{"report_id":"3f805308-3c16-495b-bb27-a7a92118b419","version":6,"status":"done","tags":[],"date":"2025-03-21T05:39:47Z","url":{"schema":"http","addr":"gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":0,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"title":"gwfg84x.space/?stag=819_67d75bad718f91aca41894cd"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-30T05:39:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"api-iam.intercom.io","ip":{"addr":"35.171.122.12","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2011-08-15","domain_rank":2892,"first_seen":"2018-08-02T22:07:54Z","last_seen":"2025-03-20T04:45:15.994013Z","alert_count":0,"request_count":3,"received_data":3144,"sent_data":1579,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-03-19T01:56:28.728686Z","alert_count":0,"request_count":5,"received_data":1760890,"sent_data":2400,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gx.webim2.ru","ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"domain_registered":"2014-08-06","domain_rank":0,"first_seen":"2024-01-26T10:34:52Z","last_seen":"2024-12-31T11:19:49.327835Z","alert_count":0,"request_count":11,"received_data":1866452,"sent_data":5220,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-03-19T01:54:33.49706Z","alert_count":0,"request_count":3,"received_data":650815,"sent_data":1508,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-03-19T01:44:59.808586Z","alert_count":0,"request_count":2,"received_data":32565,"sent_data":1050,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gx.webim.ru","ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"domain_registered":"2006-09-29","domain_rank":0,"first_seen":"2024-01-26T10:34:55Z","last_seen":"2024-12-31T11:19:48.893572Z","alert_count":0,"request_count":4,"received_data":43264,"sent_data":1766,"comment":"","tags":null,"fingerprints":null},{"fqdn":"licensing.gaming-curacao.com","ip":{"addr":"104.22.74.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-09-13","domain_rank":271716,"first_seen":"2019-05-08T08:27:38Z","last_seen":"2025-02-27T21:31:56.737977Z","alert_count":0,"request_count":1,"received_data":418,"sent_data":589,"comment":"","tags":null,"fingerprints":null},{"fqdn":"js.intercomcdn.com","ip":{"addr":"54.240.174.98","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-04-25","domain_rank":2440,"first_seen":"2020-02-19T12:43:00Z","last_seen":"2025-03-20T04:03:46.079446Z","alert_count":0,"request_count":2,"received_data":1600387,"sent_data":845,"comment":"","tags":null,"fingerprints":null},{"fqdn":"widget.intercom.io","ip":{"addr":"54.240.174.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2011-08-15","domain_rank":2417,"first_seen":"2020-07-20T12:16:46Z","last_seen":"2025-03-20T04:03:46.26361Z","alert_count":0,"request_count":1,"received_data":7476,"sent_data":420,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gs.jdwqqi.site","ip":{"addr":"91.215.43.62","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2022-07-06","domain_rank":0,"first_seen":"2023-10-27T17:21:41Z","last_seen":"2024-12-31T11:19:49.031169Z","alert_count":0,"request_count":1,"received_data":758,"sent_data":594,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gis-static.com","ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-08-26","domain_rank":0,"first_seen":"2021-08-27T14:44:56Z","last_seen":"2025-03-20T06:55:48.373838Z","alert_count":0,"request_count":32,"received_data":1065743,"sent_data":15311,"comment":"","tags":null,"fingerprints":null},{"fqdn":"recaptcha.net","ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-01-06","domain_rank":3210,"first_seen":"2012-07-15T20:16:42Z","last_seen":"2025-03-16T13:36:23.114604Z","alert_count":0,"request_count":4,"received_data":77713,"sent_data":2188,"comment":"","tags":null,"fingerprints":null},{"fqdn":"getxavatars1.fra1.digitaloceanspaces.com","ip":{"addr":"5.101.109.44","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"domain_registered":"2017-02-23","domain_rank":0,"first_seen":"2025-03-21T05:39:49.935665Z","last_seen":"2025-03-21T05:39:49.935665Z","alert_count":0,"request_count":2,"received_data":869392,"sent_data":1084,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-03-19T01:47:47.136821Z","alert_count":0,"request_count":2,"received_data":1108,"sent_data":1464,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ssogtx01.cc","ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":372264,"sent_data":612,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gwfg84x.space","ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2024-09-06","domain_rank":0,"first_seen":"2025-03-21T05:39:49.928854Z","last_seen":"2025-03-21T05:39:49.928854Z","alert_count":167,"request_count":167,"received_data":11871573,"sent_data":146164,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.gwfg84x.space","ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2024-09-06","domain_rank":0,"first_seen":"2025-03-21T05:39:49.939509Z","last_seen":"2025-03-21T05:39:49.939509Z","alert_count":21,"request_count":21,"received_data":62666,"sent_data":10696,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"ssogtx01.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/CTURe_1d.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae058339fda90c06fbd4df436a4fdecc","sha1":"59bfd50057365ab53682e6434d1dd793309734a7","sha256":"7781cd4f648e5a1d744108a8979d372b643b9ad7d571567f15e786474d22d28d","sha512":"77f5c48eb2e515fe0742c9870d453fa3ad34a333ab0696789c3bc66ff9e2fdf259c9c4f71136d16200aad877c3630b20f36fe33bdc3087153baaebecc3d0ffbe","ssdeep":"12288:I23LEw35Vj0aVLWZWW1BzkONSIe9olrToZ:I23LEw35VjhVLWQW1Bzk8SVolrTC","tlshash":"7aa44ae97196b02603fa19e4807b0106f3391a55384ec4e4f16dedea3d7684a92b7f7c","size":453847,"data":"","first_seen":"2025-03-21T05:40:09.042137Z","last_seen":"2025-03-21T05:40:09.042137Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/js/fp2.min.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"02087a3f4f46b15bc198570d800bff41","sha1":"e59f5e3521d8c60e5772de1f65c90e5b87d9eb9e","sha256":"e753042decd90a96d0636a7df16df556860af92ca09ac37f0f6ab1d574acd1f1","sha512":"2c733c348e26c0b400befd5ccac6734eb06a0ca0c8c638f8d3a66afd75ea5860c6cfd3a913ba6dd6824bd9c629c2f28d14204efa625b10fa8fd9b366ba82c968","ssdeep":"768:J2N6EbuZaWRhGT8e20R5J++t6cOrVrzib:oxuZaWRhGoF0R5UVra","tlshash":"e6f21b96b2e8373c8143b063394bec15fb799495e784808a5e2d4180f8758e9e77bdf8","size":34877,"data":"","first_seen":"2023-07-23T18:22:17Z","last_seen":"2026-06-26T20:23:29.90284Z","times_seen":1217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BaQI6RfZ.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.intercom.io/widget/knfz4177","fqdn":"widget.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"54.240.174.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/fp2.min.