{"report_id":"00a9638a-215a-4eef-8117-b382e6e9b980","version":6,"status":"done","tags":[],"date":"2025-09-04T13:25:23Z","url":{"schema":"http","addr":"gwbo98x.space/","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"gwbo98x.space/","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"title":"GET-X"},"submit":{"url":{"schema":"http","addr":"gwbo98x.space/","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-09T13:25:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"gwbo98x.space","ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":33,"request_count":33,"received_data":1535586,"sent_data":23303,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"gx.webim.ru","ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"domain_registered":"2006-09-29","domain_rank":0,"first_seen":"2024-01-26T10:34:55Z","last_seen":"2025-08-19T01:32:18.263087Z","alert_count":0,"request_count":1,"received_data":322,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gwbo98x.space/","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd84fa657a001622ac22bce982d43bb1","sha1":"67887186b104572d42c41db112d67d710d9bdf88","sha256":"8569ee0622b8babc9f8b73414385321641165e5c9e83a7219122ad5467035698","sha512":"8cecee69741e0998c660e60cc471240de5768791c0d6ff56bd909bade34338a9e3ce27f3f5c4d4a53bd7e0638c6103c75805aa254199c674a55b456c0410cc01","ssdeep":"","tlshash":"8d51b6bae029aa3eb015199c74053340584c9f7f60ee3e64e4c6d764bc0b39f2eb1699","size":2761,"data":"","first_seen":"2025-09-04T13:25:01.09898Z","last_seen":"2025-09-04T16:11:26.414431Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/js/pwa-load-event.js","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f463b05f25296c1e185cc82087291f6e","sha1":"d15dfa009eaeeaaf36af83b20ace25714adbc583","sha256":"3f5bcf295bac81715b4413d640843ee19600f6a17c96503038c6a4193c331865","sha512":"5ecd0baa189383e24afadcbe391266fac63cdcdcb7da68ab1371168fae81f05f0140b4dcd86bc4cc59f4ebb3f5949e94b302f05de00942886fe3060436ae03bc","ssdeep":"","tlshash":"64e02b7483fc55b808e182b75f47bb15116721a77068d990c1871906f8d148780a2fd2","size":375,"data":"","first_seen":"2024-08-19T15:07:41.99372Z","last_seen":"2026-04-15T02:03:05.836861Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/cryptojs-aes-format.js","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6bc38f77922eaa6f1b23716034b4a2e","sha1":"db781b1e30c4f2a1d63d47054f0903c463cf01ab","sha256":"9ca00bddae85e30d59672da0089ea5e132df97d75a92f42114fe1befbaeaf32d","sha512":"0ad7c00c1564d77f8463dfc81003c0d6cd6ada4e3d01094331f72847f17718e4a6b2c7a2a0bcbd96a1107bc6cb9bcb1721e7b2968ae4544595ab98d39bb30c82","ssdeep":"","tlshash":"163177407debb4c287e8e1d50435a044f67b7a0ab1558ef3aa5aa404ffedf3006326e4","size":1494,"data":"","first_seen":"2023-03-07T18:27:54Z","last_seen":"2026-08-07T16:57:51.090464Z","times_seen":717,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/js/fp2.min.js","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"02087a3f4f46b15bc198570d800bff41","sha1":"e59f5e3521d8c60e5772de1f65c90e5b87d9eb9e","sha256":"e753042decd90a96d0636a7df16df556860af92ca09ac37f0f6ab1d574acd1f1","sha512":"2c733c348e26c0b400befd5ccac6734eb06a0ca0c8c638f8d3a66afd75ea5860c6cfd3a913ba6dd6824bd9c629c2f28d14204efa625b10fa8fd9b366ba82c968","ssdeep":"768:J2N6EbuZaWRhGT8e20R5J++t6cOrVrzib:oxuZaWRhGoF0R5UVra","tlshash":"e6f21b96b2e8373c8143b063394bec15fb799495e784808a5e2d4180f8758e9e77bdf8","size":34877,"data":"","first_seen":"2023-07-23T18:22:17Z","last_seen":"2026-06-26T20:23:29.90284Z","times_seen":1217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/cryptojs-aes.min.js?v=1","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd93b7f0987a614bc17698503bcb6af9","sha1":"68a66448326499ff34c75bf31e2769b278584e0c","sha256":"8d4fae1a37a5b5338c889d0897b50024194b4d3ae94940e7e42c1c1423a1183e","sha512":"e3b87dfe10c0e3f3d801a85ae9c654a74eac22c2a93a757568a0d2b13755c36aeb5f9337e94a21db4ef2d1f0f1cfb98fccbbb0151d5cdf8d967730df96bfde98","ssdeep":"192:9BIGDmDm90mP9z8Ui015lN1I5rI2Tru6hMJFmHV+mdpwIfyAaYfKnNVYkUUFJZm3:9yiB0ez8UiIX1SrTegsEHJuI+y8Z7AX","tlshash":"625297c936edb94263963028587f6017b86b28b6945c4824f29cd4ddff9899dc03ae3c","size":13722,"data":"","first_seen":"2024-11-30T18:08:34.076577Z","last_seen":"2026-06-26T20:23:29.818692Z","times_seen":1206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/ls-cdn.amplitude/plugin-session-replay-browser-1.4.0-min.js.gz","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c19b1b5d91c8d683b1310562d9c4a225","sha1":"4d45dcac5c6a88e10052f4e356b2170c20413441","sha256":"bb5779145f1ebdcdee053876a4ed060174dda4656978972304c79ddd5f36dac4","sha512":"3a4e8d2e8f5d9a3b45c08ce99374c149a5b67d04d016edfe6259dfbbba948a049301c0cfa5f9bf334cb93b9b4a3558cffa725c166a943c90834c8d2237a1a21c","ssdeep":"1536:Ask/3qTBpVX0Ib6vhb2pJkuppl5METErM2jnpkDtoT1JaM18PIQunrr9gltn2BE/:IqBfX046vhb2pKMQt1Jawi697w","tlshash":"4ec329deb397b033539355a980bb0101b73a6a19300d4464f62ad9ea3c7d847a277fbd","size":126923,"data":"","first_seen":"2025-08-09T06:39:58.991299Z","last_seen":"2026-03-24T13:49:06.781634Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/_nuxt/DP5Ff1Si.js","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4af963b580fa40b3fe3e0389b0c34049","sha1":"e2ce8a83352b251395deaf758b0b4d7c055af582","sha256":"ce0ad4ff994426e83d407fef173f7fecbd0cb2381fad17d1f6f70b63d6ef77aa","sha512":"a3ce2dd160a1d0663458a1f1d9db604209bc4f408590a10c7f06e5781458e81a15311658659da06cb891b35fef860f3adaa7b63d139984203ef5b44b14103b82","ssdeep":"6144:4VY31DWkAnE4GrcwQpRoysvWXQfK5xf4wJPTOMnFmOCWOwDWjmbvnNUDfgKnYAHD:4CYkAEVQLoyifKzf4sSmFyWOwDR84KnF","tlshash":"61a45ad971d6b02213e619e4907b0106f3392a54384ed4e8f16daeeb3d7680a91b7f7c","size":484488,"data":"","first_seen":"2025-09-04T13:25:01.0554Z","last_seen":"2025-09-04T16:11:26.348922Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"gwbo98x.space/js/pwa-load-event.js","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:09.