Report - 1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp

Report Overview

Submitted URL
1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
IP
94.130.10.163
ASN
#24940 Hetzner Online GmbH
Submitted
2024-04-25 06:15:25
Access
public
Website Title
1win
Final URL
1welkbv.com/v3/2458/external-marketing-india-game?lang=en&
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
1win-cdn.com	unknown	2022-12-12	2022-12-12	2024-04-18	513 B	634 B	154.197.121.128
www.google.no	25607	2001-02-26	2016-04-05	2024-04-24	587 B	578 B	172.217.21.163
1wtsso.life	unknown	unknown	No data	No data	1.5 kB	444 kB	190.115.24.78
region1.analytics.google.com	unknown	1997-09-15	2022-03-17	2024-04-23	2.8 kB	1.3 kB	216.239.32.36
1win.direct	unknown	2022-08-16	2022-08-16	2024-04-18	698 B	235 B	134.122.54.186
1welkbv.com	unknown	unknown	No data	No data	9.4 kB	689 kB	94.130.10.163
www.googletagmanager.com	75	2011-11-11	2013-05-22	2024-04-25	1.8 kB	520 kB	142.250.74.168

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	1win-cdn.com	Sinkholed
2024-04-24	medium	1wtsso.life	Sinkholed
2024-04-24	medium	1wtsso.life	Sinkholed
2024-04-24	medium	1wtsso.life	Sinkholed

ThreatFox

No alerts detected

JavaScript (21)

	URL	Size	First Seen	Last Seen
	1welkbv.com/v3/2458/external-marketing-india-game/assets/index-8ae9badb.js	149 kB	2024-04-25	2024-05-03
Pretty URL 1welkbv.com/v3/2458/external-marketing-india-game/assets/index-8ae9badb.js IP 94.130.10.163 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 08:15:31 Last Seen2024-05-03 08:25:53 Times Seen4 Hash 0214f25ac6fe077b4cb00b23eb75fe36 36ad9531ab46864c09f915d4e614c5f7b9e55851 a459421645fc39a0bfedb6b304c89e86fb3781e3d7e21fe13adf750fbf01394d Loading...

	unknown	468 B	2023-05-19	2024-05-03
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-19 10:04:18 Last Seen2024-05-03 14:08:48 Times Seen165 Hash f4aa10577822d528d7d95fbb8ce8d1f1 d9f3ad1a724192488e547dc9a46784badde74113 ffc6fc82ac2dd2be4163a30990ce2952502dfa4b88e7e52eb65ea20c9796929a Loading...

	unknown	287 B	2023-09-10	2024-05-03
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-10 00:55:10 Last Seen2024-05-03 14:08:48 Times Seen159 Hash 66822daf496a288ba191a460bf51c7f1 453c95b3b2b2ce229bd4d80c2d7970dc2708a6f3 75aec4091c9860658b914b7d7d07f6ed242a14102ea73dbaa236195fc8f2ae70 Loading...

	unknown	320 B	2024-04-25	2024-05-03
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 08:15:32 Last Seen2024-05-03 14:08:48 Times Seen10 Hash 2b18aeec9bf5b10fc112b55307c20140 865d1eaee49062b257e747372bb7a9c9196c95b7 f4b1aa1cd6c26cb12c7bee93581f3f63e4d9d99fc3b1f2dc7c148b5e4a32430a Loading...

	unknown	351 B	2023-11-19	2024-05-03
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-19 21:19:45 Last Seen2024-05-03 14:08:48 Times Seen11 Hash a235f44140440780f5c675186a6a33ad dc142b172e6fdf7da1894480766a438812f1c706 4d77fd2cb0b381da2865b06fcef7bb23cb1a456097347216116326eaae76aae5 Loading...

	www.googletagmanager.com/gtag/js?id=AW-16482547739&l=dataLayer&cx=c	249 kB	2024-04-25	2024-04-25
Pretty URL www.googletagmanager.com/gtag/js?id=AW-16482547739&l=dataLayer&cx=c IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 08:15:32 Last Seen2024-04-25 08:15:32 Times Seen2 Hash 5e2a49f7a75df7eb601aea8ecd2a391c 49533f35240379bdade0285c4136a9200d4f41ec 788d45a26c13a85d82eea56b090d5775f3844f8cd33708456e853b94f8f6a22c Loading...

	unknown	409 B	2023-03-10	2024-05-04
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 00:21:10 Last Seen2024-05-04 08:51:27 Times Seen1412 Hash efc54365d1ba6c4fb4bdf7ea1996bdbd 9f89f3485cd56eac910d9c0d6f9bd3b201074e24 da89215c040a91b80faf28d6030c58dab9d599794ef9bd1feba0fb01c621cf40 Loading...

	unknown	317 B	2024-04-25	2024-05-03
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 08:15:32 Last Seen2024-05-03 14:08:48 Times Seen10 Hash e9fe7cf10fc485b4a799637103165af7 44d71eff2240b2b91640137130267f9c0935ce50 2d58e0d47b9f3ce8a6eb7eaea7d3b80ec2667177f307ceab869a8d05688eebf9 Loading...

	unknown	351 B	2023-06-26	2024-05-03
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-26 22:52:58 Last Seen2024-05-03 14:08:48 Times Seen797 Hash 0673c7f330c1ac44ad83205bb517e3de 3890b0da1d481f37cee66b2f8d97a4ca2edf40b9 58cca9fb8425db78c1b9abd4e83fae44a378bf2eff7875d4e0d2154643139c13 Loading...

	unknown	320 B	2024-04-25	2024-05-03
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 08:15:32 Last Seen2024-05-03 14:08:48 Times Seen10 Hash a3dc02f9a446c1d0b92d1d255f6d6aca dc38346494ef01492ac98581b80e1a5d54c17cc4 0f50264484c77b2ca8495900cd9d92dea396e31dbd233e9f2b45262210b1a899 Loading...

	unknown	351 B	2024-04-25	2024-05-03
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 08:15:32 Last Seen2024-05-03 14:08:48 Times Seen10 Hash 6e5d8e7020d5ea8518ff418159b2c449 23c3d97d478a31792f7c8015ee996024d757e447 019fd2b2e2962821bba76ce4b655f57177e243d4cdb59b8abd54a31c98eb5bc9 Loading...

	www.googletagmanager.com/gtag/destination?id=DC-12688802&l=dataLayer&cx=c	200 kB	2024-04-25	2024-04-25
Pretty URL www.googletagmanager.com/gtag/destination?id=DC-12688802&l=dataLayer&cx=c IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 08:15:32 Last Seen2024-04-25 08:15:32 Times Seen2 Hash 08ecda21fb65c7d8d3ab3c23cd0b1357 e3c7049149e666d26c383173f90e857a634bb77b 2122a57dbc64e265a99614be712fe925347cc9ab3db7d6cda6d29d74bfabedbf Loading...