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"02087a3f4f46b15bc198570d800bff41","sha1":"e59f5e3521d8c60e5772de1f65c90e5b87d9eb9e","sha256":"e753042decd90a96d0636a7df16df556860af92ca09ac37f0f6ab1d574acd1f1","sha512":"2c733c348e26c0b400befd5ccac6734eb06a0ca0c8c638f8d3a66afd75ea5860c6cfd3a913ba6dd6824bd9c629c2f28d14204efa625b10fa8fd9b366ba82c968","ssdeep":"768:J2N6EbuZaWRhGT8e20R5J++t6cOrVrzib:oxuZaWRhGoF0R5UVra","tlshash":"e6f21b96b2e8373c8143b063394bec15fb799495e784808a5e2d4180f8758e9e77bdf8","size":34877,"data":"","first_seen":"2023-07-23T18:22:17Z","last_seen":"2026-06-26T20:23:29.90284Z","times_seen":1217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/J79K9xgfxwT6Syzx-UyWdD89/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a36163aa0bbf83ab5d1c9fe0ff046c7","sha1":"b5d6c2eb38480243e8527d29030a895e4558f0b4","sha256":"430aa09e2aec35f41afac94b13f2550d632f4d12d14549ad3344cf29aa9f40a2","sha512":"a9299850ab3fdeb4e86da6e8a1d66f4b9c80bad0e4cfb0105a7d2dcc7ff380181a611b8681b639e46815bec3de31dcaa700fd655c23f8896d42391328fee4663","ssdeep":"6144:HVFDGd9+8cScgz571y+joHXFQuDApgeqCygEeTXB4MGzI8yeK6bDHdClUAJR7Duq:HVxG+LLg9otDAd6SbBpJ8U3lv","tlshash":"c7c4f7ec702278b1837375f190772199a37e956ad45c0c5db098d9f02eb4849b0bafbb","size":558604,"data":"","first_seen":"2025-03-11T03:43:12.27372Z","last_seen":"2025-05-15T13:28:50.499676Z","times_seen":4256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/DmT_aqZN.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"85bd057ac9f381865fded39e4e354048","sha1":"9ad76e7cb36bc7d075431bd503cfd7843d32ef7e","sha256":"f82b5d9a7864cbdaef815a468ceb4112ec5f7a51e734ab57a70ff42866539bc3","sha512":"dc94e23221ab29174cd255b35b5d67cab48f9034a5a58e512fc735b3d3a2bbdd18a385e29d7c1cdc86457c3bdde7ae9a6fdb506d3f81866bed71399de0d2f026","ssdeep":"12288:Tc2mzk6H4U1NZECI6fRa18WaWoF/JadFrSBt9esWqY6Bti9M5C5Z:Tmk6H4GNZECI6fRa18W9YJadFrSBt9e7","tlshash":"dcb48e0df62991bde2bb47c564590800b22d2feae501c892f2fc4c196799cbc27adf75","size":533950,"data":"","first_seen":"2025-03-21T05:40:09.043823Z","last_seen":"2025-03-21T05:40:09.043823Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfDHPoqAAAAAJ5uqpAtCwZEtyusk-ogkGIqCj1t\u0026co=aHR0cHM6Ly9nd2ZnODR4LnNwYWNlOjQ0Mw..\u0026hl=en\u0026v=J79K9xgfxwT6Syzx-UyWdD89\u0026size=invisible\u0026cb=g1pafpbu6va3","fqdn":"recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"704a301fc45c2472ae2c795a08865ac7","sha1":"d33616246f24bc3722fc0c2fe08efcc0cf48fd9e","sha256":"f6616319b0aa2bdecf2cbb326371691f20e5d889eb94067da9d3b828487363f7","sha512":"f3baa746a7463a178eea7310c363b26d32570778ce0c4f3929494537c9a39a27bd64bc9240e8300fea4d4a6753c13260fb36b6ff1e083aa7bbbada94571473e0","ssdeep":"384:rZuVnkocjNIr+tY3n6QeXTAz2TW5OveJw4gysPLGPz6GXnaepYJvmzAR/lPW5Im:kVnHcjrYhG4/taeMvEylP2","tlshash":"4492c7dcf161b01956b3b0f4543f0059b5bb7852e8092848e25dc6f86e70e8d91affae","size":21080,"data":"","first_seen":"2025-03-21T05:40:09.044702Z","last_seen":"2025-03-21T05:40:09.044702Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim2.ru/js/button.js","fqdn":"gx.webim2.ru","domain":"webim2.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ce0c67c98f7b27c2f66b15435862ffc","sha1":"d034d0cc85a1bb94347eb995802ad07199dd9b13","sha256":"e59a87dbbf35df7898c7793e2cc048030fc4a49681460daabf36175a05b12b17","sha512":"a43e31de031300197cf3e34eb5799c167efab47afb1af173119c731d623530391a0a067e58e29b28915c775db4584eebbbd915d1df984ea52224a692ff836f1f","ssdeep":"24576:5o36wXnnOqCNTKi983ht1x2vRfujEjriWKT+tQ:5o36wXnnOqCNTKe83ht1xYowjriWKatQ","tlshash":"8b155b897640353a82dba2bf702b170976379552a444d46cf878e8d4bfb5d09823bfbc","size":897269,"data":"","first_seen":"2025-03-21T05:40:09.045711Z","last_seen":"2025-03-29T11:19:57.949518Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/cryptojs-aes-format.