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /js/pwa-load-event.js HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/\r\nCookie: __ddg8_=FcXpKCcHDqd0HdjO; __ddg10_=1756992300; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=lt2IX7yd1fWfdil9; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:09 GMT\n__ddg10_=1756992309; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:09 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:09 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: W/\"68b97987-177\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":375,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"f463b05f25296c1e185cc82087291f6e","sha1":"d15dfa009eaeeaaf36af83b20ace25714adbc583","sha256":"3f5bcf295bac81715b4413d640843ee19600f6a17c96503038c6a4193c331865","sha512":"5ecd0baa189383e24afadcbe391266fac63cdcdcb7da68ab1371168fae81f05f0140b4dcd86bc4cc59f4ebb3f5949e94b302f05de00942886fe3060436ae03bc","ssdeep":"","tlshash":"64e02b7483fc55b808e182b75f47bb15116721a77068d990c1871906f8d148780a2fd2","first_seen":"2024-08-19T15:07:41.99372Z","last_seen":"2026-04-15T02:03:05.836861Z","times_seen":94,"resource_available":true,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/ls-cdn.amplitude/plugin-session-replay-browser-1.4.0-min.js.gz","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:09.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /ls-cdn.amplitude/plugin-session-replay-browser-1.4.0-min.js.gz HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/\r\nCookie: __ddg8_=FcXpKCcHDqd0HdjO; __ddg10_=1756992300; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=pa5sBunjHtbGNkEi; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:09 GMT\n__ddg10_=1756992309; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:09 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:09 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 03 Sep 2025 02:16:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 07 Jun 2024 21:58:38 GMT\r\netag: W/\"ead49d69bc7839b0b873b096d418e1ea\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nx-amz-version-id: a9eB74QCYmN.zM7i5ckvNX3RYMk8LisI\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: AMS58-P4\r\nx-amz-cf-id: 6R40BVTnVDD88Zc1u8CRVDBCw8Z5t3Y6cHXU6zRw7FzBO3nubrMkpg==\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nvary: Accept-Encoding\r\nage: 126497\r\ncontent-length: 36570\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":126923,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c19b1b5d91c8d683b1310562d9c4a225","sha1":"4d45dcac5c6a88e10052f4e356b2170c20413441","sha256":"bb5779145f1ebdcdee053876a4ed060174dda4656978972304c79ddd5f36dac4","sha512":"3a4e8d2e8f5d9a3b45c08ce99374c149a5b67d04d016edfe6259dfbbba948a049301c0cfa5f9bf334cb93b9b4a3558cffa725c166a943c90834c8d2237a1a21c","ssdeep":"1536:Ask/3qTBpVX0Ib6vhb2pJkuppl5METErM2jnpkDtoT1JaM18PIQunrr9gltn2BE/:IqBfX046vhb2pKMQt1Jawi697w","tlshash":"4ec329deb397b033539355a980bb0101b73a6a19300d4464f62ad9ea3c7d847a277fbd","first_seen":"2025-08-09T06:39:58.991299Z","last_seen":"2026-03-24T13:49:06.781634Z","times_seen":48,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/_nuxt/DP5Ff1Si.js","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:09.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /_nuxt/DP5Ff1Si.js HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/\r\nCookie: __ddg8_=FcXpKCcHDqd0HdjO; __ddg10_=1756992300; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=mWSeJSqxNwoPr6fy; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:09 GMT\n__ddg10_=1756992309; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:09 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:09 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-76488\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":484488,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (47580)","md5":"4af963b580fa40b3fe3e0389b0c34049","sha1":"e2ce8a83352b251395deaf758b0b4d7c055af582","sha256":"ce0ad4ff994426e83d407fef173f7fecbd0cb2381fad17d1f6f70b63d6ef77aa","sha512":"a3ce2dd160a1d0663458a1f1d9db604209bc4f408590a10c7f06e5781458e81a15311658659da06cb891b35fef860f3adaa7b63d139984203ef5b44b14103b82","ssdeep":"6144:4VY31DWkAnE4GrcwQpRoysvWXQfK5xf4wJPTOMnFmOCWOwDWjmbvnNUDfgKnYAHD:4CYkAEVQLoyifKzf4sSmFyWOwDR84KnF","tlshash":"61a45ad971d6b02213e619e4907b0106f3392a54384ed4e8f16daeeb3d7680a91b7f7c","first_seen":"2025-09-04T13:25:01.0554Z","last_seen":"2025-09-04T16:11:26.348922Z","times_seen":3,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/_nuxt/DcYaAAs8.js","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:11.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /_nuxt/DcYaAAs8.js HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=78hU1eY5EOw2vVeq; __ddg10_=1756992310; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=LveR295cxhrBuBJ9; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg10_=1756992311; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-132e\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4910,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4909)","md5":"e0defebbf5b1f7c3d20dbe586b3fbf8d","sha1":"9a98a50ea930d1d592049d8b06b7ea997cb551d2","sha256":"d9619c358bb0ae0a7f26b18f953048dd92f3626ab73eedce704273def898ca3a","sha512":"199e25a1e97cd105e0b598fc32a8dc3b770103fe9aadff0bc0b0ac7e720f25e16dff85a883093e34e59f5d531d4798d0d5eac6e2c74786bb42ebb3021d0fc539","ssdeep":"96:fSI0Lgam5pFjwsmyzqVBRJzxv7A28/s1/HEwYx+3cCL:f8mjsyGRFThSu/j4U","tlshash":"44a1858f1240762e7ded4b5553f4681883304886fc1c27edf4ae5d389b5a88f61bb674","first_seen":"2025-09-04T13:25:01.076Z","last_seen":"2025-09-04T16:11:26.363521Z","times_seen":3,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/cryptojs-aes.min.js?v=1","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:09.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /cryptojs-aes.min.js?v=1 HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/\r\nCookie: __ddg8_=FcXpKCcHDqd0HdjO; __ddg10_=1756992300; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=may5TyTRLEbywYDh; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:09 GMT\n__ddg10_=1756992309; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:09 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:09 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-359a\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13722,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (629)","md5":"cd93b7f0987a614bc17698503bcb6af9","sha1":"68a66448326499ff34c75bf31e2769b278584e0c","sha256":"8d4fae1a37a5b5338c889d0897b50024194b4d3ae94940e7e42c1c1423a1183e","sha512":"e3b87dfe10c0e3f3d801a85ae9c654a74eac22c2a93a757568a0d2b13755c36aeb5f9337e94a21db4ef2d1f0f1cfb98fccbbb0151d5cdf8d967730df96bfde98","ssdeep":"192:9BIGDmDm90mP9z8Ui015lN1I5rI2Tru6hMJFmHV+mdpwIfyAaYfKnNVYkUUFJZm3:9yiB0ez8UiIX1SrTegsEHJuI+y8Z7AX","tlshash":"625297c936edb94263963028587f6017b86b28b6945c4824f29cd4ddff9899dc03ae3c","first_seen":"2024-11-30T18:08:34.076577Z","last_seen":"2026-06-26T20:23:29.818692Z","times_seen":1206,"resource_available":true,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/_nuxt/DnjNk7Rc.js","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:11.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /_nuxt/DnjNk7Rc.js HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=78hU1eY5EOw2vVeq; __ddg10_=1756992310; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=glrUypdtodY5qyJu; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg10_=1756992311; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-8d08\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36104,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (36095)","md5":"6932e67e2a877d0e6c31127f8621e3a0","sha1":"1ce82681e36c9482e73f49b7c7d580e4a01d684c","sha256":"688d616fc288fc8eb54a4e6b1fcf8373f9ad129160ab498c85925634300de549","sha512":"3c41d92922841565c81960e28b19fcbb94aa53774db93a07e3eb106e564be3adade38d62cf61b2a86e2150e802e66a781f4a1f079cf1be3401fdd9e1c9c01ba7","ssdeep":"768:2i4xc5uvPlv2NJ8QBFZYlAI/+VRDWLOFtTqcSagFVXsqYNNMo1MoY4b17JsUWLik:s3RuZtRwcSaSV1Iv+oA","tlshash":"99f2f708e4199d3ed9b75d9878540811b22d2fdfd0414d72a1fc9d186bbbd3823aebac","first_seen":"2025-09-04T13:25:01.091457Z","last_seen":"2025-09-04T16:11:26.336028Z","times_seen":3,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/_nuxt/BH18fLn4.js","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:11.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /_nuxt/BH18fLn4.js HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=78hU1eY5EOw2vVeq; __ddg10_=1756992310; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=EXSDgVAKFQgAFMuZ; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg10_=1756992311; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: W/\"68b97987-103\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":259,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"6661398a6d56e6e6ae7887a1f81a45d4","sha1":"1aac35aae204deb0742b7b0a7c2fb95ec2cc971f","sha256":"a5fac192dd181af7df21469eaae0a39ba97826532ad8d06c96eae7f9c7cf3797","sha512":"14b095925fde73e4ce9bf8d6484d8ce76764b7f2fb548ed1ec68933624decec7644bc5598d3f69663e1fa6a07c9e47e39497a424c9e30b0a33870bc07fa9133c","ssdeep":"","tlshash":"36d0955d5033d0b8117505591cdb5d07d14758bd733453146063db7437a84d2474fd0a","first_seen":"2025-09-04T13:25:01.097572Z","last_seen":"2025-09-04T16:11:26.400403Z","times_seen":3,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":158,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/_nuxt/Cc9XZ-bZ.js","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:10.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /_nuxt/Cc9XZ-bZ.js HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/_nuxt/DP5Ff1Si.js\r\nCookie: __ddg8_=pYwsuBDrkx5Usopr; __ddg10_=1756992310; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=78hU1eY5EOw2vVeq; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:10 GMT\n__ddg10_=1756992310; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:10 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:10 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: W/\"68b97987-326\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":806,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (805)","md5":"edcca5d565fe593d22506240dd296af9","sha1":"20cdeb6e7a4c2d920816324b235e3254f73c382e","sha256":"276f7c0689e543e6a1e96d73f0389e85c671a61bf8381d338a87b4146c5f9571","sha512":"62cd1f75b2f4ec5e393060e62446cfe41b0eb0397d0d4294647e3e1df464b515f754f56f9c962b1304d05f5fed5defcae2b24b59656ec045d5fe63330dd7c898","ssdeep":"","tlshash":"8501490bd94481b8011cdcf4e421cc3aa27784ab53e9d7b1d1df57715be1071d10d62b","first_seen":"2025-09-04T13:25:01.067259Z","last_seen":"2025-09-04T16:11:26.380199Z","times_seen":3,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/_nuxt/DlAUqK2U.js","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:11.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /_nuxt/DlAUqK2U.js HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=78hU1eY5EOw2vVeq; __ddg10_=1756992310; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=l1oPQNWIQVqE56Gs; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg10_=1756992311; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: W/\"68b97987-5b\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-08-15T03:39:23.325409Z","times_seen":25514,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/_nuxt/d4aiDjLF.js","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:11.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /_nuxt/d4aiDjLF.js HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=78hU1eY5EOw2vVeq; __ddg10_=1756992310; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=5b7ZsxaydXzFVVpm; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg10_=1756992311; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-21c7\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8647,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8646)","md5":"376e23c5d4ca846e13e9d09791a25385","sha1":"3c10c8704fcb34899dec5926979abf202f75df30","sha256":"9db6702a9a86c7d19b8a02861c8c5f2559192800753d4fe6213043a417990c9f","sha512":"f428be75093080b0d75478c41953b83a030260b3c58543d25b5ad82253292536f158b6b8e5fabc416d3a7ce49128bdcdeb15ad2d0ffdff65d1f2f40cb107ea34","ssdeep":"192:MiFojMIZjkItgj6pnaJe/HA9iReMDjHMtpgCtAoRXSAd55rD1W55Jr0UWip8W4JQ:MiCMIZjy0LhYRHMAhPMN07i6jC","tlshash":"2f0240de520a65b00bd706fa81e846d0d6b00844f04d997c64f8dedf477ec8917a6bbe","first_seen":"2025-09-04T13:25:01.043031Z","last_seen":"2025-09-04T16:11:26.394503Z","times_seen":3,"resource_available":true,"data":null}},"time_used":332,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/js/fp2.min.js","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:09.