da573","ssdeep":"96:VYoYIj9QBTcCOFefZ5cmRFTfFkmRPu1Zpoyud5NN9mJcv3MqvIPXFgiFVaEBmtdR:TjoJhea9Nr/D","tlshash":"3322c776f28c15376cb7c66428f6fbe4d325225b80417f60a821e4671ecb387377a689","first_seen":"2025-10-07T03:56:36.366085Z","last_seen":"2025-11-11T17:26:48.762748Z","times_seen":2,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-6ec2b9d6.40049904.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:24.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-6ec2b9d6.40049904.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:25 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"57ea173d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K0gSWvATfMjwFw5By83WS9K5ClciUXQKxDHtUC1foFB5Kp6IdjcpEcvmidAe6HZGYuahbEbfTXlUmPpbFt6V0zarutJe%2BwAf\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e943d5dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":20386,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20386), with no line terminators","md5":"7399a618f00636817dc50e766f959c0a","sha1":"8d662bc91d8a62725c1d72c4d5acaff3115274b3","sha256":"f4245d36b7102b5830a2a02484c824bfef720f6d0ee69cb6e0c6eced3ffbcd87","sha512":"6173d34775256216db36d37aae2c956ee31b2ebdddc03b2aad8260722b0b49b8d525e1b2b6226115f51ca4336d0cd92b02c575d1d9712b9e20d73fdee0291acd","ssdeep":"384:Vk6ZuqwciW7jSxE4CRP5b7+uJzKf66Z6nWgzf0C0/:26Zu7ciW7jk0PN7+QzD6ENzf0CI","tlshash":"cc92b78bb2c1b41d42ebb06c116f1506b13a7888b42594dcbbb9ead1e95cd0d603bf7c","first_seen":"2025-10-07T03:56:36.23542Z","last_seen":"2025-11-11T17:26:48.764159Z","times_seen":3,"resource_available":false,"data":null}},"time_used":592,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-89904b76.c11570d9.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:25.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-89904b76.c11570d9.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:25 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"d612a673d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vJk6rrsAkFN2pcYn0r6vWsNniU17jqdCudRxaTFZm2hSd2PW7TtHohulSy8y5VM9pFWXHAMYSD%2BXgPVVVKdTDcLaCvGg4PRF\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e9a4e64c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18557,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18557), with no line terminators","md5":"7a04d6529a69d829520af27e0d103a39","sha1":"9553d071941c390d9537c29bd1cb55a700a0a00d","sha256":"42e687f687af46855eef365b5aca7f8b8fd7d81def925cc6ec0c47c03b6ec0dc","sha512":"d4800b2e5b5121f646396daabe992d44686a6ffa154314719828debd43c8f78378fbad3c0a88014acdef6d4573b8e7c78fc0ce3070c20bc51fd30b5dff4c6c9c","ssdeep":"384:QTgOb+dXVszFyVRCaPfSkSxUrv4jlT+HiZ5Z6JWN290rd:rhdhCGvMlS65Eq290x","tlshash":"8182c98bb1c2b42913a7b095006f1909a5373988f805e4ddbef9e5c1da6894e613ff7c","first_seen":"2025-10-07T03:56:36.467239Z","last_seen":"2025-11-11T17:26:48.764871Z","times_seen":2,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-063a5dd6.dcd5e872.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:22.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-063a5dd6.dcd5e872.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\naccept-ranges: bytes\r\netag: \"80fe3673d334dc1:0\"\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:22 GMT\r\ncontent-length: 3008\r\nage: 5\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GFkrTJfBCEV%2FEalIYmMCpFwUbiEleJZ1iti3OplGrKG05BYQlb87lWRz0UA1c1AteB3hZNMhNa%2BykUBDhS%2FLYdOJ1paMb8I3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e85ffbcc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":11665,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11665), with no line terminators","md5":"2beb7a514109cbf3a2a5327d48a27699","sha1":"037b14705e758502db01dad993aea8daa3cc364b","sha256":"86638e262927f3bb41c1029c1a354128f55daba2f3485c1b309f5135a873bcc3","sha512":"0b7588485d3628b989dda3a8bc95eea4c16fe36638f62265af9dd3b4b3bdf1edf0f80918fe79ee3cf6376af0097f225ec5ec98523f8cdf77801817b4cc000bf7","ssdeep":"192:KpPZ1pAfRk+UzBCZWbYpG6ROpJFSoYbLl:Kr1pA5kLc4bJ6ROpJF9YbLl","tlshash":"d63215d5b5c2e0e1d145311f48af2729a6a9f680f81b28e18f4264ca7f60d3c7561feb","first_seen":"2025-10-07T03:56:36.257216Z","last_seen":"2025-11-11T17:26:48.656195Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-3dee8786.24643439.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:23.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-3dee8786.24643439.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:23 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ba39f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0FKOZO0AFHn0UEO2iSW0%2BFzziBuJ4PmdH9kz%2FKIgZbBbwNW78IcaeOwqoU8ZwjXc2FUtvYMhBlfT5TCk3gFGgU1blNXQcc2v\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e8e29dec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6802,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6802), with no line terminators","md5":"15302d2ed1c8f8d556d31d8ad0a02593","sha1":"6c8ae29f2061d91489cf207014949e9206d8fd9b","sha256":"542a462766a9e04b6f0ddfd1808993d2b8dc24fce9477821f45a548427ea4ca8","sha512":"e97b2b929b667b31ef18d17c7766285af01d3372dfdbbd715db6d295712fc53b1ad73a645a324977949ea8b3178cd51529b8acbc41757776373496165ec3640f","ssdeep":"96:gSVIMSEI0DvV9HHW/VfMMf9XsbLRA45QeBXK0BFFeXEDIbgJ6sb:gSVIWDa/Vn9XsbdQe02cUDIUIG","tlshash":"65e10a1b71c7b06a06ff71a4801f191914731ac8705a94cebf2de4d0daa4bad216febd","first_seen":"2025-10-07T03:56:36.369628Z","last_seen":"2025-11-11T17:26:48.766287Z","times_seen":2,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-6756b30e.c278dd06.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:24.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-6756b30e.c278dd06.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:24 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"57ea173d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rNp%2Ba5PPtfEk9cyf7X1AidRoe4%2BWe3x2yuqFHgkcNENb6EOnsgDSp4UjzyY2CEIvZUBi6vnyBBeG6E%2F35Pm63cX6IA16w7n2\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e92ec82c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":11362,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11362), with no line terminators","md5":"abb769b22158ea1cbc6f4bd7e06562a5","sha1":"e09bba4226eda65d94feec86bafd46057a0eaf53","sha256":"86167cf3c9058d9314c4ae0500e98e13addd9e4c5e99d57f7f47c8e38e0ac092","sha512":"d9059550e0f2bfa44ccc4a134e99bb6ae072b1e1cedc76e66d70cdc9f282c08657b6b6a4d55abdaf33113962ad45ec704d9600e5a3ef445390265ec7dcd32b15","ssdeep":"192:XqAlf5S920p9scNcxzpw+xeWMO5SURztvte:XqeY7cxzpw+xSO5JRztc","tlshash":"c932f85a71c7a81d676bf050502f1400606a1b986401c8cbbff8e9e9a5b4dfd293f7be","first_seen":"2025-10-07T03:56:36.456705Z","last_seen":"2025-11-11T17:26:48.767814Z","times_seen":3,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-063a5dd6.42e1b85f.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:18.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-063a5dd6.42e1b85f.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:18 GMT\r\ncontent-encoding: br\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"2e859a73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O2Ind0ueeqgDsmIutE8mLWgZ5aF8olGxodkXQtGq5dBlzaNDNOS7Sj%2BaOK3XgtZornT4YQL%2By1oZ1QX0T9st2FrjAj9l1O%2BC\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e6b39c5c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1064,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1064), with no line terminators","md5":"410123a1d1e42f89b81c369b67516959","sha1":"556fe1efecb89a7563d884487eb43e40d59c766b","sha256":"8bdc2551564e4ec3c4e082d2680dbe005dd1d92618eefc3e59122a1a03049f18","sha512":"c949430942a1fb6f055f5fc5ae5c278a8f6291600b048de0ebb3425c19da8536f1c5f365edefaee3441a0ecd93542727ad7eaab99f020f2ede605acf59989e8b","ssdeep":"","tlshash":"0f11600241912208a417bc5adfe0d1d18370c412576762d5fca0e525dbcb7d32765b96","first_seen":"2023-05-28T17:39:02Z","last_seen":"2025-11-11T17:26:48.672161Z","times_seen":5,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-6ee46af0.f6201a28.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:20.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-6ee46af0.f6201a28.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:21 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"77cca173d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3d2Kr5g9QFP5b80Ul5w3x8PjKQdEEkwv87lqSNjIpjlUrkg4KWjdRWg1jQyXkkvNvCDG7XBpUOPtdl63vtnuz%2BNs13J42iGj\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e7beca7c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37263,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (37259), with no line terminators","md5":"9dbe7f3cc811889175832cc702d08de2","sha1":"7bf12b2b86fce9a5e9a6015f80005fbf942b6680","sha256":"54500d4c1b6d9a8ee91016a2d632a1254061bff6ce98a804880ed2eb5310e71e","sha512":"de5ceed3abc31b1a66c73f3bb9cfde1718b54e653cfadfaaf1cbee8badef5f2aa61dcbb4c67152f570098abc30dc917bd3be51a14880909767902724d4bb90ed","ssdeep":"192:KXVKZT5LTQdtjSJxXlA6i9aVI3jMQ2ZDCt5R+iLVdim+kDoe7wcOQIWDtIf0jnJw:zHiSr1AF3j0ZD4/Lim+vulDtIfUnJ5i","tlshash":"54f2b6277f4e7d469327d9c097ccd9e504ec631b764106b86057a7928e8b23a63d33e8","first_seen":"2025-10-07T03:56:36.279363Z","last_seen":"2025-11-11T17:26:48.768461Z","times_seen":2,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-7f76c49b.f9397778.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:21.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-7f76c49b.f9397778.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:21 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"f786a473d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lQgGXXzahrbSdBI3D4lsDgt2OifXNkm4xF8Og1Ta%2F0Tk1MxONfz5jOFYHJY5pLSXVBTr8Cc2EDJGZYSJ2Pwxg1YRrgGIg4cc\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e7ffdb4c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":13252,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13244), with no line terminators","md5":"d9090ad48d0b0cec4a56bdf8659d2bbb","sha1":"5fb8d5f657f575460f79796195dab6be7695261e","sha256":"636675c6c2da075519d72af45bfebbd179b51a08a6660af8a2a81302b86e0517","sha512":"906ebbdf9da989beba883642504c3b3601bc3269572549e01ccc95e95fc67a2f8d0c2132cbc8cf6f6690b3b3506d92a54b236b651dff628dcb5fe0919c41e921","ssdeep":"96:KXFrVIbPYoYIj9QBTcCOFefZ5cmRFTfFkmIueUS/f+He9oXxc00azq+Z3DXPwFBJ:KXVK5joJhPEjq30azXDWR","tlshash":"4d522d7a72cc111632b3cbe72995eb94c995a3b3902127a4b42775244f8b1cfb5e130f","first_seen":"2025-10-07T03:56:36.463471Z","last_seen":"2025-11-11T17:26:48.769739Z","times_seen":2,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-987a068a.5bf744c7.