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6bc38f77922eaa6f1b23716034b4a2e","sha1":"db781b1e30c4f2a1d63d47054f0903c463cf01ab","sha256":"9ca00bddae85e30d59672da0089ea5e132df97d75a92f42114fe1befbaeaf32d","sha512":"0ad7c00c1564d77f8463dfc81003c0d6cd6ada4e3d01094331f72847f17718e4a6b2c7a2a0bcbd96a1107bc6cb9bcb1721e7b2968ae4544595ab98d39bb30c82","ssdeep":"","tlshash":"163177407debb4c287e8e1d50435a044f67b7a0ab1558ef3aa5aa404ffedf3006326e4","size":1494,"data":"","first_seen":"2023-03-07T18:27:54Z","last_seen":"2026-08-07T16:57:51.090464Z","times_seen":717,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/B9uVR_PM.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"cfac8a0332a6999ea177848f95ce5c58","sha1":"797003feaea3fdc022dfe3cecab031feddc2ab5b","sha256":"62360d67e33ba0a3986c1b0f18ac72c6d38e2682fed31ca00731120e71fce3c5","sha512":"f3943df4cc004ca8ff7d29a6b4444fb9ba95094ea40194931ca0d0720908ac3e5427e2612e8744b23838085a27e5b2c1e7520079710370c952c64c8e7598b454","ssdeep":"","tlshash":"21a0241d1410007d114d0df47f07545d4d700c1513f11fc44000d70507154df7d1cc00","size":86,"data":"","first_seen":"2025-03-21T05:40:09.047263Z","last_seen":"2025-03-21T05:40:09.047263Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BhpImTfv.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"17a9fd16b1e676dd4e2578a478f1d6ad","sha1":"b0eb677807e7765c620f36868d227a2c28485f7c","sha256":"dc7c84b7bc1ff3909a55d7606b640ec55d8de39f9682ad736da35bba6a01daec","sha512":"f81494b16158659b4d8a20bd96ab7dd2126119abff6f407c7797bd3db504bf2b9ef391f01e1d3c6d1418a1205a85d53c24c65c1a4ec718b8fe70d7241b18c8fd","ssdeep":"1536:QajQu9h2FWrFyq91sX6HXXJF707AMvrHCRAxpdh5ChaiwBNV5pLnkgy:QwQuL2FWLH855/hpy","tlshash":"f0c350475e0c0e7a056217b12fada3b362acc03471dbc3e557bf822823754656ee679c","size":120241,"data":"","first_seen":"2025-03-21T05:40:09.04822Z","last_seen":"2025-03-21T05:40:09.04822Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendor.370d3c70.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.98","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0370ff7829243474c67252498c379b53","sha1":"606e51601d0cf558369ce77f8f64da32950c4a8f","sha256":"c65fc16c3237b0820df080e77c05cf6e8e568561abd2c738afaeb3b72b6d72cd","sha512":"9bfb0ba05364a24c28aecbd313d37e7814b96f6be31106eeecb284e5e3d62083b4fb090f8a71d8f2d0a4e064ea217a710ab3c62164942bc9e54e6887f32002ed","ssdeep":"6144:XXzRL/zJBmZRnmlqYThrfZGykny+4hN30yrzh98nI5AhOIS2X:nzRL/zfURmlDZknchNkwzH8ngQ","tlshash":"6ce43bdc79d1f0a207f362f6807f140bf27a1969680c8490f761d9c968b994e9237f6e","size":672455,"data":"","first_seen":"2025-03-10T13:32:21.14846Z","last_seen":"2025-03-24T16:24:27.148666Z","times_seen":1640,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ccc7e49694640a7a38833ed2134cb96e","sha1":"3cb7ff697e5896a7816f6ffda0788fcea101be5a","sha256":"af8ad1f4bb1a446c317a060c6a0cb7abf61f12b5d2a50b5dc3f01a3e0e4c8823","sha512":"dd0fde3024e56bffec7ea275196f6fe3843979ba0a8356ca21f82725ed5dc320b9da8dbfa498f1255e0e1605649e68f6788cd97ccef0967bf024ad2fe4d6f450","ssdeep":"","tlshash":"3e51c8f9e5286a3fa05929dc78053300584d9f7ea0ee3da4d4c69368bc0739f29b179d","size":3010,"data":"","first_seen":"2025-03-21T05:40:09.04984Z","last_seen":"2025-03-21T05:40:09.04984Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/CTURe_1d.