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /js/fp2.min.js HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/\r\nCookie: __ddg8_=FcXpKCcHDqd0HdjO; __ddg10_=1756992300; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=2cBHvL3Cstfr3lCB; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:09 GMT\n__ddg10_=1756992309; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:09 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:09 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-883d\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":34877,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (34698)","md5":"02087a3f4f46b15bc198570d800bff41","sha1":"e59f5e3521d8c60e5772de1f65c90e5b87d9eb9e","sha256":"e753042decd90a96d0636a7df16df556860af92ca09ac37f0f6ab1d574acd1f1","sha512":"2c733c348e26c0b400befd5ccac6734eb06a0ca0c8c638f8d3a66afd75ea5860c6cfd3a913ba6dd6824bd9c629c2f28d14204efa625b10fa8fd9b366ba82c968","ssdeep":"768:J2N6EbuZaWRhGT8e20R5J++t6cOrVrzib:oxuZaWRhGoF0R5UVra","tlshash":"e6f21b96b2e8373c8143b063394bec15fb799495e784808a5e2d4180f8758e9e77bdf8","first_seen":"2023-07-23T18:22:17Z","last_seen":"2026-06-26T20:23:29.90284Z","times_seen":1217,"resource_available":true,"data":null}},"time_used":547,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":547,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/_nuxt/entry.B0BOi0i9.css","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:09.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /_nuxt/entry.B0BOi0i9.css HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/\r\nCookie: __ddg8_=FcXpKCcHDqd0HdjO; __ddg10_=1756992300; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=W8gocWcua0nMFRN4; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:09 GMT\n__ddg10_=1756992309; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:09 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:09 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-1080\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4224,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4223)","md5":"61f0bd26cea7d117c5e7c486acc68d00","sha1":"6c8bcb0f1c4f0fb0f07276c5eacd898124ed10df","sha256":"f099b430b92e0f00145cb9382b4a9ae5fd988a1e4f4bfb3043e5a938efc4ee39","sha512":"f9bc1136e2349b7ac1471ec7801d8047312f950e30808796e33dcc45bdf4cc68b709d9a30c6ae3f2cc7371b4d47bd532b8cc59e09569e52f1d9a1b30cb0b91c2","ssdeep":"48:qBK1KVrwxo7yXr29OKJgbKA7cb2XYKBKJKeKbKaeEaSkeEnS0SSSWS8VSfHeEPeG:qxi8yK9RHN4MEBWWXIShv7JRhW4D/qi","tlshash":"4491ff7fb288f6580127ff02a4a15bddf42b23b0b2522a15f2d5523061b67d1bc29d7c","first_seen":"2024-05-30T05:56:49Z","last_seen":"2026-06-10T14:34:42.966261Z","times_seen":189,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/_nuxt/eurostile-regular.i2b9H2-b.woff","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:10.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /_nuxt/eurostile-regular.i2b9H2-b.woff HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/\r\nCookie: __ddg8_=W8gocWcua0nMFRN4; __ddg10_=1756992309; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=t0HqJJNi10RoF3Ym; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:10 GMT\n__ddg10_=1756992310; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:10 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:10 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:10 GMT\r\ncontent-type: font/woff\r\ncontent-length: 97680\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: \"68b97987-17d90\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97680,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 97680, version 1.0","md5":"535b1e86232aafcca96b143529c8226d","sha1":"9408a42efc92ea6972f4d0f50560c22ca84d8a08","sha256":"c5a7a7d506426bb073f4f866f0ea9f3c57c8e856444e5403494d9db263e85671","sha512":"b54f1a43cd21271056f02d0626c573357b3ad962969d24a7c03914513d6644155108d5fb0608d47c734e650e1141de70cb9cc13e1ee1f08830c33ecd7dbb8abf","ssdeep":"1536:mndVS5OB0M0Lfxv9JKgzmzwv25WCnEx2pW594UIi/m3KYdu+WLSkNQ:mv3BbuX0gswcIb4UIi/m3K4u+B1","tlshash":"95a312039a03b7246d764afa2eaf4b39f5d4ef988d0d63c147e1a410194d52f2f6126f","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-04-25T06:32:47.453739Z","times_seen":81,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":150,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/_nuxt/Home.S7ve62Bv.css","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:10.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /_nuxt/Home.S7ve62Bv.css HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/\r\nCookie: __ddg8_=W8gocWcua0nMFRN4; __ddg10_=1756992309; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=pYwsuBDrkx5Usopr; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:10 GMT\n__ddg10_=1756992310; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:10 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:10 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-7a7e\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":31358,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (31357)","md5":"15d04beee9f2dc778bf00b274c16667d","sha1":"71264535fadb12e8749357740c7fd4708feca3cb","sha256":"b4968b7a22acfbc7df6a68ed5dbf482c87a1f8793f95c0fe30cd6a7f1be61daf","sha512":"b1e5e64fc352a5dc45be892d388d86fcdbc093a9b63a4d210c444236afc82a6e63c06aa22bb340fd43ca6580bd918aeefaf8ddf1de77d6dcb10681a7c32426bc","ssdeep":"384:WT6aeLqghWiMZWyThd9Tk7R3uIRBksYCsk7JWGCIEw5+22xI:W2aeLqghryTn9Q7usYCxl2xI","tlshash":"50e2a731620c206d71b7ea75b9a2694c716cfa17eb1307b8d6d4742cc8e7642363bacc","first_seen":"2025-09-04T13:25:01.074477Z","last_seen":"2025-09-04T16:11:26.334968Z","times_seen":3,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/_nuxt/DdC22MeW.js","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:11.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /_nuxt/DdC22MeW.js HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=78hU1eY5EOw2vVeq; __ddg10_=1756992310; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=NeaXXkohlXpVEFKP; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg10_=1756992311; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-15051\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86097,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"08bcc3eb1c3890f5487f1a0dde0764d9","sha1":"ae790f9c122454b6a82e39efc9c50e3d4dd38d4d","sha256":"6dd0a52758046f7d5fa996ce2ccf0cdb346cb6a9c588938823f933fd268c8672","sha512":"c96fda5f79f082e8b68409c9dae301d6ba04a0970004691bec26155b58135c76656accd8ebbe5d885b700a3fe8c96a95a3cd16bc2506295883c93abfce98dce7","ssdeep":"1536:RK6l28I8DZzkXhvPS5uLEiMAa73hBlxvHB+CIdzkVXiA6w+EV93mBE09:U6nCvPS5uZS8a9Q","tlshash":"7c832989f224b17782f75ada8376c20172a14984b809d4e4b0ed4d7b496e95c03afffc","first_seen":"2025-09-04T13:25:01.077495Z","last_seen":"2025-09-04T16:11:26.332965Z","times_seen":3,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/button.php","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:09.