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:21.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-987a068a.5bf744c7.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:22 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"4c61a673d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h%2FbSd8CcQcLlpKGyGffV8mR4xhIXeBwJjaRinCtG0hpXMhwdubm8bSadirwQYsTuQZQqOToNnYyA9gRCgkXc3d25N5sKDc3s\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e825ea3c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13933,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13921), with no line terminators","md5":"feb2c094aa8e655a0213c663c492046c","sha1":"be03f0429a550239ed45bb65636974fc79f5d37a","sha256":"47986063eee20e470096f51e6eb9836f4fef797e231caa080d3c6d2e90622a61","sha512":"55c116f52eb2565a7219266c80971f3d0a78244b408cfac1806f8d109366d78fe070711843263eeb54f4b204adb8f5a03b9b31de1647def2feb518bdc81cb1a1","ssdeep":"192:RjkJhcGESaE4EqwsYpNm32IWD0oi3XXIWDbynpa:2PcGESaE454mGlD0oCXlDb9","tlshash":"20528262b2ac1427343fc96824f2fb99212763d343030b77bb3675661e6b1a33591e79","first_seen":"2025-10-07T03:56:36.246167Z","last_seen":"2025-11-11T17:26:48.771271Z","times_seen":2,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-af8a252a.5369f098.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:21.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-af8a252a.5369f098.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:22 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"caafa673d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qviI9GoHCqGSBGkpoHKrd4RDep5YbOw%2B%2BST6yXr4z8Y6ZlptXQtny8Mj8GloexOLX3NLX4bk2Mn7ivQNBl5V%2F%2Fz6Q3yEmTVT\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e835f0cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":6487,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (6483), with no line terminators","md5":"560fd4de0cf8318c215c5db402d9cf34","sha1":"b1990c3ac3350138d5f599c16116f9c880a28c5a","sha256":"2f6a23aa7adb4ef35e761b07768ec0edb9d04aeb72c46d059183facafa593b1e","sha512":"d642a911c3e5cea2f6bf75522e837d0eb921a8b0daf2732711b8c2967ef21117d29e420ee1536bea036f2aa7292e118139d801a926d7de3d3b192d69e2a53336","ssdeep":"48:oMNO4JOh20ni7VujKQk9ud8UcNf7p/VlIRNrqU2DDIzYyBf9fFMWFNmNw7t:z/8hniBuWt9qtcrbU2HIjfFMWFNFt","tlshash":"ded1f951f28ecb16353fc4e8f487abd541a633e38111d224a867a76c2d8b282337375e","first_seen":"2025-10-07T03:56:36.372035Z","last_seen":"2025-11-11T17:26:48.772706Z","times_seen":2,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-6fdc172e.a139c1c1.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:24.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-6fdc172e.a139c1c1.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:24 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"75f3a173d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UYz5PW7IUoWteQLuGF3dH%2FgGMhJVDN0Gdn0FypCNVX%2FkyWtJcFqUEdxxlN9dtceGvys5FBsQBnivB%2FR07g8KJBZ1MycBbaXG\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e943d5fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27900,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (27900), with no line terminators","md5":"52d89bd0485c4715dd99492b016fd181","sha1":"0561cc780730215f6008fdf0982f1ed0986ba988","sha256":"ef2727a1a42e4da23a4998af8e8584e52a9f5e31108645a1feb57e0624d20974","sha512":"96ad8e517d3b596bbd739cfc99387db0552cab84dee1dcffd0914f3c9db73083fc275905bb754e8cc1ea050e795297ccbf9f9be98a1bd4fc784f43cdb32582d9","ssdeep":"384:eWourDb4hS1saiFRtvejiZ05CamMaJZ9fMrOaw5/nf1KmDCtqlqaaDx:eQ0hisrejiZ0akI5Pf1KuCtaqaS","tlshash":"32c26d40b08be56e996e545060be250009b13edcb40dc4c6f97cedf6aa5ac78353bbbd","first_seen":"2025-10-07T03:56:36.43697Z","last_seen":"2025-11-11T17:26:48.774511Z","times_seen":3,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-b502d73c.84524c79.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:25.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-b502d73c.84524c79.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:26 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"90eba773d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bCD3pxpJhXM4a4NkQJTSP7b8n7u79lkFCUtPaMT0czZaiBvV40x2t%2BHS7b%2Bl6p32ahF1jYSlomjuRmQ9OHnejb000%2FB69Ycp\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e9bfec6c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8612,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8612), with no line terminators","md5":"17936fa74366f3d0e343b0d3d6c88c48","sha1":"9b144c28abccf7073aa30724fb53b031233adf67","sha256":"e25f4d7144871115a6ec7bcdbcfefffc726e256f000e59ce642f06b4fa0c726d","sha512":"55e4508b058c0e74881a12f84df739166bbcb7e33ea31339aa513b8074d9f1e471c5bfb526001389b20999ac2c90955dbb737c8b7cf7d246605f1be327f2438f","ssdeep":"96:12ZaK62sq6IqV8KVhVQdffR9De8YM7E5O+w7dkcV1v9cO3kGxzYuIbBzyq52ucSQ:yiOhVdfrn7E5O97dkcV1v9cUk0DGyqNq","tlshash":"0d02e80a318fa51e4ab670a4201e182424633d95f44ac6ddbeb0c4d06bd8d6d23bff7e","first_seen":"2025-10-07T03:56:36.378197Z","last_seen":"2025-11-11T17:26:48.775163Z","times_seen":2,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-1014a0b7.145caae2.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:18.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-1014a0b7.145caae2.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:18 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"24b59d73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MmuWJDrlUvIbLh0U6EZoLC5OXXcEokC52qhREfUuauoZf0%2BVXtMwnM4dVwt68%2B3KMs1034O5OYLi%2FOpe4WPpDb9MO5czP3J%2F\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e6b59ccc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":13181,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13173), with no line terminators","md5":"c3cafc96bd1f2c15411867af5baab9e7","sha1":"73b3f7387b0087311639d79fd4471bc5d8744890","sha256":"ae4058b6bf31bed9c75af1791dc0c83acb1e6508370cc5a70f318b8b8887c153","sha512":"40edffdcdbe47334221eae01365b45099f7d1dfc4eaeb4441715cf929e58daf50a750485a42cffa90b3e111bdc1aad18edf2990fa68031edad73707e2b28c786","ssdeep":"96:Xd9XFrVIbPYoYIj9QBTcCOFefZ5cmRFTfFkmoZ9bcR91ahh9xstNtc7l3tn0a3sC:7XVK5joJh+agfd3trv","tlshash":"69424f5276ac12a63037cd542eb4fa948115bf9bd28d1374b66076308fabdc337a2e4d","first_seen":"2025-10-07T03:56:36.37951Z","last_seen":"2025-11-11T17:26:48.776849Z","times_seen":2,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-863aee5e.db78cefc.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:21.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-863aee5e.db78cefc.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:21 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ff75a573d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3OPB6nDowQf0e3BvQeKHF9od6PQ3PpUTqHQjvGXRXRqb%2F18EoO6eNI%2BtBAKXTP7gMDJeyf7rR6D21jYA4Qu6MvzcuYnRwEQv\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e80cdd4c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10717,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (10705), with no line terminators","md5":"ddb4e1b1b1def44b6aaff056c9ba9e5c","sha1":"91b9cdc9542153ba21a4b989b7cd052d1ebdf097","sha256":"6b9531d8465f9b096917172b3f9be905aa594884b70efbb0a81a5ce17f5bf90a","sha512":"c0e0ce46f26b007a79631b9a3ebecf2705cdafa4094d5ccc7bc2a14dcaae0001ed9bf2e54e79d3a9837ba4f5c0552ffc498cc86c11e3b8fa9ddc2790acd6a246","ssdeep":"96:soYIj9QW8TcCOFefZ5cmRFTfFkmno+zOF8quHlEMy96y4cwI+9rzDgFVJFWLdvjD:RjkJh5x6MyfkRXBj3lZ","tlshash":"b022c650bdcccc957533c97668a2fe9458392f63a0b0b760a861f9743e872873793e49","first_seen":"2025-10-07T03:56:36.347139Z","last_seen":"2025-11-11T17:26:48.778265Z","times_seen":2,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-04102d03.af1b19a9.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:22.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-04102d03.af1b19a9.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:22 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"2e859a73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=17IyFEOQqpx1V1xykiV3f0qCZonE%2FnqvfBD5EBbcNsiRQmt0sHyFADdQtKKTIbwB6w%2B31EFQH%2BQzy0fLU1aosMAInNUiSvat\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e856f96c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18594,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18594), with no line terminators","md5":"71eae7015c1be8ef16d38ad34f6ec411","sha1":"bf8e7726f3e435e2545e551ffd55235535ae407b","sha256":"5324091b0fb3b7da21130452cc17b61083b366a31847baf76bfb6d962b7b9fc9","sha512":"e967887bc93f19648124e1d1597a1f558abec4b6bae64a53683fc0e9135dced604c078b820e0f9756f348e949e543556f8368f52578ff51e9811c277bb9348d3","ssdeep":"384:YJOVzzVWY1kwx4WsnZ166b9UTAtIApqCCNOt1FC:PzJWY1JimUk41FC","tlshash":"8d82294eb1c6a81ea763b0d0540f180550671e88e019c5ceffb9e9d49b687ad633af3c","first_seen":"2025-10-07T03:56:36.283332Z","last_seen":"2025-11-11T17:26:48.779531Z","times_seen":2,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-3d4eae04.0a7a192c.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:23.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-3d4eae04.0a7a192c.