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae058339fda90c06fbd4df436a4fdecc","sha1":"59bfd50057365ab53682e6434d1dd793309734a7","sha256":"7781cd4f648e5a1d744108a8979d372b643b9ad7d571567f15e786474d22d28d","sha512":"77f5c48eb2e515fe0742c9870d453fa3ad34a333ab0696789c3bc66ff9e2fdf259c9c4f71136d16200aad877c3630b20f36fe33bdc3087153baaebecc3d0ffbe","ssdeep":"12288:I23LEw35Vj0aVLWZWW1BzkONSIe9olrToZ:I23LEw35VjhVLWQW1Bzk8SVolrTC","tlshash":"7aa44ae97196b02603fa19e4807b0106f3391a55384ec4e4f16dedea3d7684a92b7f7c","size":453847,"data":"","first_seen":"2025-03-21T05:40:09.042137Z","last_seen":"2025-03-21T05:40:09.042137Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendor.370d3c70.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.98","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recaptcha.net/recaptcha/api.js?render=explicit","fqdn":"recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d13357d73f29c6e9f349fcb7b8654b07","sha1":"1be0e9d4cbd57d0b9a001e37296186bb339f5b97","sha256":"275d749e4e72e0bcabdb5ba02db9f36aa9a4dad8daf89ca45d39f1a6bf188779","sha512":"98e0d9fcdfe657bac1355af5ad2b2823eb18754cdfdb832a63975e30451262fab730c21fd01bd4792a70bbbd224f74a54f0c58bb7f848612e32654527599c73a","ssdeep":"","tlshash":"211140b50515b0384f3208f5e0ebcbb6f081202cf11889e8e105eac8af2d8dbce15988","size":912,"data":"","first_seen":"2025-03-13T17:33:25.512321Z","last_seen":"2025-03-21T05:40:08.92993Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/GrfQ5YPu.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"9cc2ac6ea42c7088dea2c19c0d6410c8","sha1":"1c8313d17ab7c9a9373777ac986b011fd2713191","sha256":"742c1ba33ab0fd8f2f7329408edd78560e34fd1db1ec52be45092af7af5c1b64","sha512":"e246817becdae83f6a68cc5bdecce06e65aa9319e473964e8b03eb2eb7e1c97e57f88fa152620f99584afd80ad4f2efef937184a29f67a99ef3b63cc1e11d023","ssdeep":"","tlshash":"a6f0c0de91071a9bf91dd19fdf14fa2d94201a9cef8b4202f1a593245360996111c4b4","size":559,"data":"","first_seen":"2024-05-07T05:56:59Z","last_seen":"2025-08-12T21:10:07.74872Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BHrglONr.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"ded757171f873ae33ed42df08d4e4eee","sha1":"169eb8207bf0f1dcb59392333efbf5f91658fdfb","sha256":"f1f0bc1f7aa3f90807f5fe4d9be556ed5b0c05a4da8552407b8eff0cb1a216cc","sha512":"860eb8329d86c207f120f74bd9cdc9750f906dd37a57429085f4283fd93635422c1685b91e3ca996fa3a5a9a3586dcde7275d145c528a45dbba3dd90afeeea36","ssdeep":"768:7qTY+itM+orCjJJy1ee3JP6r1KCcKlyUW7YC6u64tH/9:2biJou3CP6YhcW","tlshash":"6cf21a487be0bc34c29a31d7353e09057b726641586f6600e009c6b97fa968a717ef7e","size":36459,"data":"","first_seen":"2025-03-21T05:40:09.029955Z","last_seen":"2025-03-21T05:40:09.029955Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/js/pwa-load-event.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f463b05f25296c1e185cc82087291f6e","sha1":"d15dfa009eaeeaaf36af83b20ace25714adbc583","sha256":"3f5bcf295bac81715b4413d640843ee19600f6a17c96503038c6a4193c331865","sha512":"5ecd0baa189383e24afadcbe391266fac63cdcdcb7da68ab1371168fae81f05f0140b4dcd86bc4cc59f4ebb3f5949e94b302f05de00942886fe3060436ae03bc","ssdeep":"","tlshash":"64e02b7483fc55b808e182b75f47bb15116721a77068d990c1871906f8d148780a2fd2","size":375,"data":"","first_seen":"2024-08-19T15:07:41.99372Z","last_seen":"2026-04-15T02:03:05.836861Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfDHPoqAAAAAJ5uqpAtCwZEtyusk-ogkGIqCj1t\u0026co=aHR0cHM6Ly9nd2ZnODR4LnNwYWNlOjQ0Mw..