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 21 Jan 2025 21:48:29 GMT","end":"Sun, 22 Feb 2026 21:48:28 GMT"},"fingerprint":{"sha1":"C9:8F:2B:90:8F:AA:A2:41:5B:E2:A2:52:7D:CB:E8:06:B8:A0:74:B2","sha256":"A4:69:EC:34:42:8B:01:37:A2:0E:C6:34:5F:3A:A3:2C:80:A3:01:0A:B8:13:8B:33:B9:87:E0:C2:5A:16:AB:59"}}},"request":{"raw":"GET /button.php HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 04 Sep 2025 13:25:09 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nConnection: keep-alive\r\nX-Webim-Version: 10.7.124\r\nEtag: \"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a\"\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"325472601571f31e1bf00674c368d335","sha1":"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a","sha256":"b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b","sha512":"717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc","ssdeep":"","tlshash":"bf900003ea80c002c2a2c0300e0ccb802b88b0308a28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-05T06:29:39Z","last_seen":"2026-08-15T03:44:21.763165Z","times_seen":96788,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":73,"dns":0,"connect":19,"send":0,"wait":56,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/img/logo.svg","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:09.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /img/logo.svg HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/\r\nCookie: __ddg8_=FcXpKCcHDqd0HdjO; __ddg10_=1756992300; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=qn8Cq95Kft8p1CQJ; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:09 GMT\n__ddg10_=1756992309; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:09 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:09 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: W/\"68b97987-5f5\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1525,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"90c2e8c0d206d5eaeac1b5660a865926","sha1":"fe0386bf75d653fbacf2638c0dfe63544acc878b","sha256":"68da6ba7e3c1d4c39c888f4cfef2e3090ae95b091ef2b0bc1e6b638a3f2e523d","sha512":"1912a93b523c285d3ea1da9831b45240b5a6e5ddaacb2922b9b35c346beca192b37ce9881b7120fd215d1ff7087b732df496026f5bb49ae424ea1c27a0433545","ssdeep":"","tlshash":"c0315ee2b3a9d38191080f00834e7864032f15e9a710818ddbd76ba579b526fcc3d8d0","first_seen":"2024-12-10T17:19:34.101377Z","last_seen":"2026-05-26T01:50:54.168263Z","times_seen":69,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/_nuxt/roboto-regular.BtWrZLw2.woff","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:10.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /_nuxt/roboto-regular.BtWrZLw2.woff HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/\r\nCookie: __ddg8_=W8gocWcua0nMFRN4; __ddg10_=1756992309; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=lV56hdGlHpuv9lV4; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:10 GMT\n__ddg10_=1756992310; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:10 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:10 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:10 GMT\r\ncontent-type: font/woff\r\ncontent-length: 139160\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: \"68b97987-21f98\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":139160,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 139160, version 1.0","md5":"ae91f35c10375f1dab7137a298aba7c9","sha1":"6b9aae9dddb20bdfc56381f0d64bf54433977413","sha256":"264a621481c81a289ac3227cd63cc91902de13789dd9df920f0e2f465fa2bd38","sha512":"b0253e74fe7baf39316ec12622b1ace4899c51f6ce5c193e0ca2dbf713e4e1ce3d5ed4145d46680a91c68baa44bd73a31834e544c0d732f77975e72424151b60","ssdeep":"3072:2isY+Dpc1q2EHUmPsBut5j+mN9s+EIUb0Psp45nE:Tspc1s0osS5rc0Er","tlshash":"60d31255eb38110ff8be77f86dcad33408f471d5c7a322a4955802abae44fd4ea24da1","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-03-01T21:47:53.345572Z","times_seen":69,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":254,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/_nuxt/CFU304S8.js","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:11.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /_nuxt/CFU304S8.js HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=78hU1eY5EOw2vVeq; __ddg10_=1756992310; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=0KIDpx7bF09wtZ3W; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg10_=1756992311; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: W/\"68b97987-78\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":120,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"65b0cca89e40818f39fdd7753db6d142","sha1":"24e169a25a2e5e795d2ba4918ad600ab939bc23a","sha256":"261a0d9b3884cb4797de2dd31290199dbcec4f295a6ca9ee2c3b48ab9d9651ce","sha512":"e4c57b7230da955929c01aa05a22c6039a4ab395d6480587e21169106ce56e84aa99238c37d03c5944a72a6c799d55cc072ee59b5e498caf41fd1f6e021b43be","ssdeep":"","tlshash":"53b092d6728a3ce12602b810a15b80b4a131e6240b8a47208026f08739724a48a52e38","first_seen":"2024-12-07T17:14:43.577967Z","last_seen":"2026-08-04T09:28:00.148891Z","times_seen":102,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/_nuxt/B4H9rhCY.js","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:11.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /_nuxt/B4H9rhCY.js HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=78hU1eY5EOw2vVeq; __ddg10_=1756992310; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=9hz7Y8mfezR5BcXr; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg10_=1756992311; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: W/\"68b97987-11d\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":285,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"be6d83f7cdcb91bbddbfc783b5061b6f","sha1":"7bf4d4f34618a2f70140ac3b9539c32c5cef77b1","sha256":"79a5f55995f201d18500445237edadb8d20001650683fb254d595f23fedbb5e0","sha512":"741b27508301eeb3a875f84be7599fb5bd7bf2f8d74da7ecb2a81ab37a1552de32b87b1554dd593c1c8eca3caaa0732f977695ca2d72c2e51439604bae64247f","ssdeep":"","tlshash":"61d02bceeb7066b8bb10446d545bc752c724f90013a85ac0987b6aa17f609d7c306fd2","first_seen":"2025-09-04T13:25:01.082086Z","last_seen":"2025-09-04T16:11:26.395497Z","times_seen":3,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":115,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/_nuxt/DXyKtzhm.js","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:11.