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:23 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ba39f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UX97eGo%2FgqU9GRDGxg9ZH5JgP0BNbJDnIfunmtZSMGBHYWpoVhlpFE4EUqpkE6OZ8TFdVMIAv%2BvLit5wzpkraLpUJ6PQ3C0k\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e8df9cac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":20381,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20381), with no line terminators","md5":"8bbb20ce9f86ab414a7b123af02f4c41","sha1":"b794128b1324e13973d10def609ac98cbebafd8b","sha256":"24fefbd1937890688318efc332713db3ce4d616f485743e2971db9823ed7aaf9","sha512":"38f8f964b84b9d1d039a061c60fc3861abd12fce6cf36395e49f4a9c7d0c518b9991a00d64a8ae2ca4eb4367dff572fd8a8fa07b4e3c3bf92bd329649e5543fc","ssdeep":"384:+0z/gztxFb+k5i5VaPMCf4z7RnT7bh/6wWN290Ao:VchWpRThyt290z","tlshash":"9e92da4bb0c3b92d56a7b0a4005f150561332d88a446a4edbeb9e9c1dba8d1e713ff7c","first_seen":"2025-10-07T03:56:36.406515Z","last_seen":"2025-11-11T17:26:48.78078Z","times_seen":2,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":200,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-115dbe7b.16748bed.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:16.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-115dbe7b.16748bed.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\naccept-ranges: bytes\r\netag: \"80fe3673d334dc1:0\"\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:17 GMT\r\ncontent-length: 43792\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dtiDdmK7ZpmLZYX4o1fz3lN8O0ksUQA1xnIwDi0a9rTRttFpQ2CT3Uh8elWCLEhVwkV%2BQMhyHq%2FJMVYKgqe3u9F4IyvGihpN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 99cf7e62586fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":84007,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"724716d5a156c9561cc774f25da8a54a","sha1":"a0cd7c79ebdc6f5a391f4eab4330c62a3037b215","sha256":"51d1600c2e704b68c1f6ea9b6a3c080eeea2f28b5108044c97b7fd7da5d98a38","sha512":"ad117cbdbfc7ad0028172caa7b584e415fd6a1d25fa38c5e7bd18d8ab8bf7f099bcaea7b398972e24b9c54e42e9148a11a7c9c118e609ae6d0e7603f5b57004e","ssdeep":"1536:rw+H+2FMxLaNA45Lr3UcZgJyTdj6GdVyn:0KgUKqsn8T56tn","tlshash":"24835d6f71c6b42502b7b1a4001f1500a47329c8a405e0debbbde8d5aaa8d6d763ff7d","first_seen":"2025-10-07T03:56:36.356906Z","last_seen":"2025-11-11T17:26:48.781974Z","times_seen":2,"resource_available":true,"data":null}},"time_used":799,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":393,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/app.1480711a.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:14.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/app.1480711a.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:15 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"bd5d9973d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7wyQtjN74qz%2BaVZw36eqZoEPW27dDI8oiCvAaiCABsYydOn2RJFmYpV1K35kKnx%2FFWk26PkAFBOZ3R2Byc4%2BcW92qgUUbn4A\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 99cf7e576ef9c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107906,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65196), with no line terminators","md5":"d404003446e655aab1933553eb419e5a","sha1":"331a803c9f23468b87fe85998a53117366e59f35","sha256":"6102868e8089d334195ef9b10922ba798429c1973395655c5d28e0672adced89","sha512":"f366f45c05c9bd7d2806ac68493150002b354a6bbb7cfe6967c1efdfed421bc440b7ca89e0ea344e6cbe87dce4938e3273b2165ccb5151bd4775ecfe1a0eb7fb","ssdeep":"3072:1ElgXAM6FwuVVx8CH+CZ8WpR7PVKybATG/8+yZu21b1EHm:qlq6xxBHsqFqcAZu21b1Cm","tlshash":"1ab34b7d1a88654c08791b52bacbfb0a20ee0893d4b5c8171ed8cf7513f6ca87746f5a","first_seen":"2025-10-07T03:56:36.27516Z","last_seen":"2025-11-11T17:26:48.783302Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1010,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":591,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/img/logo-icon.png","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:17.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /img/logo-icon.png HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\naccept-ranges: bytes\r\netag: \"8769a973d334dc1:0\"\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:17 GMT\r\ncontent-length: 44613\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ctS0u%2FIuem%2B7bPNvBdNWMTsBosAgGr1KlacMjSPTRv%2BPpMXJp22cqTMBhANyFaBS9XHw9nlgQxIEv2LaZQTLrTx5htVzxyY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 99cf7e66a916c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44613,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"514ffbad66482005bf1d0105b9efe672","sha1":"a7f0ef34adcb4208a1a8d1aea9ca31bfa6a19285","sha256":"49fd02e86ab4932529721347fcc4f154d941d9902f34f66f38e323d1fddaa328","sha512":"54f2b25a1aa512eef9dda9516ec289b72cbcac02cbc050e81204d57b3741d2918d95285f2bdeca2886a4bf8563a9ccf0cb5f3d8477603335d4e4f0949e4d41d8","ssdeep":"768:Z8uxKbHmMCuFARANnjozLyHRiDZac6cf3ez+0+SUDne9Z6AmPLUS4KLw9X4Q6:Z8IKTmMCShkfoRIx6dNUDHAmPLXM9D6","tlshash":"7013e12c45ad2c75db38c3a39545038828504cf1ea6c5b7a097b72bea29d41ff2c0e2f","first_seen":"2025-10-07T03:56:36.387605Z","last_seen":"2025-11-11T17:26:48.78466Z","times_seen":2,"resource_available":false,"data":null}},"time_used":824,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":421,"receive":403,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-291d7058.eb80690f.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:19.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-291d7058.eb80690f.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:19 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ec9d9e73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZLiRKW5reHb2ybMOcDyUI66c%2BhDOljjMurKXQ5%2Fm4xcwVw6PijjtMIEXqsGjP5AZo4xUGYcypXGvTRIfJebDswJ9OGhjk8Yk\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e71aafcc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15834,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (15826), with no line terminators","md5":"95f146803a216d4bff18700478c2631f","sha1":"514638897fd66818a5aad22d7909ef55e9f0c28b","sha256":"8bc08e6f6a77a40e513a2da1363257aa43da7d29f27a61b669cf6619f973fb19","sha512":"d3bdc00ed3dc2ce40b5c727622982ad962414aa4a7fc3a26d01e7187541c8b7f9ae7823c730d5d5e2c762c36126dc576611901b74a24a3af1a03609249ddef10","ssdeep":"96:KXFrVIbPYoYIj9QBTcCOFefZ5cmRFTfFkm6lpObpsGMxVFxWMH9qFDNctSkVMc/F:KXVK5joJhANWMHK6SkLRRWs","tlshash":"2e621e6a718c159d643fcbe065e5eab441e8a2539a21477ca433fd206fab2473272e0d","first_seen":"2025-10-07T03:56:36.461076Z","last_seen":"2025-11-11T17:26:48.786156Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-987a068a.c4bc79d8.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:25.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-987a068a.c4bc79d8.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:25 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"4c61a673d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B%2Bl0gF%2B66iaDh0BwutrNAL%2B7a7RMNFFUxdZZXVCyAiVWp5D%2BzAM0tdWu6%2BojcVsOxVX18dG%2F9HeOAthk6GsDAjOsQZhnroaf\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e9afe8ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2901,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2901), with no line terminators","md5":"5db496dd9d28ca5bb301c9df04afa948","sha1":"f1d2ced44f84cbe7cf505dd1076bb1e97ff5d1a3","sha256":"f0512c91dc0d3add89dcf844bdff128a27e53a88d97329bed7c5161cfd924af9","sha512":"a5cb1328ffbfa8df85507d548a7d7edc8edcd4241a66c66dad08f547032c53784a7230f7f778e28bc823d4981917184d21b3cccddb6fdb46a52b989ebae1707f","ssdeep":"","tlshash":"4051634eb482765819f3b0a9405f1340a072144cb80f1cfebef4f5d916a9c9c612af7d","first_seen":"2025-10-07T03:56:36.255149Z","last_seen":"2025-11-11T17:26:48.787404Z","times_seen":2,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-3b423979.27fa481b.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:19.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-3b423979.27fa481b.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:19 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ba39f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PLlHeIbtjGCGZGRPt1NIFTDli72H89m3GA%2B6ngq2m8L1f07JyppqKAewH2UJwXw3h7t1kIqEjBL0NzjXRDoV1LvDnkIxm3UA\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e72fb41c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55898,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (55890), with no line terminators","md5":"8f863501cd1bcd3890a38729bb86c0eb","sha1":"399aca10acb818ccbb7c59ed13e6662024722db7","sha256":"ae3ca397274f9962c14d80279eb4d96a6f9161890acec78d57aeedf7ac6ff6f4","sha512":"29e912f4b007c2860b0f2c0bbf4f50e3914dd66aa35e30e5e05c6cf6947d473aaaac2a1277b14c3f5d6fe12d7e6effd2b49dc5e8396244792b30e31169339ded","ssdeep":"768:4PZmqaeM1bqM6Dz5lYHh89kTN4AU1QQANysn7W1Be+ZyUQsKykSUvL8:4PZyRWnmh89kTzQcn76c+ZqykZvL8","tlshash":"b5435b27798e46b77233c6546895be856336a583c00b47b868b2b6354f8f3e37b73109","first_seen":"2025-10-07T03:56:36.329384Z","last_seen":"2025-11-11T17:26:48.789141Z","times_seen":2,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":201,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-2d21d0c2.8c07dd1c.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:23.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-2d21d0c2.8c07dd1c.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:23 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ba39f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3o08fr8Iso1%2B24T6yweP6o8aeNEpn1v81lg6LZK8bvxaoLrwFEGm7ehf0tYKq5laKEG4OjQzIZnrjW2h8A6TL8NV%2B5vPLUJu\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e8bc945c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":20140,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20140), with no line terminators","md5":"98fc4f7d659f3ff5fe223a0005d30e5f","sha1":"8464c1b8138ce0a4b902c403fbbd61887b215a6f","sha256":"3b4fea3e5f45315e8243cf56781d0df5722e6133942671dc592ff479ba8213e5","sha512":"205b160455a2df2174059f4306d93b67d21c207f50caebf6006df72c501c954aaff7770273e5a68c9190e82251c6f62cdec564eaa28947bcb6143ed41b6029ff","ssdeep":"384:S3v3YBYcL1rAAdTRA7v0zwrmSHHHsglQFx+m1OPNtOVSLMyoLyUhyytGojYPFKp:9zwrmSPG8DOyZUoy2m","tlshash":"4f92e6e9f35542f6525d5cc5286f201ba4b0a4262c1a41acbfb5c0e7e8b8fd1787af70","first_seen":"2023-03-10T03:00:05Z","last_seen":"2026-07-20T21:55:16.775251Z","times_seen":1223,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":206,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-15717348.9fe1d303.