	1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp	3.0 kB	2023-10-24	2024-05-03
Pretty URL 1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp IP 94.130.10.163 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-10-24 17:39:51 Last Seen2024-05-03 14:08:48 Times Seen126 Hash b69442c8805fbe9fb0be0d9671d0acf7 0dbe79cf79574b95076c0b4eade7fc9314074b67 45ea98a4007c992d67da469da7d5f5d0ae34af0c390bce75873c0360215ce44c Loading...

	unknown	421 B	2023-03-12	2024-05-04
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 20:22:06 Last Seen2024-05-04 08:51:28 Times Seen1413 Hash dc37ec839376756d26f9c8925e173ac0 c7aff54b91a363e452e3338b3cf8441b3a82cbbb f139f19f43bcda296441234e4cb82550d94bde81758de7cf37bfe55df1c96717 Loading...

	unknown	199 B	2024-04-24	2024-04-26
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 21:28:57 Last Seen2024-04-26 06:20:54 Times Seen8 Hash 9e14010c13d8fbd809b3ea91b65b8cc4 200991bae5c610ed10b426fc97000cf755e0bd12 b9e1f71bd7c455480e28bea8cabb3e026820f3ead97b894bbdbc91e98f870909 Loading...

	unknown	320 B	2024-04-25	2024-05-03
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 08:15:32 Last Seen2024-05-03 14:08:48 Times Seen9 Hash 847af62d0cb678130fd7a8084f939f99 d5f6efd2037821f54d88bf1d7ef6f8650f02ebb0 fe74299e19a3cb50a36b7247ebced910ad35e35764897b465bd1467e62b23d44 Loading...

	1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp	500 B	2023-10-24	2024-05-03
Pretty URL 1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp IP 94.130.10.163 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-10-24 17:39:51 Last Seen2024-05-03 14:08:48 Times Seen126 Hash 4231b98643503d9e0e3074b85536dae7 4b3496ff695be3ce156b4f525e7ce3023bbb5a04 701b6e1c448f28dff6dd03ef945ca8dd1b3c4cb8f677ba62b86233763e4cee35 Loading...

	www.googletagmanager.com/gtm.js?id=GTM-KGKQDC7	363 kB	2024-04-25	2024-04-25
Pretty URL www.googletagmanager.com/gtm.js?id=GTM-KGKQDC7 IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 08:15:32 Last Seen2024-04-25 08:15:32 Times Seen2 Hash b2fd986d169834788ed95b1267753ffe 98d759efc43ee61f324f9b6a3b6ed91f39e29091 2bb87827619863524977e2eb36fe3780c61176941ab72e352a131ccc18d6bea7 Loading...

	unknown	347 B	2023-09-18	2024-05-03
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-18 10:51:18 Last Seen2024-05-03 14:08:48 Times Seen106 Hash dc24919eb26f2a63e544bd26e58a23a5 3811cea125d31352f3a20cca521d82d9a3469cb4 beb1db9cfddf40682243dee231991acb8b2a04a25c061d0a3ec489ba38355310 Loading...

	www.googletagmanager.com/gtag/js?id=G-548949LWLW&l=dataLayer&cx=c	258 kB	2024-04-25	2024-04-25
Pretty URL www.googletagmanager.com/gtag/js?id=G-548949LWLW&l=dataLayer&cx=c IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 08:15:32 Last Seen2024-04-25 08:15:32 Times Seen2 Hash 21ebb5dee31e3900ec9a85ca1ed072a4 b55ec538afda5840a192808997a4a5758b0083ba 6fbc607e3ac3b0f2d3ce5f13dcc7357f5d34c6aebb96858816eeb8bc20a7457a Loading...

		Size	First Seen	Last Seen
	#1 Eval - 0bf001dcdb310567c52654a935c4f92a	80 B	2023-03-26	2024-05-04
Pretty Observations First Seen2023-03-26 10:50:54 Last Seen2024-05-04 08:51:28 Times Seen746 Hash 0bf001dcdb310567c52654a935c4f92a fddc3d16a5af259bcfa6b87a02bde4e3bcdc7109 a3b73a3b1e36d2bfad6fe9530c9c943f28a99cbe84d0674b555d14c3ae26c780 Loading...

HTTP Transactions (30)

URL IP Response Size

1welkbv.com/v3/2458/external-marketing-india-game/img/logo/logo-1win.svg

94.130.10.163

200 OK

813 B

URL GET HTTP/2
1welkbv.com/v3/2458/external-marketing-india-game/img/logo/logo-1win.svg
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Certificate
IssuerLet's Encrypt
Subject1welkbv.com
Fingerprint37:D2:DB:53:42:FC:28:E2:05:44:58:E9:41:50:44:DC:C0:D6:78:4A
ValidityFri, 22 Mar 2024 13:34:33 GMT - Thu, 20 Jun 2024 13:34:32 GMT

File type
SVG Scalable Vector Graphics image
Size
813 B (813 bytes)
Hash
63e98a5afaba46c83f6bef94d342dce9
e072aed0418de20c80e9daf1985dacf99816dc4b
3cc48cc7988466d19b323285dc3cd9c54f638f4e610b7f00b03d40a312e6a10f

HTTP Headers

GET /v3/2458/external-marketing-india-game/img/logo/logo-1win.svg HTTP/1.1
Host: 1welkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-type: image/svg+xml
date: Thu, 25 Apr 2024 06:14:58 GMT
etag: "65fdab68-a4d"
last-modified: Fri, 22 Mar 2024 16:01:44 GMT
server: nginx/1.23.4
vary: Accept-Encoding
content-length: 813
X-Firefox-Spdy: h2

1welkbv.com/v3/2458/external-marketing-india-game/sprites/form-sprite.svg

94.130.10.163

200 OK

1.0 kB

URL GET HTTP/2
1welkbv.com/v3/2458/external-marketing-india-game/sprites/form-sprite.svg
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Certificate
IssuerLet's Encrypt
Subject1welkbv.com
Fingerprint37:D2:DB:53:42:FC:28:E2:05:44:58:E9:41:50:44:DC:C0:D6:78:4A
ValidityFri, 22 Mar 2024 13:34:33 GMT - Thu, 20 Jun 2024 13:34:32 GMT

File type
SVG Scalable Vector Graphics image
Size
1.0 kB (1010 bytes)
Hash
d2b31c0304cc259840aa7121d33e09c1
d0063496e9cf3980998bbf60225b6742e82c3de6
7fac6a360735f048385117afb469e559e28a63e3fd0b0800d0df07ad0e1a417b

HTTP Headers

GET /v3/2458/external-marketing-india-game/sprites/form-sprite.svg HTTP/1.1
Host: 1welkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-type: image/svg+xml
date: Thu, 25 Apr 2024 06:14:58 GMT
etag: "65fdab68-a62"
last-modified: Fri, 22 Mar 2024 16:01:44 GMT
server: nginx/1.23.4
vary: Accept-Encoding
content-length: 1010
X-Firefox-Spdy: h2

www.googletagmanager.com/gtm.js?id=GTM-KGKQDC7

142.250.74.168

200 OK

106 kB

URL GET HTTP/2
www.googletagmanager.com/gtm.js?id=GTM-KGKQDC7
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (50345)
Size
106 kB (105688 bytes)
Hash
b2fd986d169834788ed95b1267753ffe
98d759efc43ee61f324f9b6a3b6ed91f39e29091
2bb87827619863524977e2eb36fe3780c61176941ab72e352a131ccc18d6bea7

HTTP Headers

GET /gtm.js?id=GTM-KGKQDC7 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1welkbv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 06:14:59 GMT
expires: Thu, 25 Apr 2024 06:14:59 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 105688
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