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /_nuxt/DXyKtzhm.js HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=78hU1eY5EOw2vVeq; __ddg10_=1756992310; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=8n2kzizlHoZZiHLZ; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg10_=1756992311; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-405\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1029,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1028)","md5":"774cedca2458be86699b1dadec4de6a4","sha1":"8df155284b5d86e0a526adfe1551e71dff94d3aa","sha256":"1b1c4bfa32e4bc1d4e363204c042dbb8cf2000d16d49f0807accfbb73152ad83","sha512":"86b2303b92988a4752b1fadedae16f065c7a3b378efa9bca7e9823561220bc910ad4ea8219650175e977005b91f85a86231ad7c54d6eb7801f6aced1c9290a82","ssdeep":"","tlshash":"3d110e2bfa0e0b2663331c764aa931e6cf650b8b2c7984c43c54df261237c83e5a6f04","first_seen":"2025-09-04T13:25:01.048284Z","last_seen":"2025-09-04T16:11:26.354288Z","times_seen":3,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":140,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/img/loading.gif","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:10.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /img/loading.gif HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/\r\nCookie: __ddg8_=W8gocWcua0nMFRN4; __ddg10_=1756992309; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=FAnWKFHpOIrUdnxa; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:10 GMT\n__ddg10_=1756992310; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:10 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:10 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:10 GMT\r\ncontent-type: image/gif\r\ncontent-length: 11144\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: \"68b97987-2b88\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11144,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 64 x 64","md5":"e4d96bb51227829e536412e5392bdf74","sha1":"8bf350e63f7bc86615cdccc6d16e0c8abb00584a","sha256":"d2911698581f2b0f538c0d770d1b677ecad7b9e61e99d89d1f218f9dae6c31cd","sha512":"a580b7ee3f1a213a523cc8ac69662809cd21bf0952aa2767ea1c3a8ddf934a3a34c4c578d34525d54ab027915aa9097894545713f135126bb8cf7f280b8ab0e6","ssdeep":"192:Yx1zq53A3H8YLSfEdDNsS+4tygrQFFpslGsTg1z4cWl:MH38WdDNk4Ygkrmwj5Wl","tlshash":"5a326d2c1ca447e6e927463165dba2cb8811df2d226c18d39eac347fb95b23ee0dcd10","first_seen":"2024-12-10T17:19:34.10667Z","last_seen":"2026-01-21T08:18:56.850207Z","times_seen":57,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/_nuxt/xteshH-L.js","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:11.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /_nuxt/xteshH-L.js HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=78hU1eY5EOw2vVeq; __ddg10_=1756992310; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=2vTXDaLaWevdJKKa; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg10_=1756992311; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-23dc\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9180,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9179)","md5":"95ed2fe99795a5ba82332fdf147e7522","sha1":"6972e4dd0d2f70a8397a5d0aaf7f74586207deb9","sha256":"4e8345d9217bf5ff275fea384958a31ed922285d8220efccc88f78c1d014807a","sha512":"28d9bfade785288187295eee55455a6ae6619b13b7e4ea96c0d25b0d8bc9842848901170462ec92e88a8f6160bfa611924478f2977b28b42e7acb6009d423f17","ssdeep":"192:1qsxSEFu6ZufGq++k5q2IkZQ+tOWwYpsTctY0ipgNE7oVKRpnKFEN:1hZ8fK+kQ2IkDLwYpfYZplOKRpnv","tlshash":"3212eae473ac72aa59620dd12475481de434e6243b26e4d1f2ba34bab4d7c44b273f2d","first_seen":"2025-09-04T13:25:01.085457Z","last_seen":"2025-09-04T16:11:26.321235Z","times_seen":3,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/_nuxt/vue-splide.C9Z0wB1j.css","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:10.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /_nuxt/vue-splide.C9Z0wB1j.css HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/\r\nCookie: __ddg8_=W8gocWcua0nMFRN4; __ddg10_=1756992309; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=PDnW5n5nceqNdHyK; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:10 GMT\n__ddg10_=1756992310; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:10 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:10 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-734\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1844,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1843)","md5":"e638a23113de5c173bd45cf1ec17cedd","sha1":"5e71875f9d7d6d3240729a9300e2be7b2c49d0d2","sha256":"25fecdb4c8330c6bfab65a09dbb53c0d8f407344f2ba4f4438bb48293444c846","sha512":"c76d640e7077019c6c609684d476a47b812c67eb4fbc8cf85240d2bc6e96e5254434483c8c8046b15b3683e09c749b26055b48f9656e0dbf5d78bad8aa18872c","ssdeep":"","tlshash":"fd31442240c92f599843973229bdd7a964eec2534e6302baeaded320468ad4d07e49cd","first_seen":"2024-08-20T04:44:02.347145Z","last_seen":"2026-07-20T07:08:57.528836Z","times_seen":137,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/_nuxt/Loading.Bk2PI8_1.css","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:10.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /_nuxt/Loading.Bk2PI8_1.css HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/\r\nCookie: __ddg8_=W8gocWcua0nMFRN4; __ddg10_=1756992309; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=tYkuMP08OPDOEGyk; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:10 GMT\n__ddg10_=1756992310; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:10 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:10 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: W/\"68b97987-ee\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":238,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"972ff87ed4252206f8f9d733a46cb522","sha1":"9998cd5afd3ccbd6aaa949b68fdf49bf05224cdb","sha256":"5ae8f77f7cb1ee4548d819e6f03fe4e3fbfcc50845c8ee77480d3f08a86de00b","sha512":"1dd31797719cb3c45a9694f1e7dc1bafddbe7da579d78d6aba797d4599ac185310493de67489970b64846b0d612979cae66138ad87b50721b24adbb78cfcc180","ssdeep":"","tlshash":"51d0a7d5864444530f670a3311cc5d59c8b02ec2c8be1c1eb399d1aa03492a933b7e69","first_seen":"2024-05-07T05:56:59Z","last_seen":"2026-02-25T19:06:54.055809Z","times_seen":57,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/_nuxt/DIUZ9vJL.js","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:11.