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:18.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-15717348.9fe1d303.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:19 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"24b59d73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NWPRj6hvjPYA7eeg9Izxd74Rr%2FmiqaH%2FR0FD21ZrJyD%2F1zJreX%2FTZmBtiASb71W56BWYDR%2FuZNN1zmqGVY4cwamHkMhc79Os\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e6f0a6ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":17944,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (17936), with no line terminators","md5":"40da9b7ec40ed3be37efd232091088d7","sha1":"7a785bbe596a377783b30556aad83e57b53f4a81","sha256":"5b4249e2828ddd1144bd34267d677c3244468cabbf4ac5b0cfad55a298863bf7","sha512":"a4812286f0ac27bf3c5de01bd46747d039df2d3a2a91a83925f24263e3ee5bbdfce9f9af0b4854c5800ab9bf1f5cec60408db79703c89ee833532aa6df58cd39","ssdeep":"192:TjoJhVshuLYUy0dhuLYk6Yvl6tD3/12E9Cf27E1+hz20mU9G1YzTTPRgOLXCEng:IPVshuLYUzhuLY/t92E9C+XhKQizR","tlshash":"9482a323b5cc0417e437e7c42897eb9e5b27a3a3b8419b50a635e1602f47d833d3264e","first_seen":"2025-10-07T03:56:36.457814Z","last_seen":"2025-11-11T17:26:48.791449Z","times_seen":2,"resource_available":false,"data":null}},"time_used":591,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-27fe1c65.526bb59e.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:19.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-27fe1c65.526bb59e.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:19 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ec9d9e73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nJEOjVj0odBKNJ%2BCY5B2jgAlThC5Y4PQ6GtseuTNuJqMtVNdYUG6LRLYyJw3LFAd8LHEx%2FXFvwqJ%2B54SZYlbzL56nw%2Bwl12Q\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e719af8c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30006,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (29994), with no line terminators","md5":"c55c0eb22829101ffefc39d5877079ae","sha1":"2f2790706391364df25f623804ef157dbebd407e","sha256":"c37080b1269833d4dbc1d29d346c4a229d88251a284ac81937e2d82b87dfea2f","sha512":"b99d206cdae74f013703c13132f54442ce533c53b5066dedebbc981a1fcd1419ed8f9170afe61129d744f865107e6ca83a2ce25268f0f06f4b0b784349911636","ssdeep":"384:JTW5FOclD0oCjlDb5PvSVwXDUU7gGa+GH9zCE:JK5FOxoa5PMf","tlshash":"fed2a6a3b78c120670b7c816ee94f6b44611b3a3919553e5b531353c6fcb2933b6b21b","first_seen":"2025-10-07T03:56:36.276896Z","last_seen":"2025-11-11T17:26:48.793148Z","times_seen":2,"resource_available":false,"data":null}},"time_used":629,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":426,"receive":203,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-29f7c546.ec485333.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:19.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-29f7c546.ec485333.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:19 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"61139f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FLYQ%2FRmkF5MOXv41PYCNfZvZKRIf2r4GGuYo1MyG%2BljZFW9lSnigbeyidvq%2FWPmLyH8w3nzycAyWqGW85JhH1S%2FFJaEPXqAI\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e71cb04c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10769,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (10761), with no line terminators","md5":"dd3f103760229a0b791fb6a5dd399d6b","sha1":"2f8083c2899d10d36bc2bf850f1e84d455850a47","sha256":"ea0373cd0320df986626e40d62fd48ff37497906303ddae577b1a4d355017bc8","sha512":"4dc711cfbc1218ce7caacd162415b412e513188401bc3f6ca28f654712e542605693abddc8a1c0379b2b1aa89870e9c33a3177cb158563b79aef717657d9421a","ssdeep":"96:VYoYIj9QBTcCOFefZ5cmRFTfFkmruAmBPXX+fk9ONtcrsI2qGbbVnuF/zFA6ws0R:TjoJhwpf25F","tlshash":"b122e652b28c9d762f37ca382df0fadad1192f5381410fe4a427656e1e8738f356364a","first_seen":"2025-10-07T03:56:36.374582Z","last_seen":"2025-11-11T17:26:48.794734Z","times_seen":2,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-548527dc.2371a7b0.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:19.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-548527dc.2371a7b0.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:20 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ba39f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qUonyOyG%2BQTyquWX98qn9JBirqwJRX6Kp04gMbDzgngF8zn%2FBTI1zUp6IJmNhH79NeGzugyBIYtb46u2m8pN%2BtdHGP53dNWB\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e76ec02c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3438,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3438), with no line terminators","md5":"3f2990ab4fcc9d745a12ec6b96dd84c3","sha1":"7d35ed1e5da811b66c35a3eeb7d4ba5e8a7e08e5","sha256":"a4eee1166b72170e2377bf90fa9c29e44b731e5210c20331eb0fb436119f86d3","sha512":"c3c8ee6eabe51ec4e5d7415339359f61d7636145a6aaa3a09bb05e9a2027c12056ebc96dc7267420981435347f128deb103ea0101c7597e918e0baba12f2b84b","ssdeep":"","tlshash":"6561c13712b12316e107ed986b942ac5e251c733801277fde5547938cfcbbc919b6a8b","first_seen":"2025-10-07T03:56:36.399731Z","last_seen":"2025-11-11T17:26:48.796412Z","times_seen":3,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":415,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-6fdc172e.fbc39544.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:20.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-6fdc172e.fbc39544.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:21 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"75f3a173d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B0311EVoxI51TL6pvQyYALPyJ9hlzzevbf1be7ioeKBSlhUzY4%2F0uDoFE1oVmqexiNaJlBkxhCK42i1F35yHfAuBliUl15yb\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e7beca8c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11772,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (11760), with no line terminators","md5":"3af5bdfadd88558d8ed8c9684497bbd4","sha1":"e6d2bb74ab2f794d8a2acd29bf3a3eb2f26bab24","sha256":"a40caa0f72d4aba4a6f1a93e6c3b4af628ed1bbc1284c8edfbe5c9744d4cddfa","sha512":"4b830e34f5facadb34863bfc9aa3b6d0a1413b05f80616f8e4d30b765e80c49af14225fe6961b3b7b97fd5b39b9169e9a83f1e966682ebb4507ccfcadfdfac87","ssdeep":"96:MoYIj9xBTcCOFefZ5cmRFTfFkmum2l7/6D7C59O1cgIKtvjLgFFhFWjPEIm55Wgi:xj1JhaQewZzBQJ18GA","tlshash":"2032ec52bd8c14bd2737ce54a4f1eb6843253273ab010a30e42de5b92d7716bb359e4b","first_seen":"2025-10-07T03:56:36.330888Z","last_seen":"2025-11-11T17:26:48.797303Z","times_seen":2,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-01c736bf.ecef6209.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:18.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-01c736bf.ecef6209.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:18 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"2e859a73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WD3RD42xxM3o7xIZ1AasV32f12Ux%2Buqoy57lAizverTzkiNcVTRyvNE3vBvNfNzLu1soOyCFPeskkoeD3FKGccqH%2F2MJ3a2b\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e6b39c3c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11118,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (11110), with no line terminators","md5":"295ba1d42f227524de2860e8b1730c88","sha1":"d8a1a6e72d5db7db14da8c816fcf5e3a62facc85","sha256":"27251d31366ac248d83005a8b9c76b825a4da8287010baff6d736c00ab7e40e7","sha512":"69005e098e272152c2f52458ba4444e6295b5e760dcb0be756a15a134b86be6c5834c53e8acab048d98236ff51a95f39e0924f814c672c78a99ffed64da9a131","ssdeep":"96:VYoYIj9QBTcCOFefZ5cmRFTfFkm0dwFD/CFv9+5c3598wXq/xFOwFro/t:TjoJhpElXRt","tlshash":"9b32d962bdcc95d63037cd582881bfe442396393e209d770b461b9641e8f3bb37526ad","first_seen":"2025-10-07T03:56:36.258932Z","last_seen":"2025-11-11T17:26:48.799119Z","times_seen":2,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":402,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-26605602.be40ec9f.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:23.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-26605602.be40ec9f.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:23 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ec9d9e73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RHYYsYC2nqRNmPa%2BZf%2B7GNK%2Fle94IOuyCxqaIasbYXZxcENn39tPDfyhRQUNuY%2F8Z4LxODNdTgzue83K%2BQakxLgx4IbvntVj\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e8a18d0c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":12586,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12586), with no line terminators","md5":"676cdeb0e9c2640d702da0c17f9ac605","sha1":"d537ef7aae947335931904e569793d662fb48bfc","sha256":"fc0b76e6326fa39fbe2b31265ca06bee4a574b3e56bbae508263c65144dafa67","sha512":"c021500ed669006eb132e72a9d030fe4df8c0db9c17c0efd3142f65e5e060a268e2e2651cf5bb7ec224f66e19872d7868df8f55a4d400d8e7c9908c7aa873ac2","ssdeep":"192:BdmO5GqI04/en8t6SrWtrWmvzze410An9I7:BXfsWnk6ZlWgzf0aa7","tlshash":"5042888bf2c1b41542e7b19100af1509b1377558a805a4edbeb9e9c2ee6890e613ff7c","first_seen":"2025-10-07T03:56:36.483256Z","last_seen":"2025-11-11T17:26:48.801085Z","times_seen":3,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-695e2f31.6908c34b.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:24.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-695e2f31.6908c34b.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:24 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"57ea173d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UgiPTS7J0jrxFGNEWHMsn8eEpCto%2FiYfCoXhDFmpmSxeEO6hLd57rEsish4VsDCEJe3cRMSSUWKisPMBz5L2WuZKVnJ%2F%2F5i7\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e941d56c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":38861,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (38861), with no line terminators","md5":"790947d11a0709932cc28e567658286e","sha1":"02ee25bfee2f6b482d385eae71f2f50143c22ca0","sha256":"5ff16630367d5c65c0fed4872100a7fcd8aa75a6317625e0d1422629e9f645d7","sha512":"df67daaa47bfa7485efd4115f883bdcf1564ed139ab61f670b76d3ed9a2af54c7bd856d5deede4aa1ed16ccbec591eb1a522a6c0bdafc9a4fbb8ef8a66653662","ssdeep":"768:7GjZTK5nr/ulb1FygtCmuPSryLGvgRfD/y0UXnL:qjZYnr/ulbbrNuPxKvgRrsXL","tlshash":"f5038d56754ba1ae4a7d90342038342461f60e04b4cac1debabc6ed22ad5e38167ff7d","first_seen":"2025-10-07T03:56:36.307306Z","last_seen":"2025-11-11T17:26:48.802073Z","times_seen":2,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-da11241c.ca5cd628.