\u0026hl=en\u0026v=J79K9xgfxwT6Syzx-UyWdD89\u0026size=invisible\u0026cb=g1pafpbu6va3","fqdn":"recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"50f3fc9c1fcad15d838cf5dc0231085f","sha1":"a047e72a7fe8c2d5f51dfb38c0757e25f7ccc6af","sha256":"7ab81c0774cd39d0d6ca8e18ea93352931b429fbe15fd9353482919c89df5574","sha512":"94552707da2931c5d67f4e2e2c367ea12a7296e142dd9ac2c786f49a9d5342836007f3ba996fae9d2d1ed0d41c516c51e4722dbce22e2262a946d8ea708d3901","ssdeep":"","tlshash":"8ca002b2053584208e629950c543bbc4e187601dfd41c19470264fcdf3f15f7e140d44","size":68,"data":"","first_seen":"2023-03-07T01:11:40Z","last_seen":"2026-08-13T02:48:00.998421Z","times_seen":11392,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BrS-pQtB.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"065a54d962c0de16f4df0ec1c7f048f6","sha1":"a6c8031c3389ff86164d754d66f7d488baad3498","sha256":"8ac02db817042dc3cdd695337cb56fb21056210deb7cb65a8b1234f01f463c50","sha512":"cbe81e04bc6c21de3c2d57298218b11d9287f4f1285449652352213ba831359f3ee0efb4cf420693b77dceb217c902df5ecb2c5f39f11ea5a950c228892204e6","ssdeep":"","tlshash":"2231656ea3919e7a013100f8943530842592bd69394145dff93bea97313889ef81cab9","size":1780,"data":"","first_seen":"2025-03-21T05:40:09.053402Z","last_seen":"2025-03-21T05:40:09.053402Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/DYZ6qTze.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/CZMI8v_-.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KN757LMM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/OZv6iJsG.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"5cf0ce803f3fb65f1a297f632d6eaf50","sha1":"6daa65c0ac95842a55c271a1f25603ba99b4fd40","sha256":"e2bbc7ea980ef4de4ddafbd48f72dd615a759f8fc0fe81022af43c10b513862e","sha512":"db1c95d35cff981d16186da3274dbd2bc158bb97dada4e4904fb93f9b567e8ac4b95d1b401f005fb43379d727891a32538ee2639b1c5b3206ceeeed05b29dbcb","ssdeep":"1536:+7WUcvXJnXfZsUdMJqyiWNP3IDXRC216866jJBlxvHV+yThDkUXiA6wyb5gzbdmI:+aUcvtfCUYNP4D02fjpTaZyzbN","tlshash":"45931989b224b57742f75ada83b58201b2a04984f409d4e8b0fd9d7b457e95c03aeffc","size":94650,"data":"","first_seen":"2025-03-21T05:40:08.916931Z","last_seen":"2025-03-21T05:40:08.916931Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a33ed666c6407958ebe8d155cc83ab71","sha1":"3c9a3a812cb090f3ae7d11b080cfb4801a5894ac","sha256":"87487e7c9e7cd8bf7ff3940c4981bf49271f9967a53be5020b311b6299a44aaf","sha512":"2aaacc8bb3eefbb121ca57c259c0de1c89dedbfa00616408066f59ba8f04e22fbc1ce93ff30c1596d6efedcdfa8c0a9943036151d3da01661dbb0418f85ae62f","ssdeep":"","tlshash":"a921d265f94bdc9805ce246d951f260bf8740e4cde21f190d7f0fdc26878af52582a1a","size":1273,"data":"","first_seen":"2025-03-21T05:40:09.054292Z","last_seen":"2025-03-21T05:40:09.054292Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/B3Eab3YU.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"62f45e20894ee6c1c4b09e800017bcfa","sha1":"95dd5059bc46c5ee8dfcfef6e224def0e0f93565","sha256":"8e7c0344a70c4dde23032379fbc78f64ee90f1856342e9d37a980429eb745bf6","sha512":"1c4d44f83bb35155b0af2a3b2d4a15fb7f4c84d06115f76eb98aa9d8fd92f03ab63d4c867c6fc5d3979458c96d5fc155daa646b6af9fbed153053f101efa4496","ssdeep":"768:vXvx0TUuVEkt3Jx0lUuNEktfkt2NQZzvmb0J:6Tv/t8lv/t8tqStJ","tlshash":"cbe2c558b36592bcf001e7fc4a13a4713e576fe23a22c494c7ea2c16c96541d4daeceb","size":31636,"data":"","first_seen":"2025-03-21T05:40:08.955886Z","last_seen":"2025-03-21T05:40:08.955886Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/3MjjOpd1.