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /_nuxt/DIUZ9vJL.js HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=78hU1eY5EOw2vVeq; __ddg10_=1756992310; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=b6h754mbCYuyqVMc; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg10_=1756992311; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-142c\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5164,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5163)","md5":"868c50f9220f308b7bc94e029e292bf6","sha1":"820a01d436fb4f4d146e830444ed00b7453f5886","sha256":"5e2c1bbef05a4c8e4e05a0bb1116b31ed190bb16f2a5ab3f576ebed15e4a809a","sha512":"878a4b1945dfe36c11c703c09cf8427704746ac228ee66b120233cf4961936eb8a695030a6ce61c252d22d970ae862be809b70a1bafad46a08fd1be3c121488a","ssdeep":"96:oekq53hKMoKMj1W3FdeF31f5HnPx1oRstVCBR4Ir8Dtgjiby+qUECPRv5:oW3BY1W3eFFvmQVCkIgJbtD","tlshash":"10b1b7e4b0d9e0dbbb764fd1c032225260076ba57434e0d0f27aad73215be58a562b3f","first_seen":"2025-09-04T13:25:01.088084Z","last_seen":"2025-09-04T16:11:26.35249Z","times_seen":3,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/_nuxt/AG4q27Qm.js","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:11.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /_nuxt/AG4q27Qm.js HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=78hU1eY5EOw2vVeq; __ddg10_=1756992310; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=NxCUL7PcsYYmghep; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg10_=1756992311; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: W/\"68b97987-56\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":86,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"639a5b26c9cde48dc9306092b038cab9","sha1":"6ebee6b859e75f4b3f347450b465e1ac66aee036","sha256":"66784c82da9106ccab65d77f7788c5aa7b28076ecc01947fb73072618f5ce745","sha512":"7ea88dd122048c6cacbbe57a6d30a5451dd6993b1be18cb8b3d50884fba6d7ee3b42b1831b8a285f9676a7cc0378d21f1a7ee998747a79e4b93e1ec418600e6d","ssdeep":"","tlshash":"11a0120a0454007d110408f46f1b945945a0282a13754bc0000046054b764ff560cc00","first_seen":"2025-09-04T13:25:01.071676Z","last_seen":"2025-09-04T16:11:26.327515Z","times_seen":3,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/_nuxt/ClQ9daYf.js","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:11.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /_nuxt/ClQ9daYf.js HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=78hU1eY5EOw2vVeq; __ddg10_=1756992310; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=t7d7iLaTeXZjNvKS; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg10_=1756992311; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-687\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1671,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1670)","md5":"ea5e74d79777972be475c0860292d287","sha1":"c4e8e781713abedc79aad231887228a6e1347440","sha256":"55df7c751bafb4716fbd3ff1ff765591ce2239a64f324a825bff23aba4ec3021","sha512":"90e7a5dd19be307760ce1fb97b98b346c30dbd92c34d0f7a6cbde2850f2ff387042e2b7ffd069e5dc0113dae00dfc4a3a2779d50ffa244d452453e62bdace096","ssdeep":"","tlshash":"893122c9f29ce4b7d0a7d7e88472842076d875fb3fa8cbd4824099715623096764ead0","first_seen":"2025-09-04T13:25:01.080853Z","last_seen":"2025-09-04T16:11:26.318065Z","times_seen":3,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/_nuxt/D2zqvuUF.js","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:11.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /_nuxt/D2zqvuUF.js HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=78hU1eY5EOw2vVeq; __ddg10_=1756992310; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=fsgHaTddQl2OdgGg; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg10_=1756992311; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-457\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1111,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1110)","md5":"6388c86f4ea255e1365717974ff04b52","sha1":"5958616162dcad411da59dc5be28be158918c82a","sha256":"9bd8ec759b0680f997ca269054b550860a7e3fcad47190a2b2ff451021e64248","sha512":"4b619be70f5921dcae4b92ee41b9bcd19c997d151f8de4eeabc22c33b2fc951d177f4a9d2e5adb49bde9051e3f4044661dfcb1fc531a16c91ec7cf966acc0383","ssdeep":"","tlshash":"bb21657d4aec2dcc091cbc802ad89d6c3504d248a291cc8638a6fee7f887d5aec08471","first_seen":"2025-09-04T13:25:01.083215Z","last_seen":"2025-09-04T16:11:26.376409Z","times_seen":3,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":137,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-04T13:25:00.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=FcXpKCcHDqd0HdjO; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:00 GMT\n__ddg10_=1756992300; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:00 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:00 GMT\n__ddg1_=o2fEuDyeUqpuarnPsHNV; Domain=.gwbo98x.space; HttpOnly; Path=/; Expires=Fri, 04-Sep-2026 13:25:00 GMT\ni18n_redirected=en; Path=/; Expires=Fri, 04 Sep 2026 13:25:00 GMT; SameSite=Lax\nuserVersion=45.10.240.38; Max-Age=86400; Path=/\nuserBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; Max-Age=86400; Path=/\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:09 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-powered-by: Nuxt\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":395956,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65063)","md5":"36e88d4e9ffb0f9b11953fb071b96cbb","sha1":"8d804c5f32d1d74e4d646606f85f57b30a81e1df","sha256":"bec09046b943efff6fb95bafff90dc31f11b03a0f58170fd6987b1694f8e7ac9","sha512":"5d5e9a06be93d4301789babaea1f9e6e01501b111d72bc63157925e2da718bae2f4aec2733e525c0e65c575b351ae79ccfd60219c251069f15784736d8386480","ssdeep":"3072:7JYXSbqAfuybg1s705YOwfwONtsEb2FRLhaQU1o75rx+HWB:HbqAfB705YOwo4tsEb2FREX1g88","tlshash":"7a84e7832535386e615fd457f5a1ee98f434a816e31367ebf0e62a35cbc2c461273a38","first_seen":"2025-09-04T13:25:28.440165Z","last_seen":"2025-09-04T13:25:28.440165Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9298,"timings":{"blocked":87,"dns":0,"connect":19,"send":0,"wait":9124,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/cryptojs-aes-format.js","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:09.