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:22.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-da11241c.ca5cd628.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:22 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"211ba973d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yc0qU5EMnDOd63yG2Crhv%2BqwrOVvrQ8oVr3GRRbPAYCnA6OrKJZG91wwXg5lnb%2FRs1B%2ByeHJqwZQDaNqtyQVQOnklQOzNHIF\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e84ef75c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9422,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (9418), with no line terminators","md5":"670d46671cee4d24bb66885fbb958bb5","sha1":"e52790e83e4ad998e6a55f4b37784f9547a0c502","sha256":"b20c3a02523d51698e5a4bfb19e9ab238244364e74ff0ac4ff9f9c3da46fa30a","sha512":"abbcd622ee8eb1c75b57a27cdb1e2fda0e76317df1c252c8cd1eeecd168d3e0f6a6a21de76f58f2cb3228997345049d10c3203dedf6c1318781f9765e3467eaf","ssdeep":"96:P9XFrVIbfz3TdXUCupvKXW9Otcg30ixf/DEF59FiIw:lXVKDCM5b","tlshash":"7d12d86a718c1d06fc33f8646e96e6518132e253b3052e55e650b5e08fbb3bb32adf41","first_seen":"2025-10-07T03:56:36.487723Z","last_seen":"2025-11-11T17:26:48.804079Z","times_seen":2,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-12689f14.279a174c.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:22.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-12689f14.279a174c.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:22 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"24b59d73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xbCoGXXFT4f3ucCZjEOnQeZhtc8ZxfXRCMb96%2BDKC%2B4XgXF9reJlGS5f%2BR3S2V8ce0%2BG7UldGdVQLUN2S32AhTKArQQ7DUpT\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e878ff4c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19401,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19401), with no line terminators","md5":"70ff4d58bbf3ec984d3bbcacd433c770","sha1":"4d520984dd49d3c9e11f8cc8554e11b4c1ec3c6e","sha256":"c75343d2947de3823347814abf712f6b66ad771bbf236462ba39486e2c941091","sha512":"2201c8a48a5379d6142870c51dc6a826dc8334cee268902449c7f3783489d61e5dd05f1d32695073f3a68d4a453cdf2617f803ff81de31f722b8af5664ae6020","ssdeep":"384:KAzPaOb+k5XVHj2RNSnKrWcGJkqZF1+qT6OWYE2905r:p3GSnKDGJkmXOCE290B","tlshash":"bb92b98ab1c3b41917bbb091006f1905a1373988a805d4ddbeb9d9c1eaa8d5e313ff7c","first_seen":"2025-10-07T03:56:36.269493Z","last_seen":"2025-11-11T17:26:48.80618Z","times_seen":2,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jytnet.com/Index.asmx/GetInformationPageListV2","fqdn":"webapi.jytnet.com","domain":"jytnet.com","tld":"com"},"ip":{"addr":"172.67.182.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:17.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jytnet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 09:52:43 GMT","end":"Thu, 25 Dec 2025 10:48:40 GMT"},"fingerprint":{"sha1":"AB:5B:AD:9E:0C:EA:0E:A7:CF:A7:3B:CD:33:0C:92:E9:75:F6:DC:35","sha256":"A9:3E:E3:9B:86:46:2A:7B:3D:D4:5F:0A:1E:AB:B0:01:09:B2:28:87:D8:C8:CE:E5:5E:77:D2:35:2C:F1:2D:5F"}}},"request":{"raw":"POST /Index.asmx/GetInformationPageListV2 HTTP/1.1\r\nHost: webapi.jytnet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 113\r\nOrigin: https://1w2m.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 17:26:18 GMT\r\ncontent-type: application/json;charset=utf-8\r\ncache-control: private, max-age=0\r\nserver: cloudflare\r\nx-aspnet-version: 4.0.30319\r\nx-powered-by: ASP.NET\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE,OPTIONS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0HE24OZh2pNbEO6LQRpbs5HASxjqor68HlzBwdkLlRsGKRUxE9o0DA80Fv8PmbfWtJxxuCrdU4HyxRKm8MTkKAK2LHMcwgUAOYJ%2BXt5pHQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 99cf7e680ba6712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":492,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with very long lines (492), with no line terminators","md5":"a16f7398d2e16c43834a9b70de2b1ab8","sha1":"6049c40f26b2c7d5e3d99284732fb7ee4933f0d3","sha256":"aa08aa4a1321c1844423cf5812e7ddeaeb7efc9b718fc2b0696f18f4a26094e3","sha512":"ec17a7556ce4e73a1fc7f81ee2ecbaaed8536c4d9b1a1964f987d5443640bc6de574f22815e6c1259a3859d2ed24a67e81d2d1b0492665763a18ee51e25dd5a3","ssdeep":"","tlshash":"91f00516b4d31d3c594f6f17e1d09a4346411a2f1a553704157025fa480cf89ecd4a4a","first_seen":"2025-11-11T17:26:48.808147Z","last_seen":"2025-11-11T17:26:48.808147Z","times_seen":1,"resource_available":false,"data":null}},"time_used":516,"timings":{"blocked":42,"dns":2,"connect":1,"send":0,"wait":434,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-2acbdf4e.85e693d6.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:19.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-2acbdf4e.85e693d6.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:19 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"9d689f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TuYFgSZhtp5Yjf8h1FCzxrB5xVhNLzKpF5thfaZ8tUXCRsgUWMONOV6G8AzXMk2ST8OOjMpjOSeOhsCx4gfqu31VFlzWczee\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e72bb37c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":8720,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (8716), with no line terminators","md5":"e22d8aedd7c81e3ba1feb330106f7f97","sha1":"4aaed9e930650a6fca9059840cd8194d4bfce153","sha256":"0da0901e23690e6f13a2c36466b2b5185759b1291db26fac6971dd5adfd48aca","sha512":"0fd215baf841ebf78cf583cd47e30900379c29cffb03e1ef04644460b6724ac19063f08a31a51f3127a4ae7673731064130ad89b9c684f81745b3b79650b71c4","ssdeep":"96:VLQDq+JbT+Hab9w/64cAsOXeOt/n/30FFhFyHDJb/8WUNPQ:pQPb7sRj","tlshash":"cc0243127b88111d2cf7cbe828bfa6c47115ab5380923bf465e327e66e47e47315b1c9","first_seen":"2025-10-07T03:56:36.408873Z","last_seen":"2025-11-11T17:26:48.809873Z","times_seen":2,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-a5a32970.06d004a2.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:21.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-a5a32970.06d004a2.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:22 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"4c61a673d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ySEf5z5z5%2FTKgqwGtxI8FuO95nwe2uXA34nz9p8rB8Lcq1nIJSYX%2FEGTw2kHarYZpPeemPCUsWmuqwxVJx5y8daYgYfk0LHx\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e829eb7c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6455,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (6451), with no line terminators","md5":"8be8bcd3ae911990708e8ebca021d4c4","sha1":"651ed868f3ecf51321156518a358b72aaa4f8417","sha256":"af4e2f2ad79a6e54c797f3c698503cb5bbbc63abd8f317385409bbe07c0e2951","sha512":"6d1ce7673ca0e8f72365196dc3b9482ba77e020137dd5bf0e43f13c7de6b9c584b225ddf73aefdf3d1cc39d31a39bfc76b6465cd1d63dc346f2060b715388d33","ssdeep":"96:TnEtkERW1vtkUEi9FANJI6c//t1t5v0efEN5X/FwCFtsEnu:cI1PEifYJIZ/t1t5fE5fu","tlshash":"7bd1a361f98c00122537c5746fa4aa7cca3637b380050e1cbcb2e96bdd4b38631dae9d","first_seen":"2025-10-07T03:56:36.478883Z","last_seen":"2025-11-11T17:26:48.811791Z","times_seen":2,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-134ce872.c9c0f0f1.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:22.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-134ce872.c9c0f0f1.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:23 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"24b59d73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pfhUPMQ1qje28%2Fv4s7IMK%2Bp6aVPMbdsi%2FqNKlw9QIXTAlc9SnEcF0J2Sp8getrAgUNMwIpKTNAiIpvdDTGSbXvvhwzJ5CWd%2B\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e879ff8c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4107,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4107), with no line terminators","md5":"cc8185585655f404b4c802d67a282598","sha1":"91bd355231c3bcd5cd4d1f94461cd8f93f7b7fd0","sha256":"e41467bf61d3b2aef34784a4f8ba6fac158c9639ac9082850e20285bce46a0c5","sha512":"39d7fd30e859e53491a8e2dcf5ae407bc90004162b717915d8cfd335410fb8b5d6bd97138b2774455fced93e021086ff5717e25b3cb6b3c7f7b9c46249d68404","ssdeep":"96:c+rPNMUwf24wjK5Vs29cL+vuGpp7AqqyUKiw9l:cW67f2TjK5Vs29cL+aqh0s","tlshash":"8181b8893043991dcdb57110612e3e6854a13e88a8c781af7eb9ddc04b90cda2b7efb5","first_seen":"2025-10-07T03:56:36.455336Z","last_seen":"2025-11-11T17:26:48.813719Z","times_seen":3,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-204a289b.5f73c423.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:22.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-204a289b.5f73c423.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:23 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ec9d9e73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MKDMey5PsH%2BDvxWu6hJS1W6ZUJjLrVDgI5wN3jXi1zqjOXxoF8iJVLHcuA%2FpTLeNQY2FBR%2BoKdwI123pwHC1ZY2xm56LN2Nh\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e891843c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6581,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6581), with no line terminators","md5":"07998bf2c975fe969ee63c55b50028eb","sha1":"24c87c3bedd6da9b7f6fb429ed661c671f543ac2","sha256":"8a3b23e7d643a8068f5f3d8daeade298ba7eade5691f3854e49b7d7dda123eaf","sha512":"b32554bbb9286c55f6c7efd54220e9ad4ac015858c61ee876a00cd5464ae72713c42d5c658e037bb5e6b41cc5f25b38ac47fdc714ce26c456b8237034327bdee","ssdeep":"96:ztjzWOcBk+iI8lC1FRC4Gv3X7PcvoDiewE7jlTWMEhLcEBw5+rUnHIa+c34c:zxzWDBk+iLWFR4FjPw4nHIgz","tlshash":"80d174163281747975aeb155500f162460333ec4610ad0edbe7cead4abd0abd326dfbd","first_seen":"2025-10-07T03:56:36.238992Z","last_seen":"2025-11-11T17:26:48.814671Z","times_seen":3,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-7a71de7e.d01001d0.