1welkbv.com/v3/2458/external-marketing-india-game/assets/badge-bg-3db74804.svg

94.130.10.163

200 OK

584 B

URL GET HTTP/2
1welkbv.com/v3/2458/external-marketing-india-game/assets/badge-bg-3db74804.svg
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Certificate
IssuerLet's Encrypt
Subject1welkbv.com
Fingerprint37:D2:DB:53:42:FC:28:E2:05:44:58:E9:41:50:44:DC:C0:D6:78:4A
ValidityFri, 22 Mar 2024 13:34:33 GMT - Thu, 20 Jun 2024 13:34:32 GMT

File type
SVG Scalable Vector Graphics image
Size
584 B (584 bytes)
Hash
aca65741e89862dfa72ebcc3e7080b6f
c9af9d57c79972db3b99d6a33c951bbc8b45c593
3db748043ddd7da51a61350a0c726ffcc1adff9ef030cf9ffec11773706f63a9

HTTP Headers

GET /v3/2458/external-marketing-india-game/assets/badge-bg-3db74804.svg HTTP/1.1
Host: 1welkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1welkbv.com/v3/2458/external-marketing-india-game/assets/index-bdb7321b.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-type: image/svg+xml
date: Thu, 25 Apr 2024 06:14:59 GMT
etag: "65fdab6a-631"
last-modified: Fri, 22 Mar 2024 16:01:46 GMT
server: nginx/1.23.4
vary: Accept-Encoding
content-length: 584
X-Firefox-Spdy: h2

1welkbv.com/v3/2458/external-marketing-india-game/assets/star-3f49e448.svg

94.130.10.163

200 OK

431 B

URL GET HTTP/2
1welkbv.com/v3/2458/external-marketing-india-game/assets/star-3f49e448.svg
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Certificate
IssuerLet's Encrypt
Subject1welkbv.com
Fingerprint37:D2:DB:53:42:FC:28:E2:05:44:58:E9:41:50:44:DC:C0:D6:78:4A
ValidityFri, 22 Mar 2024 13:34:33 GMT - Thu, 20 Jun 2024 13:34:32 GMT

File type
SVG Scalable Vector Graphics image
Size
431 B (431 bytes)
Hash
c3179cf4367449f9ed609f973b66a8bb
1116ab99e5eca0d92d6d461d523a6de97c015832
3f49e4486b1ded1a0acfe351b613ae721fb302c45f3386b4375667ce5db7895c

HTTP Headers

GET /v3/2458/external-marketing-india-game/assets/star-3f49e448.svg HTTP/1.1
Host: 1welkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1welkbv.com/v3/2458/external-marketing-india-game/assets/index-bdb7321b.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-type: image/svg+xml
date: Thu, 25 Apr 2024 06:14:59 GMT
etag: "65fdab6a-1af"
last-modified: Fri, 22 Mar 2024 16:01:46 GMT
server: nginx/1.23.4
vary: Accept-Encoding
content-length: 431
X-Firefox-Spdy: h2

1welkbv.com/v3/2458/external-marketing-india-game/assets/Amiko-Regular-5aecdd7e.woff2

94.130.10.163

200 OK

63 kB

URL GET HTTP/2
1welkbv.com/v3/2458/external-marketing-india-game/assets/Amiko-Regular-5aecdd7e.woff2
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Certificate
IssuerLet's Encrypt
Subject1welkbv.com
Fingerprint37:D2:DB:53:42:FC:28:E2:05:44:58:E9:41:50:44:DC:C0:D6:78:4A
ValidityFri, 22 Mar 2024 13:34:33 GMT - Thu, 20 Jun 2024 13:34:32 GMT

File type
Web Open Font Format (Version 2), TrueType, length 63100, version 1.0
Size
63 kB (63100 bytes)
Hash
4ef3aae515dcc6a2f814cf5a45a61618
544ae4c34973ae13a6dbe0cdeeb08be388b2befb
5aecdd7e566522f9785b9fb72d958b05b6c352a75c58f76836852d4867b418ba

HTTP Headers

GET /v3/2458/external-marketing-india-game/assets/Amiko-Regular-5aecdd7e.woff2 HTTP/1.1
Host: 1welkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://1welkbv.com/v3/2458/external-marketing-india-game/assets/index-bdb7321b.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-type: font/woff2
date: Thu, 25 Apr 2024 06:14:59 GMT
etag: "65fdab6a-f67c"
last-modified: Fri, 22 Mar 2024 16:01:46 GMT
server: nginx/1.23.4
vary: Accept-Encoding
content-length: 63100
X-Firefox-Spdy: h2

1welkbv.com/v3/2458/external-marketing-india-game/assets/Amiko-SemiBold-7824e85a.woff2

94.130.10.163

200 OK

65 kB

URL GET HTTP/2
1welkbv.com/v3/2458/external-marketing-india-game/assets/Amiko-SemiBold-7824e85a.woff2
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Certificate
IssuerLet's Encrypt
Subject1welkbv.com
Fingerprint37:D2:DB:53:42:FC:28:E2:05:44:58:E9:41:50:44:DC:C0:D6:78:4A
ValidityFri, 22 Mar 2024 13:34:33 GMT - Thu, 20 Jun 2024 13:34:32 GMT

File type
Web Open Font Format (Version 2), TrueType, length 65008, version 1.0
Size
65 kB (65008 bytes)
Hash
d7b254a089cee2915b8000f174e19862
90c47d794b70a3b96fc85fd0383d389b9d3497b4
7824e85ac53eb68314220ae220fcd133828d1330629e9ca487165c64b1eadb20

HTTP Headers

GET /v3/2458/external-marketing-india-game/assets/Amiko-SemiBold-7824e85a.woff2 HTTP/1.1
Host: 1welkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://1welkbv.com/v3/2458/external-marketing-india-game/assets/index-bdb7321b.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-type: font/woff2
date: Thu, 25 Apr 2024 06:14:59 GMT
etag: "65fdab6a-fdf0"
last-modified: Fri, 22 Mar 2024 16:01:46 GMT
server: nginx/1.23.4
vary: Accept-Encoding
content-length: 65008
X-Firefox-Spdy: h2

1welkbv.com/v3/2458/external-marketing-india-game/assets/Amiko-Bold-c5bacd70.woff2

94.130.10.163

200 OK

64 kB

URL GET HTTP/2
1welkbv.com/v3/2458/external-marketing-india-game/assets/Amiko-Bold-c5bacd70.woff2
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Certificate
IssuerLet's Encrypt
Subject1welkbv.com
Fingerprint37:D2:DB:53:42:FC:28:E2:05:44:58:E9:41:50:44:DC:C0:D6:78:4A
ValidityFri, 22 Mar 2024 13:34:33 GMT - Thu, 20 Jun 2024 13:34:32 GMT

File type
Web Open Font Format (Version 2), TrueType, length 64376, version 1.0
Size
64 kB (64376 bytes)
Hash
a09604df70b7e1460da86b9cdd8f794c
4ac0b70fd797b236cdbcc3cddcbb5648acd951aa
c5bacd70adf5f6c9ffad266e581a3689bc945071a4c66a39676d743aabc3b9b7

HTTP Headers

GET /v3/2458/external-marketing-india-game/assets/Amiko-Bold-c5bacd70.woff2 HTTP/1.1
Host: 1welkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://1welkbv.com/v3/2458/external-marketing-india-game/assets/index-bdb7321b.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-type: font/woff2
date: Thu, 25 Apr 2024 06:14:59 GMT
etag: "65fdab6a-fb78"
last-modified: Fri, 22 Mar 2024 16:01:46 GMT
server: nginx/1.23.4
vary: Accept-Encoding
content-length: 64376
X-Firefox-Spdy: h2