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /cryptojs-aes-format.js HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/\r\nCookie: __ddg8_=FcXpKCcHDqd0HdjO; __ddg10_=1756992300; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=XHsXs28In2ZZLoiP; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:09 GMT\n__ddg10_=1756992309; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:09 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:09 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-5d6\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1494,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"e6bc38f77922eaa6f1b23716034b4a2e","sha1":"db781b1e30c4f2a1d63d47054f0903c463cf01ab","sha256":"9ca00bddae85e30d59672da0089ea5e132df97d75a92f42114fe1befbaeaf32d","sha512":"0ad7c00c1564d77f8463dfc81003c0d6cd6ada4e3d01094331f72847f17718e4a6b2c7a2a0bcbd96a1107bc6cb9bcb1721e7b2968ae4544595ab98d39bb30c82","ssdeep":"","tlshash":"163177407debb4c287e8e1d50435a044f67b7a0ab1558ef3aa5aa404ffedf3006326e4","first_seen":"2023-03-07T18:27:54Z","last_seen":"2026-08-07T16:57:51.090464Z","times_seen":717,"resource_available":true,"data":null}},"time_used":475,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":475,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/apple-touch-icon.png","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:10.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/\r\nCookie: __ddg8_=pYwsuBDrkx5Usopr; __ddg10_=1756992310; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=IlpzEyVDOFwBYIk9; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:10 GMT\n__ddg10_=1756992310; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:10 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:10 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 5476\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: \"68b97987-1564\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5476,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"b0fd6219c3cc6542ac16de5fb1a803e5","sha1":"32e23eec5c195ebb1288a30e3eb88fabef54d68e","sha256":"3de26349c4bfab8a20055a516f6a01a3e26870922b5e158d25b222150248bb9f","sha512":"ca31b6c5eed2c86716e420501bba2bd940b0b74627e9acf6c535e1391dd518851aaa699484966b2c9b463af4b84fea8a91072966e6d355f12e7bbd7e04b724a8","ssdeep":"96:TitXRWWOLtp6cCMcakSchLRel2CgQ+dwmcwveg4tjvR8VRtvS:TUoWOLPIaihg29dwAv5Vi","tlshash":"b0b18db839459902eec1e13923565bd0af3111a036012c4a136fc9375b147a23abbfdd","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-06-26T20:23:29.98019Z","times_seen":156,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/favicon-16x16.png","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:10.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/\r\nCookie: __ddg8_=pYwsuBDrkx5Usopr; __ddg10_=1756992310; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=K9ydSoBqUtqK1Sxp; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:10 GMT\n__ddg10_=1756992310; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:10 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:10 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 1103\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: \"68b97987-44f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1103,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"11f24fdbf91f702bda779fc31cda72b6","sha1":"675c7e4a5d8443b041056cf934a6e2f652914a62","sha256":"22680e0318483689dda6c739ddcada0864dc530300444247c87d8233b347b858","sha512":"56998c6ce69ca75e2c00756450a2c33ed491a5be0499d5003eb3638d643efb5d395705a986df5301f74ffc9c0f10c707b9e7837a491ec7afa55f349240d2087e","ssdeep":"","tlshash":"de1146d1e121e051c26614f169222480ff67407bfeff8b1afd22a4145c5a6b997f76c1","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-06-26T20:23:29.961595Z","times_seen":155,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwbo98x.space/_nuxt/BzJ5TwHR.js","fqdn":"gwbo98x.space","domain":"gwbo98x.space","tld":"space"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwbo98x.space/","date":"2025-09-04T13:25:11.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwbo98x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 02:37:30 GMT","end":"Mon, 06 Oct 2025 02:37:29 GMT"},"fingerprint":{"sha1":"0A:50:7E:47:51:75:FA:4B:39:B2:45:2C:09:9A:63:DA:03:35:00:5A","sha256":"9E:5B:A9:7C:39:30:9C:CF:E3:4B:ED:5C:20:B2:2F:25:17:EA:64:CF:C3:57:15:A6:BA:11:F9:39:26:81:A4:ED"}}},"request":{"raw":"GET /_nuxt/BzJ5TwHR.js HTTP/1.1\r\nHost: gwbo98x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwbo98x.space/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=78hU1eY5EOw2vVeq; __ddg10_=1756992310; __ddg9_=91.90.42.154; __ddg1_=o2fEuDyeUqpuarnPsHNV; i18n_redirected=en; userVersion=45.10.240.38; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ofHZS1M24I0e8FYn; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg10_=1756992311; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\n__ddg9_=91.90.42.154; Domain=.gwbo98x.space; Path=/; Expires=Thu, 04-Sep-2025 13:45:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 13:25:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-d13\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":3347,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3346)","md5":"f6ce485b45d60be95bda75e5201fa3e6","sha1":"cd0403b6ed3db241813ba7f8ef9ad769eb3a8ed3","sha256":"d9a3f3de6e380bdc3dc470aa8211bf1464d8cbd46745d9b20504a5ee2b2c9254","sha512":"60f1ac35e803ffd81ee5e9361da3cf3c112b0c51f66a968814d980939b7f9fd49c7dde59d0db3fc742c9abde6b268d231163d0e44579f9c1d05977638ec8751d","ssdeep":"","tlshash":"086141fc1635a57226eb17bb43a20c9242764855f049b27010da8f0d553dc984bf7ffa","first_seen":"2025-09-04T13:25:01.089546Z","last_seen":"2025-09-04T16:11:26.385065Z","times_seen":3,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwbo98x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}