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:25.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-7a71de7e.d01001d0.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:25 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"1112a373d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9tVIPMWaO32l9g0g4%2BLokweBq6IGacxki%2FSPZsfg9qOPYzX%2Fn0tVoMc3Wm1NGOMfz9qkYQ%2BEAZnp7OCtJZW9EXDpZaCuIRuc\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e96adddc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26904,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26904), with no line terminators","md5":"98983379a8c8c61d01ebdc337f5f8c57","sha1":"37a4638e1e667cb2efc71140e873748f000e194a","sha256":"805e694552ef08cdd076545ee1745de04680dac7dafea3ed2f4f7ec1c388a658","sha512":"4cafc82e290619d8cb0af754b9ecc05bfe1d01af36274671063fb5593e5bc6b0de14c6c81610b1fa487fd43619a32c44087402ab22b95b00bc6748d13a3dfb26","ssdeep":"384:m1tkhpLBaoOGyQ73T/eAtIApqCCNOt1bVlDap6b+5Fwl7J8iET05fK+yNf6Ipy:2O+QrBmUk41up6bnl7JzE6i+yNZy","tlshash":"52c2bf0e74c6382a5c7db6d0500f1814987b0bcea10584cebf68edd0e6d8b7d566eabc","first_seen":"2025-10-07T03:56:36.417937Z","last_seen":"2025-11-11T17:26:48.815598Z","times_seen":2,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":391,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-11T17:26:14.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 17:26:14 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4MLpP8WUh7J2w38cn4AXCOd2psHJN7gShUpVxKyADt1eu18vDQDsI9rXUNWYm%2FBrvDr4dGRRXj6W4eN8YJX%2BQ5zzHFmUULwb\"}]}\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 99cf7e534ecba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7496,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (7496), with no line terminators","md5":"37c1bd6de7d7481fc309b322d723b3e3","sha1":"5f1fdab7fe74768bfcb29f67a8c7ae36fdc6596c","sha256":"d7c6d56bc2d3f0bb1973e20e7aa71b8537e45b51cc69b74cc43bf30cc59b209d","sha512":"8ed3ef9f34a6151d55454ab317c4c87c725f76f2ce67768ba5f3281719d6ed8d7bf71c63046567bc3a33329455553172e6698c92e1a23ac57040203765b73383","ssdeep":"48:ft2NC/0ptRp8GwxDawLK6XfRVOSC/kXvWqsLOKcOL+Ynqa9HWU9lzSSTEJcJ+2wd:A7ptR1wxDawmM+SzFKT+IWUf+TJ","tlshash":"6cf14a79ee04619ee9e0dedbae25bb2ac5cf8d391430e045c588994fc8a8fc40267597","first_seen":"2025-10-07T03:56:36.355584Z","last_seen":"2025-11-11T17:26:48.81748Z","times_seen":2,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":35,"dns":13,"connect":1,"send":0,"wait":407,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-04102d03.0441b7c2.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:18.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-04102d03.0441b7c2.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:18 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"2e859a73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7NyTaRk%2BfTFGcnMee0nXSxj6nq5F1MV3oQ%2FFGnGqnrWgpQ2Vfp21Doj1Y282FSMEORoW4t%2BErIHI2YHymc50QuaDIN6aVKUR\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e6b39c4c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":23887,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (23879), with no line terminators","md5":"562fbd75a4417740428062a76400f89e","sha1":"62c3b50ab87725c564de017ff2fb5c6fb212ecf3","sha256":"02ec5a4ccdf72c4a51fab2a58feae107752cec36061259a23347d7c4db0d5c99","sha512":"beb23051d058857d48a2704ecb383494fd52061a950a32801a7763d06b0373ee42ed466d36f4a027b7950dfb6f3921cc3bf52fb44418277b815833f08a27e20f","ssdeep":"384:otJo5SaMlP93ekZooe9/bPJJ0wXWcBA9PsV7ku7ku7ku7nJBhuv2jAeU8f5zckFi:co5SaMlP93ekZooe9/bPJJ0wXWcBA98a","tlshash":"99b20e1d69a80da3a8b7c53c5c439eeacf75074251444b28aa67b1504fab3f232f19ca","first_seen":"2025-10-07T03:56:36.291246Z","last_seen":"2025-11-11T17:26:48.819199Z","times_seen":2,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-15466a2c.92962879.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:22.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-15466a2c.92962879.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\naccept-ranges: bytes\r\netag: \"80fe3673d334dc1:0\"\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:22 GMT\r\ncontent-length: 5146\r\nage: 5\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e8kTlTpz7S62ZZBp88HXB13J9SaaA3ErCyvcAtVI%2BAouQpKpKO0xQVXdr%2F65epgC4ny79lb6cjHfd5n9CUbMooOSuyXB75Qa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e88981ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":13846,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13846), with no line terminators","md5":"04085b4a95c5eef23b4cea31a3738a4f","sha1":"4d073c7d6ca2c54a595bd1b89e8296ee06f4642e","sha256":"b22fa6bac3fb1d2e438ea2477af95150ec4280acd3ef815f8261a81be77f0681","sha512":"3fc6dcbc3e17d6dd00894b3e4458cae58eee422d2299b63a46f4ec249c0578d937232bf1333bd19b91d228327b8875994b21521cadf149f9c8df415fe0f1228e","ssdeep":"192:y3QbE9vLJ/IAiuw0q0rQSw3hPupq+4IUVJ7ZLln++v2Dvhb1WDpSLcuFE8e:ysWpITuw5cQSw3hVJK1MsAuO8e","tlshash":"7652e749f4c6f86513a7b0e8001f150551231a58b40d89ddfebafad69e28b4db22bf3d","first_seen":"2025-10-07T03:56:36.263839Z","last_seen":"2025-11-11T17:26:48.650828Z","times_seen":3,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-09f525a8.c9a4bbb5.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:18.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-09f525a8.c9a4bbb5.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:18 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"f34a9d73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VXLYVt4vMc6%2FzXXCKO4eXm3y02JzGlOjfcS%2FaIAIEVjU2GVXR09fE%2FJ%2BqJ5Q4Jg5npSwLfIPtm%2FSedzSsq1eNGgNekrH7rFR\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e6b39c8c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18909,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (18901), with no line terminators","md5":"8dd303b770ceaff3f62cddd3fd37f36f","sha1":"906b7d90b0f7fad8fd12902f415ab9c6c97ab0de","sha256":"6bf72950d6324187c5e53c466b32cecaeacd4a9bfe47dc6538520182f6e265c9","sha512":"1188a26e75aa3643b09256fb61640bf8299c46fe873cc574e6f5021b650920a13df2192574e8de38846a2117522f7a14ae8670e67cfc435893470460b7e49c5f","ssdeep":"192:bsjoJhSoRO12E9Cf27E1+hz20AU9G1YzTTPRgOLXCEnw:lPha2E9C+XhKoizt","tlshash":"bf82e712b6fc0f163c37d87828b4fa94dd65629bcd411f52b863b7341ec72a3b11664a","first_seen":"2025-10-07T03:56:36.304132Z","last_seen":"2025-11-11T17:26:48.821061Z","times_seen":2,"resource_available":false,"data":null}},"time_used":615,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-54c2066b.2ac49376.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:20.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-54c2066b.2ac49376.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:20 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ba39f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kpTWOSR2gwiU3qbq%2BMEjEM9ATy5dPqvTEoHDEM4K6uvTe0NLYoqaH885mkm4U5xOi3LPBktRtrjHo2N18QGFl42E9lxLppqe\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e77dc0ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":77421,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65520), with no line terminators","md5":"467428f96c644d1c2b1b22235dc0b5a3","sha1":"dacd8ed5ff471732f9c7f4bc02b1ab1afd5a357e","sha256":"0e06fe818a18b9f4da8271073f67ba340c7c5afa0222774ffa36b17da4c11106","sha512":"f6488cfcb0a56fdce3a88721dc8efc88d31d9bfd3f290c0228d586a9165ac85e74d805ac6e3488bc151a0760dba49e5bb1f06ad7d25177aa7829b854b2c693d3","ssdeep":"768:mP4Jg3aD4/Lim+wp5FOxoa+OPQXk2eV5U/ppkTYf7HXc/d:m4Jg3aD0BlpDOxd+OPAkf5U3kco","tlshash":"62737352bd8c1e167373c996dccce5e5911cb39391810be8b22226366dcb39336e724b","first_seen":"2025-10-07T03:56:36.375778Z","last_seen":"2025-11-11T17:26:48.822846Z","times_seen":2,"resource_available":false,"data":null}},"time_used":840,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":427,"receive":413,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-74ef85a9.45919c85.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:21.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-74ef85a9.45919c85.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:21 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"26d7a273d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rg3pDgDSEBvREHipKIYzmc0qwbbvlfJSvjSKPVv%2BOR7VJyM62tlfkKpp3BKJwSt06mrr8A47is3Y6IVF1qk570TRn%2FIJjoI5\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e7d5d23c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13096,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13088), with no line terminators","md5":"74b0c469fac657a15e6fff2d8e7a0e5f","sha1":"cb7762792d1a223aff3810e1656928eeeb16bd13","sha256":"9ed2b664d2a2cd2e154d2f485275b18ff202b399ed0cdffb4c4d55f9532b0880","sha512":"bd1b35bb323ca6d38e595d68cd05d0dc3106a4290ec45479081fafc397ea77c05ffcc7801225d8886c19f0cc7cf9178f616a149803a31a11414640158efbc6cc","ssdeep":"96:PkoXFrVIbPYoYIj9QBTcCOFefZ5cmRFTfFkmb0yY6FTC/U92lcpMKabv9PeFPbFA:LXVK5joJhGSBMRD","tlshash":"7242ccd2718b31972237c954a5a7aabec135be93d0031b64b478f9247f8b1c73d9224d","first_seen":"2025-10-07T03:56:36.358242Z","last_seen":"2025-11-11T17:26:48.825592Z","times_seen":2,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-115dbe7b.16748bed.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:22.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-115dbe7b.16748bed.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\naccept-ranges: bytes\r\netag: \"80fe3673d334dc1:0\"\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:22 GMT\r\ncontent-length: 43792\r\nage: 5\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SX3aDEx1blHfxBIdrD%2BMe4DSSfPrNLHOg6S3gvi84ewjfyQQgSFYOK0GcUt%2BHAQYC3cV76NF5ALMQkd1XipMT1Hcd%2BmLaZAk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e877ff3c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":84007,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"724716d5a156c9561cc774f25da8a54a","sha1":"a0cd7c79ebdc6f5a391f4eab4330c62a3037b215","sha256":"51d1600c2e704b68c1f6ea9b6a3c080eeea2f28b5108044c97b7fd7da5d98a38","sha512":"ad117cbdbfc7ad0028172caa7b584e415fd6a1d25fa38c5e7bd18d8ab8bf7f099bcaea7b398972e24b9c54e42e9148a11a7c9c118e609ae6d0e7603f5b57004e","ssdeep":"1536:rw+H+2FMxLaNA45Lr3UcZgJyTdj6GdVyn:0KgUKqsn8T56tn","tlshash":"24835d6f71c6b42502b7b1a4001f1500a47329c8a405e0debbbde8d5aaa8d6d763ff7d","first_seen":"2025-10-07T03:56:36.356906Z","last_seen":"2025-11-11T17:26:48.781974Z","times_seen":2,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-27fe1c65.a74d3c25.