1welkbv.com/v3/2458/external-marketing-india-game/assets/girl-tablet-1024-d19fe06a.avif

94.130.10.163

200 OK

25 kB

URL GET HTTP/2
1welkbv.com/v3/2458/external-marketing-india-game/assets/girl-tablet-1024-d19fe06a.avif
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Certificate
IssuerLet's Encrypt
Subject1welkbv.com
Fingerprint37:D2:DB:53:42:FC:28:E2:05:44:58:E9:41:50:44:DC:C0:D6:78:4A
ValidityFri, 22 Mar 2024 13:34:33 GMT - Thu, 20 Jun 2024 13:34:32 GMT

File type
ISO Media, AVIF Image
Size
25 kB (25331 bytes)
Hash
24c4b93cc5e4ebb6f4272e62d46fd83e
2b306914efad306f4fab602dbbd2069f99ccf65d
d19fe06a63037d93665f30fec9dcb140d95a79b8ff94da4330b111491fab6e4d

HTTP Headers

GET /v3/2458/external-marketing-india-game/assets/girl-tablet-1024-d19fe06a.avif HTTP/1.1
Host: 1welkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1welkbv.com/v3/2458/external-marketing-india-game/assets/index-bdb7321b.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-type: image/avif
date: Thu, 25 Apr 2024 06:14:59 GMT
etag: "65fdab6a-6325"
last-modified: Fri, 22 Mar 2024 16:01:46 GMT
server: nginx/1.23.4
vary: Accept-Encoding
X-Firefox-Spdy: h2

1win-cdn.com/domains/by/filters

154.197.121.128

200 OK

0 B

URL POST HTTP/2
1win-cdn.com/domains/by/filters
IP
154.197.121.128:443
ASN
#328608 Africa-on-Cloud-AS

Requested by
https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Certificate
IssuerGoogle Trust Services LLC
Subject1win-cdn.com
Fingerprint3F:C7:8F:FD:6E:53:38:E3:00:F5:41:B9:AE:6E:0F:5A:4B:2A:DC:64
ValidityTue, 05 Mar 2024 09:32:59 GMT - Mon, 03 Jun 2024 09:32:58 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

OPTIONS /domains/by/filters HTTP/1.1
Host: 1win-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://1welkbv.com/
Origin: https://1welkbv.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 204 No Content
date: Thu, 25 Apr 2024 06:14:59 GMT
access-control-allow-headers: content-type
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: *
vary: Origin, Access-Control-Request-Headers
x-frame-options: DENY
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=0G0RN6jYJw1EqO8nqznNdLsOXBtDRk2FVrk2X3k06rA-1714025699-1.0.1.1-Jn_UVl_V_svZxvigfsCHo5ZR2DGBu67oCNfhLbfdWwrtLzOBSni0.Tz3yL3oVKLcOD.0JnpKP8Pt7pTnqY_nSg; path=/; expires=Thu, 25-Apr-24 06:44:59 GMT; domain=.1win-cdn.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 879c322bef8156bf-OSL
X-Firefox-Spdy: h2

1welkbv.com/v3/2458/external-marketing-india-game/assets/index-bdb7321b.css

94.130.10.163

200 OK

206 kB

URL GET HTTP/2
1welkbv.com/v3/2458/external-marketing-india-game/assets/index-bdb7321b.css
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Certificate
IssuerLet's Encrypt
Subject1welkbv.com
Fingerprint37:D2:DB:53:42:FC:28:E2:05:44:58:E9:41:50:44:DC:C0:D6:78:4A
ValidityFri, 22 Mar 2024 13:34:33 GMT - Thu, 20 Jun 2024 13:34:32 GMT

File type
gzip compressed data
Size
206 kB (205563 bytes)
Hash
5f0e864e41102acc901d2aa8c7b29b4d
4a332830079eb1a9a9f230f771ec1d34a769e1e3
8824fcbf690fce9bd636a350ca15f99de38d9ed439621cb3a0a99fd4ae3cea82

HTTP Headers

GET /v3/2458/external-marketing-india-game/assets/index-bdb7321b.css HTTP/1.1
Host: 1welkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-type: text/css
date: Thu, 25 Apr 2024 06:14:58 GMT
etag: "65fdab6a-315ee"
last-modified: Fri, 22 Mar 2024 16:01:46 GMT
server: nginx/1.23.4
vary: Accept-Encoding
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=G-548949LWLW&l=dataLayer&cx=c

142.250.74.168

200 OK

90 kB

URL GET HTTP/3
www.googletagmanager.com/gtag/js?id=G-548949LWLW&l=dataLayer&cx=c
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT

File type
JavaScript source, ASCII text, with very long lines (5945)
Size
90 kB (90521 bytes)
Hash
21ebb5dee31e3900ec9a85ca1ed072a4
b55ec538afda5840a192808997a4a5758b0083ba
6fbc607e3ac3b0f2d3ce5f13dcc7357f5d34c6aebb96858816eeb8bc20a7457a

HTTP Headers

GET /gtag/js?id=G-548949LWLW&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1welkbv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 06:14:59 GMT
expires: Thu, 25 Apr 2024 06:14:59 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 90521
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.googletagmanager.com/gtag/destination?id=DC-12688802&l=dataLayer&cx=c

142.250.74.168

200 OK

73 kB

URL GET HTTP/3
www.googletagmanager.com/gtag/destination?id=DC-12688802&l=dataLayer&cx=c
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT

File type
JavaScript source, ASCII text, with very long lines (1763)
Size
73 kB (72906 bytes)
Hash
08ecda21fb65c7d8d3ab3c23cd0b1357
e3c7049149e666d26c383173f90e857a634bb77b
2122a57dbc64e265a99614be712fe925347cc9ab3db7d6cda6d29d74bfabedbf

HTTP Headers

GET /gtag/destination?id=DC-12688802&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1welkbv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 06:14:59 GMT
expires: Thu, 25 Apr 2024 06:14:59 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 72906
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

1welkbv.com/v3/2458/external-marketing-india-game/favicon/favicon.svg

94.130.10.163

200 OK

528 B

URL GET HTTP/2
1welkbv.com/v3/2458/external-marketing-india-game/favicon/favicon.svg
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Certificate
IssuerLet's Encrypt
Subject1welkbv.com
Fingerprint37:D2:DB:53:42:FC:28:E2:05:44:58:E9:41:50:44:DC:C0:D6:78:4A
ValidityFri, 22 Mar 2024 13:34:33 GMT - Thu, 20 Jun 2024 13:34:32 GMT

File type
SVG Scalable Vector Graphics image
Size
528 B (528 bytes)
Hash
d2260239c47a557dc50312dc01cbad3f
dac1c20799be1d52a444de7c1838d4e38fc06c93
da27421d59a3829fd6292f822eed7c6b1b7a745870d6b736dc67220627d9d656