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"6b8c7872cddb412cb9089e5275abe828","sha1":"705d7c2108191d0f15c953dc10f47b402ce23ede","sha256":"c48f6542ec96cf840c46c08f0c26ff6c32ede13a9057e8ac275018e04827a017","sha512":"87eea4e42285a07eded4c31d1decf3ccb9327de575ab0cf0d46343fca8f3a41dab074e131c0794f13dac832852000dfd249bdfabdcbd594f39bfc207932abf41","ssdeep":"","tlshash":"463153c9f29ce4b7d097d7ac8472842076d87afb3fe8dbd4c280997156230967a4e9d0","size":1644,"data":"","first_seen":"2025-03-21T05:40:09.05517Z","last_seen":"2025-03-21T05:40:09.05517Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/Cisep7MC.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"83b68911026ae33501beef1e365a8ae1","sha1":"7e5f10f4d712189f9f6ad882a5e43f9583524d72","sha256":"44c077b518117d660597976ffa9e2037e3e33f21b499fdc45653099c196af515","sha512":"209bb6b9f1b3689062d8796e8ffb879943353eb0f5af64400848bfe0c763bb44e19521bd7d3b35b7306923b3147db80a974030fe5ed90c915dbf36f041020fe5","ssdeep":"","tlshash":"5f41c85ef256783904e250f05c0a205015651926b127cdc87537cad626714fef68effd","size":1952,"data":"","first_seen":"2025-03-21T05:40:09.056016Z","last_seen":"2025-03-21T05:40:09.056016Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/Chd1ThOZ.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"317a2201ef3851dba19e8b41380c8518","sha1":"69f8afc7452ae5bbffe308672417d74ea784cee0","sha256":"64cbae9ec71c97c3ca661b3a42c7f0de57972f702378830b7911e5a148b1cb0b","sha512":"4d8e02b904019b8bc965749301e7a14aa67543e54a8b2a19862be134620f94b55e7a2481c50590bf05fc5b7f6ce8e54746b77e238fa7b3a83fbaf81345be42c0","ssdeep":"","tlshash":"372130aebb3aa7bc7c245a5f42306f30f0132096ffb8945cb8d22126e3425a155640b8","size":1151,"data":"","first_seen":"2024-06-08T05:57:25Z","last_seen":"2026-05-26T01:50:53.816934Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/Djq8TtDs.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"bbbfbdf95ad5dc43b5d1758c33b260ff","sha1":"fdccd0d9a8fbec61e13cc4330d0deacae76b02e7","sha256":"061d48f7340e1ed8b80107fdd21d7b2705b3b694856899a6a8b6ae116a24244b","sha512":"268e9b5b4296bc416dfc2d1f6128fac6bb5a987a8dc74420348d562650f0d08d78b83eed64c2168902d247670679496e70c933dc23d620abd0d389a971317d2b","ssdeep":"","tlshash":"2011ce4af2b614517bfb4786697004017220797a2349c3cc7c1a5def2a27e8e3195bfe","size":880,"data":"","first_seen":"2025-03-21T05:40:09.057668Z","last_seen":"2025-03-21T05:40:09.057668Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/D8RhbWKa.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"f46ab5e33f7720b88cddf34668c8601b","sha1":"46a46b7b1f975502bfe653a64bafc43b3909d79f","sha256":"5112dabeea1f75790974922e6ee17b1fde07e2e2e37848ef13c96dd5af9efc39","sha512":"d9a7c54696e447030be612c141ef8d505f2e0185195dddba011e5961d67d799eebc404c3cc7abb4048b546202c36a6ce6d4f4f4ea632c163a25051c825513892","ssdeep":"","tlshash":"e3416573b1906475d2b38be94c848538f1dac2bf6eb0c9d090599f3a54697e1b70fb04","size":2345,"data":"","first_seen":"2025-03-21T05:40:09.05836Z","last_seen":"2025-03-21T05:40:09.05836Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/js/pwa-load-event.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f463b05f25296c1e185cc82087291f6e","sha1":"d15dfa009eaeeaaf36af83b20ace25714adbc583","sha256":"3f5bcf295bac81715b4413d640843ee19600f6a17c96503038c6a4193c331865","sha512":"5ecd0baa189383e24afadcbe391266fac63cdcdcb7da68ab1371168fae81f05f0140b4dcd86bc4cc59f4ebb3f5949e94b302f05de00942886fe3060436ae03bc","ssdeep":"","tlshash":"64e02b7483fc55b808e182b75f47bb15116721a77068d990c1871906f8d148780a2fd2","size":375,"data":"","first_seen":"2024-08-19T15:07:41.99372Z","last_seen":"2026-04-15T02:03:05.836861Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/sentry.fc52057b.