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:23.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-27fe1c65.a74d3c25.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:23 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ec9d9e73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=God0dN7jHASJRx8F24TqcIgeDSwNuLMXtEai7uXgXI5F%2BxBVZfRp%2FbJ%2BG2YLx5ftmSHsNhaFrA7Z4a65HbJpHfu8UMFeLUE7\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e8a98f2c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83153,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"4428ac6dd8c45a1d6b24e17b47c93df8","sha1":"4901f57c2452699facdc68be6679c9277af45a5d","sha256":"29633e7f0fa7b3274c4ac6c1f19b0c26c202f1c6776fcc3380e219f895bebbcc","sha512":"d3a02883eed8c782a5f31fcbdc4dc23ef2b1b0ed813960bf00d77a874f9073d4a531378b069b71c58dffd17e7d290084e9c58b8c509779bc842b2be0c022f194","ssdeep":"1536:Yw+H52Y8IYrDjBw6pf9/ncy9v1tO+M9fZRgURBf:dKIIYrBnpfqMsngOf","tlshash":"ef837e5ab2c2f42902b7b0a0405f2505647726ccb40594debbf8f8d1a6e8e9d253bf7d","first_seen":"2025-10-07T03:56:36.423822Z","last_seen":"2025-11-11T17:26:48.828417Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1013,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":416,"receive":597,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-509cf7ea.87b4e103.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:24.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-509cf7ea.87b4e103.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:24 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ba39f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HTN9JA3mw9l8k7eOEWBmvZ%2FxPehGWe51I3s7DFiY71VAG2Og6bg8cHByxSkLJRMct8epfzxN5Mcco1w2NTVR6kZhOUaNDo8e\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e90aac9c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28224,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28224), with no line terminators","md5":"48af154cc745ac03cdfe44a8837f3e89","sha1":"ed8b93c7b13698036b1e2fc3323ab722fb74799c","sha256":"6e87f5c9ce5edcd6b1baf4bb7f813946177c16863e76b51216ba8e03f0081d45","sha512":"62961753e94c4a6394cefb56584dc0e12f250b4bc9d5caa645bde6a3d6f78746645f8b66d6f2ad68f62bef362689f1d275232df084568e95d8357f776e997012","ssdeep":"384:K6CGItwQsQybAI2zt7MLRuiWkHtgyHctJNSVHDrHSZ6RWN2903b:MsQyhWw6yHSJNAPHSEi290L","tlshash":"30c2fa8fb2c2742902a7f1a0006f250961372588b406d4ddbfbde9d1daa895d613ff7d","first_seen":"2025-10-07T03:56:36.233384Z","last_seen":"2025-11-11T17:26:48.831041Z","times_seen":3,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-875906a4.18f87375.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:25.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-875906a4.18f87375.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:25 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"d612a673d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=whf7JYiyKHg7HsmBUSSG7BmGyVj2q7ZWLtZFTrRtssuENGlgHWuRvRSDYiCO798dqHrghyaQx5lNZcmRis%2BApgjR268Fpma3\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e99be43c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21717,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21715), with no line terminators","md5":"a5b41c054d18a2699fb6fe05bd31a6ae","sha1":"19745daecd7640057b347c487daa6f622bac66f7","sha256":"39027c4b1900adbb9c74212db1b5155ca779dfd50b9b19ede8511ffe33279c86","sha512":"b47a518ca784eb063c5d3e72816f36284cb4f44acd85faabcba2cb8117fa00915c5d2b769e765008ddd907d503fb0aa31e17b29b18ca825ad0fa5a98cdd662e5","ssdeep":"384:Wyddj9qT11kXfUCxKkLHyN1aKnoj6pvpdHJMdA/em090GXOb7GVVssvFRU6:WUdj9gAPvLOaKnctA/ejR","tlshash":"28a26d89b0c7b86f2a77b1d5101f650410731944f40a929efef8e4d59aa4a9e323fb3d","first_seen":"2025-10-07T03:56:36.490084Z","last_seen":"2025-11-11T17:26:48.83228Z","times_seen":2,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/favicon.ico","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:17.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/x-icon\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:17 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"f3d6a873d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F4c%2BZcRzi0gNDHzKPKqKk%2Fy8fAgoULvWdDxSVQyKUG158M6U7YUEQYa2OdRz2qjoFWXRlIMH%2FjZdq4TOJH1hr%2Fo5edr%2F0A4g\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 99cf7e66a917c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"77306064e9b7e2e6a37da33a3d15c742","sha1":"c00c174d5b2b41d2babef02798386e5ef4957068","sha256":"ab881b904f5f5a7247ff119f6a072a7152aff7da52cbee6944a6ed40628cb5b7","sha512":"285ee7057ca66ecd9eb8327189c3a583f1c72036b198227eeab3ba29c553bdf94a4c4f7569096d9cc89fb7acb6b7c8267d1cd5acf1d4c76e216fc9b08d784d9e","ssdeep":"96:HKdJmL5XlRri1ve6XfSdAoKK/JAK6+KyPnrhvt4O/0V:HKdJm1S1m6qdFKgJ16yPnrhF4","tlshash":"0e91fcb9e1a2439cee4a4674527604ae10f07f6e6937924a29c3761fdb3217738f2182","first_seen":"2025-10-07T03:56:36.312796Z","last_seen":"2025-11-11T17:26:48.834188Z","times_seen":2,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.jytnet.com/Resource/RotateImage/20250814/dc718d7f15a649e4b52fc746a1386393.jpg","fqdn":"wap.jytnet.com","domain":"jytnet.com","tld":"com"},"ip":{"addr":"104.21.51.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:18.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jytnet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 09:52:43 GMT","end":"Thu, 25 Dec 2025 10:48:40 GMT"},"fingerprint":{"sha1":"AB:5B:AD:9E:0C:EA:0E:A7:CF:A7:3B:CD:33:0C:92:E9:75:F6:DC:35","sha256":"A9:3E:E3:9B:86:46:2A:7B:3D:D4:5F:0A:1E:AB:B0:01:09:B2:28:87:D8:C8:CE:E5:5E:77:D2:35:2C:F1:2D:5F"}}},"request":{"raw":"GET /Resource/RotateImage/20250814/dc718d7f15a649e4b52fc746a1386393.jpg HTTP/1.1\r\nHost: wap.jytnet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 14 Aug 2025 07:45:24 GMT\r\naccept-ranges: bytes\r\netag: \"826265efcdc1:0\"\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:18 GMT\r\ncontent-length: 340567\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=71zs648RxP%2Foq%2By%2F6W7tv0eE0tgJSu%2BTNv0HMdIwLBJ9B0TOYN5ath9uWM%2FKnEIb0U89HedgXzWLJA9FzK%2FtNVYIlhQf3ErV3%2BFWcA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 99cf7e6b8c105697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":340567,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1280x510, components 3","md5":"8cda573e1c48d7f0b6d909a9e0221f5f","sha1":"93aa123f85cab640451f6fb0739d0de4249b1e53","sha256":"826dbfa33a5a1b80523b164d3d1fd1b0f4469dc2889d957db13f6142e9a98d5d","sha512":"914cb74a9ef0d15a834c2f4051e75c39513b7fe8e4364b4661526077c826181f8a476c95e4b1842a2964f6bb50dea87f57c7fa7b4c10fa35b4fbbdc5a282c8f8","ssdeep":"6144:GPwswE/YJCTTx0fhAtDE6lXnnQUO2UWH6izCspqzrFKScugt051timSY:GPjAJCT10pP6lXnJSWHsLzrFKCgu51tn","tlshash":"5d74ee2e562611afe2df0d00d6b513ab0b735b94e11f9938f054c4c366bbb687309eac","first_seen":"2025-10-07T03:56:36.491363Z","last_seen":"2025-11-11T17:26:48.836294Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":2915,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-481827c3.78cf61cd.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:19.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-481827c3.78cf61cd.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:19 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ba39f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ka%2FTnaxPl7KrgviUtd%2B3NcvUK49w4OvDzzLqzprOjGqohqReQ79DNLBTMbl%2FTmY6051u1fXu1DynFjCYVDlSmit2nljd8eqw\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e754bd3c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12887,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (12879), with no line terminators","md5":"189e82c88355eb3d4e9580eb6b431584","sha1":"e6711e5c35f61b36730ea40074fd2f343cef7dc3","sha256":"53e87cc2bd5d6d861cfbb2849e2f6b7266adfbf26725888e380f0d37a0aace17","sha512":"fb78ce11b6454bd78b3667b3e0c36b85a9f8349af647c66a8420679aee02998a96e25f8aefaf1516966edcb5a5426f8dfd61cc9c02d012b5aea36526536c6233","ssdeep":"96:W7UXKQwtoYIj9QBTcCOFefZ5cmRFTfFkmwKYAzyZP6/noP9qsuFcVSkzCS8/TGED:EQZjoJhmKnoPxuiRCS8/TGE4CzvNAw","tlshash":"0842fc1bbecc15552037c924b9d0eac47725a2b3a0d11bf0ba617524eec72933d6b68f","first_seen":"2025-10-07T03:56:36.326521Z","last_seen":"2025-11-11T17:26:48.83853Z","times_seen":2,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-4ec5011c.a66bc420.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:19.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-4ec5011c.a66bc420.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:20 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ba39f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jDPuRcjhP3tRh09WuHzWxSB%2Ba%2B6NmAeOH3FmMQ0A9QCrWak7ww3BKpGd9FiPcoWXSAFoYRUmeFfY4csJZTAQeTmrtAvrIbfb\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e768bf2c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29305,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (29297), with no line terminators","md5":"251c264b83548c2df835e9d1cc17ce7f","sha1":"c201a5129e001248d2ef551f46764c102513997f","sha256":"3cb6e99daa36e5f62ad7dbe75f6cf3656c1215492f7e4731804de985556d7b3e","sha512":"826843b984d16d85f24383eb477568de159c7f68bb1f0fb33b67277e751c94c4fb17c355bacd7b1e08947806e252dc73e677d2651607226ef9ad3c491b79220c","ssdeep":"192:KXVKojoJheanmJPbWAnWAnWAnWAnWAF/3qLsv25g/NHMEPRTFmZh5ko3cZGYkinw:zdPLoP9/3SVySmmZh5kodgn1IcSzD","tlshash":"b8d2e8e273fa1b2b6077d894bab4fac44505925380f217e4f2273e714e8fa5735a2349","first_seen":"2025-10-07T03:56:36.421747Z","last_seen":"2025-11-11T17:26:48.840561Z","times_seen":2,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-70365c1c.3d6928e1.