HTTP Headers

GET /v3/2458/external-marketing-india-game/favicon/favicon.svg HTTP/1.1
Host: 1welkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Cookie: _gcl_au=1.1.543809098.1714025699
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-type: image/svg+xml
date: Thu, 25 Apr 2024 06:14:59 GMT
etag: "65fdab68-5b5"
last-modified: Fri, 22 Mar 2024 16:01:44 GMT
server: nginx/1.23.4
vary: Accept-Encoding
content-length: 528
X-Firefox-Spdy: h2

1welkbv.com/v3/2458/external-marketing-india-game/flags/flags.svg

94.130.10.163

200 OK

46 kB

URL GET HTTP/2
1welkbv.com/v3/2458/external-marketing-india-game/flags/flags.svg
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Certificate
IssuerLet's Encrypt
Subject1welkbv.com
Fingerprint37:D2:DB:53:42:FC:28:E2:05:44:58:E9:41:50:44:DC:C0:D6:78:4A
ValidityFri, 22 Mar 2024 13:34:33 GMT - Thu, 20 Jun 2024 13:34:32 GMT

File type
gzip compressed data
Size
46 kB (45847 bytes)
Hash
155467f38ab40339bea179fb608560bd
074818d0413ec58ead5ba9427bfbed5810c6a59c
f0a1375bf397dd71245f1ab6e8d6441387169d77465d2f137c3767b11f736912

HTTP Headers

GET /v3/2458/external-marketing-india-game/flags/flags.svg HTTP/1.1
Host: 1welkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-type: image/svg+xml
date: Thu, 25 Apr 2024 06:14:58 GMT
etag: "65fdab68-2ff4b"
last-modified: Fri, 22 Mar 2024 16:01:44 GMT
server: nginx/1.23.4
vary: Accept-Encoding
X-Firefox-Spdy: h2

www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-548949LWLW&cid=1608593346.1714025700&gtm=45je44o0v894728184z8894400803za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3lPl2l1&npa=1&z=1679157134

172.217.21.163

200 OK

42 B

URL GET HTTP/2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-548949LWLW&cid=1608593346.1714025700&gtm=45je44o0v894728184z8894400803za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3lPl2l1&npa=1&z=1679157134
IP
172.217.21.163:443
ASN
#15169 GOOGLE

Requested by
https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.no
Fingerprint4E:BD:F9:72:97:67:A2:4B:EE:E4:B0:03:CD:C8:F3:30:53:27:53:1D
ValidityMon, 18 Mar 2024 20:50:06 GMT - Mon, 10 Jun 2024 20:50:05 GMT

File type
GIF image data, version 89a, 1 x 1
Size
42 B (42 bytes)
Hash
d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

HTTP Headers

GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-548949LWLW&cid=1608593346.1714025700&gtm=45je44o0v894728184z8894400803za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3lPl2l1&npa=1&z=1679157134 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1welkbv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 25 Apr 2024 06:14:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

1wtsso.life/affiliate:link_visit?visit_domain=1welkbv.com&sub_ids=sub1%3D2v2ahut5mmssp

190.115.24.78

200 OK

22 B

URL GET HTTP/2
1wtsso.life/affiliate:link_visit?visit_domain=1welkbv.com&sub_ids=sub1%3D2v2ahut5mmssp
IP
190.115.24.78:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Certificate
IssuerLet's Encrypt
Subject1wtsso.life
FingerprintED:11:A9:B8:48:3F:E0:84:9D:82:E4:25:9F:C9:0D:03:D8:E4:CC:C0
ValidityFri, 19 Apr 2024 07:02:26 GMT - Thu, 18 Jul 2024 07:02:25 GMT

File type
ASCII text, with no line terminators
Size
22 B (22 bytes)
Hash
e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

OPTIONS /affiliate:link_visit?visit_domain=1welkbv.com&sub_ids=sub1%3D2v2ahut5mmssp HTTP/1.1
Host: 1wtsso.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-origin
Referer: https://1welkbv.com/
Origin: https://1welkbv.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: ddos-guard
date: Thu, 25 Apr 2024 06:14:59 GMT
content-type: text/plain; charset=utf-8
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Authorization, X-Origin
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-origin: https://1welkbv.com
access-control-expose-headers: Authorization
access-control-max-age: 7200
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
set-cookie: __ddg1_=0Ol2eSozQQGRlmeEywfF; Domain=.1wtsso.life; HttpOnly; Path=/; Expires=Fri, 25-Apr-2025 06:14:59 GMT
core-sticky=http://10.233.69.59:80; Path=/; HttpOnly
x-powered-by: Express
x-frame-options: ALLOW-FROM   ww.1win.run 1win.run www.1win.work 1win.work www.1w.run 1w.run www.1wip.best 1wip.best www.1wint.run 1wint.run www.1winr.run 1winr.run www.1wind.run 1wind.run www.1wins.run 1wins.run www.1w.fan 1w.fan www.1win.team 1win.team www.1win.partners 1win.partners 1wip.best www.1wip.best 1wint.run www.1wint.run 1winr.run www.1winr.run 1wind.run www.1wind.run 1wins.run www.1wins.run 1w.fan www.1w.fan, ALLOW-FROM 1win-partner.com  ww.1win.run 1win.run www.1win.work 1win.work www.1w.run 1w.run www.1wip.best 1wip.best www.1wint.run 1wint.run www.1winr.run 1winr.run www.1wind.run 1wind.run www.1wins.run 1wins.run www.1w.fan 1w.fan www.1win.team 1win.team www.1win.partners 1win.partners 1wip.best www.1wip.best 1wint.run www.1wint.run 1winr.run www.1winr.run 1wind.run www.1wind.run 1wins.run www.1wins.run 1w.fan www.1w.fan
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2

region1.analytics.google.com/g/collect?v=2&tid=G-548949LWLW&gtm=45je44o0v894728184z8894400803za200&_p=1714025698874&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1608593346.1714025700&ul=en-us&sr=1280x1024&pscdl=noapi&dp=%2Fv3%2F2458%2Fexternal-marketing-india-game&sid=1714025699&sct=1&seg=0&dl=https%3A%2F%2F1welkbv.com%2Fv3%2F2458%2Fexternal-marketing-india-game%3Flang%3Den%26sub1%3D2v2ahut5mmssp&dt=1win&_s=2&tfd=2388

216.239.32.36

204 No Content

0 B

URL POST HTTP/3
region1.analytics.google.com/g/collect?v=2&tid=G-548949LWLW&gtm=45je44o0v894728184z8894400803za200&_p=1714025698874&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1608593346.1714025700&ul=en-us&sr=1280x1024&pscdl=noapi&dp=%2Fv3%2F2458%2Fexternal-marketing-india-game&sid=1714025699&sct=1&seg=0&dl=https%3A%2F%2F1welkbv.com%2Fv3%2F2458%2Fexternal-marketing-india-game%3Flang%3Den%26sub1%3D2v2ahut5mmssp&dt=1win&_s=2&tfd=2388
IP
216.239.32.36:443
ASN
#15169 GOOGLE

Requested by
https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /g/collect?v=2&tid=G-548949LWLW&gtm=45je44o0v894728184z8894400803za200&_p=1714025698874&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1608593346.1714025700&ul=en-us&sr=1280x1024&pscdl=noapi&dp=%2Fv3%2F2458%2Fexternal-marketing-india-game&sid=1714025699&sct=1&seg=0&dl=https%3A%2F%2F1welkbv.com%2Fv3%2F2458%2Fexternal-marketing-india-game%3Flang%3Den%26sub1%3D2v2ahut5mmssp&dt=1win&_s=2&tfd=2388 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 417
Origin: https://1welkbv.com
DNT: 1
Connection: keep-alive
Referer: https://1welkbv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/3 204 No Content
access-control-allow-origin: https://1welkbv.com
date: Thu, 25 Apr 2024 06:15:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

region1.analytics.google.com/g/collect?v=2&tid=G-548949LWLW&gtm=45je44o0v894728184za200&_p=1714025698874&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1608593346.1714025700&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AEA&_s=3&dp=%2Fv3%2F2458%2Fexternal-marketing-india-game&dl=https%3A%2F%2F1welkbv.com%2Fv3%2F2458%2Fexternal-marketing-india-game%3Flang%3Den%26&dr=https%3A%2F%2F1welkbv.com%2Fv3%2F2458%2Fexternal-marketing-india-game%3Flang%3Den%26sub1%3D2v2ahut5mmssp&sid=1714025699&sct=1&seg=1&dt=1win&en=page_view&ep.page_url=https%3A%2F%2F1welkbv.com%2Fv3%2F2458%2Fexternal-marketing-india-game%3Flang%3Den%26sub1%3D2v2ahut5mmssp&tfd=7388

216.239.32.36

204 No Content

0 B

URL POST HTTP/3
region1.analytics.google.com/g/collect?v=2&tid=G-548949LWLW&gtm=45je44o0v894728184za200&_p=1714025698874&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1608593346.1714025700&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AEA&_s=3&dp=%2Fv3%2F2458%2Fexternal-marketing-india-game&dl=https%3A%2F%2F1welkbv.com%2Fv3%2F2458%2Fexternal-marketing-india-game%3Flang%3Den%26&dr=https%3A%2F%2F1welkbv.com%2Fv3%2F2458%2Fexternal-marketing-india-game%3Flang%3Den%26sub1%3D2v2ahut5mmssp&sid=1714025699&sct=1&seg=1&dt=1win&en=page_view&ep.page_url=https%3A%2F%2F1welkbv.com%2Fv3%2F2458%2Fexternal-marketing-india-game%3Flang%3Den%26sub1%3D2v2ahut5mmssp&tfd=7388
IP
216.239.32.36:443
ASN
#15169 GOOGLE

Requested by
https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /g/collect?v=2&tid=G-548949LWLW&gtm=45je44o0v894728184za200&_p=1714025698874&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1608593346.1714025700&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AEA&_s=3&dp=%2Fv3%2F2458%2Fexternal-marketing-india-game&dl=https%3A%2F%2F1welkbv.com%2Fv3%2F2458%2Fexternal-marketing-india-game%3Flang%3Den%26&dr=https%3A%2F%2F1welkbv.com%2Fv3%2F2458%2Fexternal-marketing-india-game%3Flang%3Den%26sub1%3D2v2ahut5mmssp&sid=1714025699&sct=1&seg=1&dt=1win&en=page_view&ep.page_url=https%3A%2F%2F1welkbv.com%2Fv3%2F2458%2Fexternal-marketing-india-game%3Flang%3Den%26sub1%3D2v2ahut5mmssp&tfd=7388 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1welkbv.com
DNT: 1
Connection: keep-alive
Referer: https://1welkbv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

HTTP/3 204 No Content
access-control-allow-origin: https://1welkbv.com
date: Thu, 25 Apr 2024 06:15:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

1wtsso.life/affiliate:link_visit?visit_domain=1welkbv.com&sub_ids=sub1%3D2v2ahut5mmssp

190.115.24.78

200 OK

10 kB

URL GET HTTP/2
1wtsso.life/affiliate:link_visit?visit_domain=1welkbv.com&sub_ids=sub1%3D2v2ahut5mmssp
IP
190.115.24.78:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Certificate
IssuerLet's Encrypt
Subject1wtsso.life
FingerprintED:11:A9:B8:48:3F:E0:84:9D:82:E4:25:9F:C9:0D:03:D8:E4:CC:C0
ValidityFri, 19 Apr 2024 07:02:26 GMT - Thu, 18 Jul 2024 07:02:25 GMT

File type
gzip compressed data, from Unix
Size
10 kB (9962 bytes)
Hash
e97e6165fed204c9a39861c2e5bc55d9
7f93e80806beefb2e10bfbd823286718cea44660
78e50c3ddcbe60259898414919c3650adbd26c976a96457bc19d719d33def2db

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /affiliate:link_visit?visit_domain=1welkbv.com&sub_ids=sub1%3D2v2ahut5mmssp HTTP/1.1
Host: 1wtsso.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-origin: 1welkbv.com
Origin: https://1welkbv.com
DNT: 1
Connection: keep-alive
Referer: https://1welkbv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: ddos-guard
date: Thu, 25 Apr 2024 06:15:00 GMT
content-type: application/json; charset=utf-8
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Authorization, X-Origin
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-origin: https://1welkbv.com
access-control-expose-headers: Authorization
access-control-max-age: 7200
etag: W/"25-Zj67mG54TfZ031q1ea2QwFUXWX4"
set-cookie: __ddg1_=WIZmVA8d0rvo2Ma7Ulwa; Domain=.1wtsso.life; HttpOnly; Path=/; Expires=Fri, 25-Apr-2025 06:15:00 GMT
core-sticky=http://10.233.107.107:80; Path=/; HttpOnly
x-powered-by: Express
x-frame-options: ALLOW-FROM   ww.1win.run 1win.run www.1win.work 1win.work www.1w.run 1w.run www.1wip.best 1wip.best www.1wint.run 1wint.run www.1winr.run 1winr.run www.1wind.run 1wind.run www.1wins.run 1wins.run www.1w.fan 1w.fan www.1win.team 1win.team www.1win.partners 1win.partners 1wip.best www.1wip.best 1wint.run www.1wint.run 1winr.run www.1winr.run 1wind.run www.1wind.run 1wins.run www.1wins.run 1w.fan www.1w.fan, ALLOW-FROM 1win-partner.com  ww.1win.run 1win.run www.1win.work 1win.work www.1w.run 1w.run www.1wip.best 1wip.best www.1wint.run 1wint.run www.1winr.run 1winr.run www.1wind.run 1wind.run www.1wins.run 1wins.run www.1w.fan 1w.fan www.1win.team 1win.team www.1win.partners 1win.partners 1wip.best www.1wip.best 1wint.run www.1wint.run 1winr.run www.1winr.run 1wind.run www.1wind.run 1wins.run www.1wins.run 1w.fan www.1w.fan
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2

1wtsso.life/

190.115.24.78

200 OK

430 kB

URL GET HTTP/2
1wtsso.life/
IP
190.115.24.78:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Certificate
IssuerLet's Encrypt
Subject1wtsso.life
FingerprintED:11:A9:B8:48:3F:E0:84:9D:82:E4:25:9F:C9:0D:03:D8:E4:CC:C0
ValidityFri, 19 Apr 2024 07:02:26 GMT - Thu, 18 Jul 2024 07:02:25 GMT