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:20.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-70365c1c.3d6928e1.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:21 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"75f3a173d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fe8hPOo7RV0OTE3A2lLnx0q5rVIWnqQnckk2dNaXH7i4Y%2BsoStstmbE1ghEyAFAvAUqJtO2E9lARg990QdySf5dHVvDrnRGP\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e7d3d1dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11578,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (11570), with no line terminators","md5":"e54e4d52c70a9a47511e0c129584e217","sha1":"09d2af0249d4c077fd0623b53e5eeb7284cdeeea","sha256":"65b1437d38269f7689db2fda97c1374cce7ac788fc759f85d6fbec95bc0ffbad","sha512":"641229af7717d2c0da594edc5cc04795f7c095b517c81e4669a089c3f279526c06a2f39b0821896c1e6c1767bbb7175712b7098f22e9cefb8ce212e8d473e2b9","ssdeep":"96:Jz3TdXPYoYIj9QBTcCOFefZ5cmRFTfFkm+4RE98qifJN49mNcaCCz/lHeFnzFQj5:JjjoJhTf4yhMT2","tlshash":"be32f912b3cc1535e4b3c51aa8c5ebb44daf625b8b11436ca82f7534eeb72873361e49","first_seen":"2025-10-07T03:56:36.438908Z","last_seen":"2025-11-11T17:26:48.842457Z","times_seen":2,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-ddf76efe.3afbb69d.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:22.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-ddf76efe.3afbb69d.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:22 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"211ba973d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iQ50Rc8HXcmbfUHF4lsgc2Gsp%2BCGP%2FuGCkvziMbJ%2F0%2BoWOes0kuTDBmj3O736IuhQOqegvrmTRuhx%2BU5sdiyHz0LfFS3AdBK\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e84ef76c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13078,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13070), with no line terminators","md5":"7acba054bd13f071088c5ece07978fb3","sha1":"4183d3a8a30de81f6c97a2c7eb19b6bb150557c1","sha256":"d63df9d2788d693931580afe8d451061f0f8cf643f8ad25782bb8df87157fb68","sha512":"38662ec0045c0c71792a50b374b714e77b83df3f54e5f03f4413f02f118d6831f312db725c95a68c228b918310eb04e081c29bd157fcd1075088851ed8a4c904","ssdeep":"96:VLQNoYIj9QBTcCOFefZ5cmRFTfFkmqOcXOB3OPY9itcmOGXzxfqFL/F0eukDXZN4:pQCjoJhdKJT9","tlshash":"5a420cd2b2cc112730b7c9e4b890fab651a5a2cb801307b6a46167e45fc729735e3f59","first_seen":"2025-10-07T03:56:36.227686Z","last_seen":"2025-11-11T17:26:48.844465Z","times_seen":2,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-2530ebca.35b52316.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:22.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-2530ebca.35b52316.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:23 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ec9d9e73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=up0HJCdIyUTEQbcJtpknBqVOIjWgi%2BjJhRjIffhf9klCx%2BwpfD4rrcnnEkmNbfFFe0C2PWy68Crh8xeI3ywoBG0G33GqEurj\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e89584dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22027,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22027), with no line terminators","md5":"67777bc933c2646a19fd49a8edd00903","sha1":"89d24f03222e297d783efa2f13d60d20c966d321","sha256":"cc7c380bf2c255e7b6101c584c5067950cb3192323d49c44696ed55112afe5f3","sha512":"eb4a251aec990656867a499d66fc28472426442b242d47109ff05fecba0ed6d8717e1fed35fc6d5128cd77804dffd90cc8c1ca13e17451908e7a38c09a2e99da","ssdeep":"384:IId6aPHT1bqB+GEuJNGGxwZ6wWKe290T7:tRbwHEu7fwEqe290n","tlshash":"64a2b99ab2c1b42513ebf1a000af1505a1372198a801d4ddbff9f8d1e9a8a5d613ff7d","first_seen":"2025-10-07T03:56:36.464677Z","last_seen":"2025-11-11T17:26:48.846505Z","times_seen":3,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-4384e9ce.af740750.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:23.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-4384e9ce.af740750.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:24 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ba39f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p2ldCHKxgVfXKY0V5kbLTLvQkzggoYwUpNq1Qn4jBjwfE%2BQj6UHgZCY2%2FZz1iI%2BIo4VhRQrSoWXeoMXKyKCLp6OSYZc%2Ft0hq\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e8e79f3c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":38534,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (38534), with no line terminators","md5":"660b51c591a082c4878a66a8e461b4ab","sha1":"86162966603561a1086afa58e0f0a2de96f6791d","sha256":"6d868732ceaf28b01aa705b5f334c8cd934bc350c9952e7b02a22406fb71f1ba","sha512":"0dfd9265340cc790288081eab3d9e5698e59fa653b0c6ad12b1ca45951e4ee47a22e65ca32f6f808e676e4663b289a3fed7f82bdd8d4dde1b610b0a4c0c83ca9","ssdeep":"768:Q843UX68Leq7Sg3mNJTMyWGxCZ9TpR1C+7d3L0+yL:4EX68LeqVSJTiqCDTpj3J0","tlshash":"12037c12f4c7e57e09bab078401f1c1454621d99a04e814efe78d9e4baa9d3e363eb7c","first_seen":"2025-10-07T03:56:36.286792Z","last_seen":"2025-11-11T17:26:48.847353Z","times_seen":2,"resource_available":false,"data":null}},"time_used":580,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":393,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/js/chunk-vendors.b68947ec.js","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:14.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /js/chunk-vendors.b68947ec.js HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:15 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"211ba973d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=joTm0Zvym%2F71nnipp9CRaht%2F%2FeV1fGtsFFAg5j5s07N%2FbsXYyyeG49YFDlEZ5kT90vgPAjsYbQvdErr2yWne0zcLJQL0R9K2\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 99cf7e576efac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":629131,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11311)","md5":"df18ae4c445629fd1d1d7797dba43ac6","sha1":"1ff6c5e640b498ebdb44f4f6315cb2a8937d67ba","sha256":"c77c8ee7bb56162bc1423f69975640e4f47913fe3e1ff42cb5b49745755a7a74","sha512":"43294175ebb8b89e9dda5ee2131ee13e62d3ec3cf007327e537726b0adce2a0818a3b307f9bdd25a08b53093718c057019a8b5097ad14639da0815233fa2b152","ssdeep":"12288:ZbJ51BpOAAINzw21cHix9k+xZcoF7s2JDderZGB:ZbJLOHb/Qk+xWoF7s2FcGB","tlshash":"46d429c9718ab563579225f5403f290ab63e2b65680e8814fa51f4dabc78c6d8337f3c","first_seen":"2025-10-07T03:56:36.495001Z","last_seen":"2025-11-11T17:26:48.849172Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":1156,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-32e28c06.dd2fc9d5.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:19.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-32e28c06.dd2fc9d5.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:19 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ba39f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CP4zBLkRB4XSX91wXVMhCZNXdDneHK2edCmZ%2BCxJMaC3mrw2VuSj%2BwWxGDREy460OQWotFByCx6W6Ka1%2F4FmTQgEx03lCS7C\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e72bb38c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":10859,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (10851), with no line terminators","md5":"fa023b2c72c1fabbc79f62810dd257b4","sha1":"9fc38e7a567489879180a1ca9d38afd96820c7f1","sha256":"983bccbd2f204c11017567c18f671848ef517d0d1e087711f878e7fe00fbc953","sha512":"e593c6c4877a4ddc8cef695dd823580cc71dff5cd43de9fd7a3ec34063b5b4a99acda72cc73f46f6111a0d8265f2c1c0c43974a9ad0f1e3127da92f3f511fbd2","ssdeep":"192:QjoJhQjyYmvjcvX/HRyZE7eFdMeOJ+/dDo/7ZE7eNfmcFAYqD5DH16Oid3GJAh4f:VPlYmvjcvX/HRyZE7eFdMeOJ+/dDo/7m","tlshash":"5b22a9d1f6cc14292537ceacecc0fb954939635388801be3a47d65ac6e8f28fb56124e","first_seen":"2025-10-07T03:56:36.419098Z","last_seen":"2025-11-11T17:26:48.851876Z","times_seen":2,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":393,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1w2m.com/css/chunk-45a2ccc6.712605e5.css","fqdn":"1w2m.com","domain":"1w2m.com","tld":"com"},"ip":{"addr":"172.67.204.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://1w2m.com/","date":"2025-11-11T17:26:19.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1w2m.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 06:27:44 GMT","end":"Mon, 22 Dec 2025 07:26:22 GMT"},"fingerprint":{"sha1":"56:47:01:6E:AF:7D:5F:3F:A9:49:84:46:BD:03:02:D4:FC:64:AD:81","sha256":"1E:E4:9D:C1:8D:23:60:7F:0A:C5:30:57:FE:BE:3D:CE:31:6F:54:76:D7:C3:BB:EE:D8:59:38:91:C6:C4:C3:73"}}},"request":{"raw":"GET /css/chunk-45a2ccc6.712605e5.css HTTP/1.1\r\nHost: 1w2m.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1w2m.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 02:06:09 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ndate: Tue, 11 Nov 2025 17:26:20 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ba39f73d334dc1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZIaO%2F2NovD6HdhddU%2B0FrKAH%2Br%2BOjmMZAWWsu0hWRDCJd64IgjrHPXa9L5Mo0tSCcnys2I3JNE%2BwhjdWTEYBMXGswwCVZlPW\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 99cf7e753bcfc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":17723,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (17715), with no line terminators","md5":"0c2c6b9ac4400b826df476aaca7f5989","sha1":"bb98d9b760061716aeb212536273ca90627bd425","sha256":"91a07a073a4344598ba846c60e7da4f7d9e6f96c854b175dcf58245d06f7251c","sha512":"21a95b08eb7a4f753717023c7952e065c826481651c88f465b97c4ebfb11c72d08ef2d27d0c1f32254132b80c1ede09c6261d0ceba08a650508b96e15cad40a4","ssdeep":"96:P9XFrVIbVoYIj9QBTcCOFefZ5cmRFTfFkmgMF3S4i/FrwR0VD7SmUgKP9m08Nch7:lXVKejoJhfttvhyeN/","tlshash":"1a82fd61b548016e3077dedcf9d0ee9d4277e26384011b68b252a7744feb18b37a3b4a","first_seen":"2025-10-07T03:56:36.452727Z","last_seen":"2025-11-11T17:26:48.854188Z","times_seen":2,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":387,"receive":185,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"1w2m.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}