File type

Size
430 kB (429544 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 1wtsso.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1welkbv.com/
Origin: https://1welkbv.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg1_=02tK2LmIBvGt9e83IdzX; Domain=.1wtsso.life; HttpOnly; Path=/; Expires=Fri, 25-Apr-2025 06:14:59 GMT
date: Thu, 25 Apr 2024 06:14:59 GMT
content-type: text/html; charset=utf-8
x-request-id: kTYBw5hHzaapQqx4
vary: Origin
access-control-allow-origin: https://1welkbv.com
access-control-allow-credentials: true
x-match-domain: 1welkbv.com
x-frame-options: ALLOW-FROM   ww.1win.run 1win.run www.1win.work 1win.work www.1w.run 1w.run www.1wip.best 1wip.best www.1wint.run 1wint.run www.1winr.run 1winr.run www.1wind.run 1wind.run www.1wins.run 1wins.run www.1w.fan 1w.fan www.1win.team 1win.team www.1win.partners 1win.partners 1wip.best www.1wip.best 1wint.run www.1wint.run 1winr.run www.1winr.run 1wind.run www.1wind.run 1wins.run www.1wins.run 1w.fan www.1w.fan, ALLOW-FROM 1win-partner.com  ww.1win.run 1win.run www.1win.work 1win.work www.1w.run 1w.run www.1wip.best 1wip.best www.1wint.run 1wint.run www.1winr.run 1winr.run www.1wind.run 1wind.run www.1wins.run 1wins.run www.1w.fan 1w.fan www.1win.team 1win.team www.1win.partners 1win.partners 1wip.best www.1wip.best 1wint.run www.1wint.run 1winr.run www.1winr.run 1wind.run www.1wind.run 1wins.run www.1wins.run 1w.fan www.1w.fan
content-encoding: gzip
X-Firefox-Spdy: h2

1win.direct/v4/socket.io/?Language=en&xorigin=https%3A%2F%2F1welkbv.com%2Fv3%2F2458%2Fexternal-marketing-india-game%3Flang%3Den%26sub1%3D2v2ahut5mmssp&EIO=4&transport=websocket

134.122.54.186

101 Switching Protocols

0 B

URL GET HTTP/1.1
1win.direct/v4/socket.io/?Language=en&xorigin=https%3A%2F%2F1welkbv.com%2Fv3%2F2458%2Fexternal-marketing-india-game%3Flang%3Den%26sub1%3D2v2ahut5mmssp&EIO=4&transport=websocket
IP
134.122.54.186:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Certificate
IssuerLet's Encrypt
Subject*.1win.direct
Fingerprint52:A8:ED:F5:F8:3D:CF:F0:55:C1:2A:96:EA:32:49:27:6C:D8:26:27
ValiditySun, 17 Mar 2024 06:46:18 GMT - Sat, 15 Jun 2024 06:46:17 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /v4/socket.io/?Language=en&xorigin=https%3A%2F%2F1welkbv.com%2Fv3%2F2458%2Fexternal-marketing-india-game%3Flang%3Den%26sub1%3D2v2ahut5mmssp&EIO=4&transport=websocket HTTP/1.1
Host: 1win.direct
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://1welkbv.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: CF4ZCh0fgBW7RpvXf3WenA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Sec-Websocket-Accept: U24Td4aIRuF7Q5//c2KY8b2FMJ8=
Sec-Websocket-Extensions: permessage-deflate
Set-Cookie: core-sticky=1727b18126aa5ee2; Path=/; HttpOnly
Upgrade: websocket

1welkbv.com/v3/2458/external-marketing-india-game/favicon/android-icon-512x512.png

94.130.10.163

200 OK

11 kB

URL GET HTTP/2
1welkbv.com/v3/2458/external-marketing-india-game/favicon/android-icon-512x512.png
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Certificate
IssuerLet's Encrypt
Subject1welkbv.com
Fingerprint37:D2:DB:53:42:FC:28:E2:05:44:58:E9:41:50:44:DC:C0:D6:78:4A
ValidityFri, 22 Mar 2024 13:34:33 GMT - Thu, 20 Jun 2024 13:34:32 GMT

File type
PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Size
11 kB (11072 bytes)
Hash
822df36448d97877853abf2cce421ddb
be6c97c312a28bd1a458e90cdaff592e38163f5e
8707e7b56f89a25ba382128e12ba37988d4afe442f33bc3a5b34a2a04a692667

HTTP Headers

GET /v3/2458/external-marketing-india-game/favicon/android-icon-512x512.png HTTP/1.1
Host: 1welkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Cookie: _gcl_au=1.1.543809098.1714025699
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-type: image/png
date: Thu, 25 Apr 2024 06:14:59 GMT
etag: "65fdab68-2b40"
last-modified: Fri, 22 Mar 2024 16:01:44 GMT
server: nginx/1.23.4
vary: Accept-Encoding
X-Firefox-Spdy: h2

1welkbv.com/v3/2458/external-marketing-india-game/assets/racket-left-tablet-768-2a1536de.avif

94.130.10.163

200 OK

6.5 kB

URL GET HTTP/2
1welkbv.com/v3/2458/external-marketing-india-game/assets/racket-left-tablet-768-2a1536de.avif
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Certificate
IssuerLet's Encrypt
Subject1welkbv.com
Fingerprint37:D2:DB:53:42:FC:28:E2:05:44:58:E9:41:50:44:DC:C0:D6:78:4A
ValidityFri, 22 Mar 2024 13:34:33 GMT - Thu, 20 Jun 2024 13:34:32 GMT

File type
ISO Media, AVIF Image
Size
6.5 kB (6470 bytes)
Hash
02bb2b0662747cc7f190510665bc2766
b8eef192d0d2f6d635d763f6c276b9d4cd1d6181
2a1536dec00b0ec3d3063400280ea1290f056e4f65a38d0cf3d81232ec2fe74f

HTTP Headers

GET /v3/2458/external-marketing-india-game/assets/racket-left-tablet-768-2a1536de.avif HTTP/1.1
Host: 1welkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1welkbv.com/v3/2458/external-marketing-india-game/assets/index-bdb7321b.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-type: image/avif
date: Thu, 25 Apr 2024 06:14:59 GMT
etag: "65fdab6a-1946"
last-modified: Fri, 22 Mar 2024 16:01:46 GMT
server: nginx/1.23.4
vary: Accept-Encoding
X-Firefox-Spdy: h2

region1.analytics.google.com/g/collect?v=2&tid=G-548949LWLW&gtm=45je44o0v894728184z8894400803za200&_p=1714025698874&_gaz=1&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1608593346.1714025700&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&dp=%2Fv3%2F2458%2Fexternal-marketing-india-game&sid=1714025699&sct=1&seg=0&dl=https%3A%2F%2F1welkbv.com%2Fv3%2F2458%2Fexternal-marketing-india-game%3Flang%3Den%26sub1%3D2v2ahut5mmssp&dt=1win&en=page_view&_fv=1&_nsi=1&_ss=1&ep.page_url=https%3A%2F%2F1welkbv.com%2Fv3%2F2458%2Fexternal-marketing-india-game%3Flang%3Den%26sub1%3D2v2ahut5mmssp&tfd=1030

216.239.32.36

204 No Content

0 B

URL POST HTTP/2
region1.analytics.google.com/g/collect?v=2&tid=G-548949LWLW&gtm=45je44o0v894728184z8894400803za200&_p=1714025698874&_gaz=1&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1608593346.1714025700&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&dp=%2Fv3%2F2458%2Fexternal-marketing-india-game&sid=1714025699&sct=1&seg=0&dl=https%3A%2F%2F1welkbv.com%2Fv3%2F2458%2Fexternal-marketing-india-game%3Flang%3Den%26sub1%3D2v2ahut5mmssp&dt=1win&en=page_view&_fv=1&_nsi=1&_ss=1&ep.page_url=https%3A%2F%2F1welkbv.com%2Fv3%2F2458%2Fexternal-marketing-india-game%3Flang%3Den%26sub1%3D2v2ahut5mmssp&tfd=1030
IP
216.239.32.36:443
ASN
#15169 GOOGLE

Requested by
https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /g/collect?v=2&tid=G-548949LWLW&gtm=45je44o0v894728184z8894400803za200&_p=1714025698874&_gaz=1&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1608593346.1714025700&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&dp=%2Fv3%2F2458%2Fexternal-marketing-india-game&sid=1714025699&sct=1&seg=0&dl=https%3A%2F%2F1welkbv.com%2Fv3%2F2458%2Fexternal-marketing-india-game%3Flang%3Den%26sub1%3D2v2ahut5mmssp&dt=1win&en=page_view&_fv=1&_nsi=1&_ss=1&ep.page_url=https%3A%2F%2F1welkbv.com%2Fv3%2F2458%2Fexternal-marketing-india-game%3Flang%3Den%26sub1%3D2v2ahut5mmssp&tfd=1030 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1welkbv.com
DNT: 1
Connection: keep-alive
Referer: https://1welkbv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

HTTP/2 204 No Content
access-control-allow-origin: https://1welkbv.com
date: Thu, 25 Apr 2024 06:15:00 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

1welkbv.com/v3/2458/external-marketing-india-game/assets/racket-right-tablet-1024-e8e95cbf.avif

94.130.10.163

200 OK

14 kB

URL GET HTTP/2
1welkbv.com/v3/2458/external-marketing-india-game/assets/racket-right-tablet-1024-e8e95cbf.avif
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Certificate
IssuerLet's Encrypt
Subject1welkbv.com
Fingerprint37:D2:DB:53:42:FC:28:E2:05:44:58:E9:41:50:44:DC:C0:D6:78:4A
ValidityFri, 22 Mar 2024 13:34:33 GMT - Thu, 20 Jun 2024 13:34:32 GMT

File type
ISO Media, AVIF Image
Size
14 kB (14197 bytes)
Hash
6dcc68dc6324a026ab508bff5768f692
b6195dbdb54faeb1c282251b078df740934f7130
e8e95cbff2326f2d86274faff7316bd42788a97692e99666fe011a3f251a2521

HTTP Headers

GET /v3/2458/external-marketing-india-game/assets/racket-right-tablet-1024-e8e95cbf.avif HTTP/1.1
Host: 1welkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1welkbv.com/v3/2458/external-marketing-india-game/assets/index-bdb7321b.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-type: image/avif
date: Thu, 25 Apr 2024 06:14:59 GMT
etag: "65fdab6a-3775"
last-modified: Fri, 22 Mar 2024 16:01:46 GMT
server: nginx/1.23.4
vary: Accept-Encoding
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=AW-16482547739&l=dataLayer&cx=c

142.250.74.168

200 OK

249 kB

URL GET HTTP/3
www.googletagmanager.com/gtag/js?id=AW-16482547739&l=dataLayer&cx=c
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT

File type
JavaScript source, ASCII text, with very long lines (4179)
Size
249 kB (248726 bytes)
Hash
5e2a49f7a75df7eb601aea8ecd2a391c
49533f35240379bdade0285c4136a9200d4f41ec
788d45a26c13a85d82eea56b090d5775f3844f8cd33708456e853b94f8f6a22c

HTTP Headers

GET /gtag/js?id=AW-16482547739&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1welkbv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 06:14:59 GMT
expires: Thu, 25 Apr 2024 06:14:59 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 86508
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

1welkbv.com/v3/2458/external-marketing-india-game/assets/ball-tablet-1024-2cf1b1d8.avif

94.130.10.163

200 OK

9.3 kB

URL GET HTTP/2
1welkbv.com/v3/2458/external-marketing-india-game/assets/ball-tablet-1024-2cf1b1d8.avif
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Certificate
IssuerLet's Encrypt
Subject1welkbv.com
Fingerprint37:D2:DB:53:42:FC:28:E2:05:44:58:E9:41:50:44:DC:C0:D6:78:4A
ValidityFri, 22 Mar 2024 13:34:33 GMT - Thu, 20 Jun 2024 13:34:32 GMT

File type
ISO Media, AVIF Image
Size
9.3 kB (9285 bytes)
Hash
0b4fca4960e45bc16364d28c258a30e1
914a4e25ef34b5650eacbf7aaa85db8fea6dba62
2cf1b1d8eb61b4f2cf3276106c97f25a4bd2e8bdecbdb0a878f9c3d1f19bb3fb

HTTP Headers

GET /v3/2458/external-marketing-india-game/assets/ball-tablet-1024-2cf1b1d8.avif HTTP/1.1
Host: 1welkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1welkbv.com/v3/2458/external-marketing-india-game/assets/index-bdb7321b.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-type: image/avif
date: Thu, 25 Apr 2024 06:14:59 GMT
etag: "65fdab6a-2445"
last-modified: Fri, 22 Mar 2024 16:01:46 GMT
server: nginx/1.23.4
vary: Accept-Encoding
X-Firefox-Spdy: h2

1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp

94.130.10.163

200 OK

22 kB

URL User Request GET HTTP/2
1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Certificate
IssuerLet's Encrypt
Subject1welkbv.com
Fingerprint37:D2:DB:53:42:FC:28:E2:05:44:58:E9:41:50:44:DC:C0:D6:78:4A
ValidityFri, 22 Mar 2024 13:34:33 GMT - Thu, 20 Jun 2024 13:34:32 GMT

File type

Size
22 kB (22326 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp HTTP/1.1
Host: 1welkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-type: text/html
date: Thu, 25 Apr 2024 06:14:58 GMT
etag: "65fdab6a-5736"
last-modified: Fri, 22 Mar 2024 16:01:46 GMT
server: nginx/1.23.4
vary: Accept-Encoding
X-Firefox-Spdy: h2

1welkbv.com/v3/2458/external-marketing-india-game/assets/index-8ae9badb.js

94.130.10.163

200 OK

149 kB

URL GET HTTP/2
1welkbv.com/v3/2458/external-marketing-india-game/assets/index-8ae9badb.js
IP
94.130.10.163:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Certificate
IssuerLet's Encrypt
Subject1welkbv.com
Fingerprint37:D2:DB:53:42:FC:28:E2:05:44:58:E9:41:50:44:DC:C0:D6:78:4A
ValidityFri, 22 Mar 2024 13:34:33 GMT - Thu, 20 Jun 2024 13:34:32 GMT

File type

Size
149 kB (148781 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /v3/2458/external-marketing-india-game/assets/index-8ae9badb.js HTTP/1.1
Host: 1welkbv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1welkbv.com/v3/2458/external-marketing-india-game?lang=en&sub1=2v2ahut5mmssp
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-type: application/javascript
date: Thu, 25 Apr 2024 06:14:58 GMT
etag: "65fdab6a-2452d"
last-modified: Fri, 22 Mar 2024 16:01:46 GMT
server: nginx/1.23.4
vary: Accept-Encoding
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (21)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by