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BsH4BlRf.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"d6fe916dfca624ed252195c7fe8f7725","sha1":"9373a9130aa8eb25ad8eb6eb451b42d91f122334","sha256":"913981cdfd84646249de3452d1e22176ea48248ec4056fddde4d0036f8c7e596","sha512":"cea235c36d8bf148af17119c0ebedfd27c2b4e65900744ff1199f4f227f9251ed7f31ed1e8984427bc53e9f2e850cc13e21099c4f7043582a4666db9fc88c8d4","ssdeep":"","tlshash":"7f11345e90351e9dd06ccfba846af38330209dbb2713e0587959e1a43eea4034d28f32","size":926,"data":"","first_seen":"2025-03-21T05:40:09.059217Z","last_seen":"2025-03-21T05:40:09.059217Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BVxTRXQb.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"38565edb2c56a124e6bcf4318340880c","sha1":"b0afa60f28bcbdab20fdb81f3fb97de846e85516","sha256":"5e026af1c9499f81fb7b261e530e3f2426e60eda26e57629f2f1d99d65f475dc","sha512":"57766587f49bad5039bca97642ca7e39a102d0ea08f5b2f9302b1261873d04f11132a9235702acc583c4330bcfe616b49523fdf036a00e2903f6ed843c7d304b","ssdeep":"768:JDElEQwrv7kJDRuOiKFcfWhUMkRyKPBkD2T7YxWhKt9cX6czSDAzgUQDjje67sTr:6VRuOjFSe6RyKP33YxOqczSDAUUQY9FX","tlshash":"adf2091df00dad3ee17b6dc934681841b21d1feed0054da261fc5e18a79a83827eef69","size":35751,"data":"","first_seen":"2025-03-21T05:40:09.06018Z","last_seen":"2025-03-21T05:40:09.06018Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/J79K9xgfxwT6Syzx-UyWdD89/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a36163aa0bbf83ab5d1c9fe0ff046c7","sha1":"b5d6c2eb38480243e8527d29030a895e4558f0b4","sha256":"430aa09e2aec35f41afac94b13f2550d632f4d12d14549ad3344cf29aa9f40a2","sha512":"a9299850ab3fdeb4e86da6e8a1d66f4b9c80bad0e4cfb0105a7d2dcc7ff380181a611b8681b639e46815bec3de31dcaa700fd655c23f8896d42391328fee4663","ssdeep":"6144:HVFDGd9+8cScgz571y+joHXFQuDApgeqCygEeTXB4MGzI8yeK6bDHdClUAJR7Duq:HVxG+LLg9otDAd6SbBpJ8U3lv","tlshash":"c7c4f7ec702278b1837375f190772199a37e956ad45c0c5db098d9f02eb4849b0bafbb","size":558604,"data":"","first_seen":"2025-03-11T03:43:12.27372Z","last_seen":"2025-05-15T13:28:50.499676Z","times_seen":4256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfDHPoqAAAAAJ5uqpAtCwZEtyusk-ogkGIqCj1t\u0026co=aHR0cHM6Ly9nd2ZnODR4LnNwYWNlOjQ0Mw..\u0026hl=en\u0026v=J79K9xgfxwT6Syzx-UyWdD89\u0026size=invisible\u0026cb=g1pafpbu6va3","fqdn":"recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7c5bc7e2883505797269d6501543d577","sha1":"326ad43eb9a28d5ec4546bbc23c02db5f76f89c3","sha256":"87af1c61d9aa5dca64e1dbb12ea35e78ffa12ca3cc96afb26fc4a789959fa3df","sha512":"2e33b422cd9ce035b09723c414536ac2e255c2462806c8cb2fa730cf388cf7cb609ad249db2465072cc4b3e7b493282226acd48e87e2e4897db436f6b2317bf6","ssdeep":"","tlshash":"a07000083c8c20020032302000cb08080022080000000002020008800c3800a202bcc8","size":22,"data":"","first_seen":"2025-03-14T01:03:00.260578Z","last_seen":"2025-03-23T06:55:22.174367Z","times_seen":1156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BxyKuxdW.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"8c6f7a4c6bfe5033df690cd73d47f526","sha1":"cb09ff8c54c2a0d8e207d31f60d47363a4516ce9","sha256":"122155e63ec29247e0f157c55c680f9a957c0e21eec6ed6afeffdefca96673d4","sha512":"2f3adfc23e11914a7c7f74260e8bea9dae3aa3e76d6290d7b3ca80dac9789b1de36d112da0266819145598188064441a751e9945d3e844ae7e362369bc494edd","ssdeep":"","tlshash":"cf21111c380560bb138653e088de184ee208bd617babc4c5e2cc7d677d27999c84efad","size":1432,"data":"","first_seen":"2025-03-21T05:40:09.061697Z","last_seen":"2025-03-21T05:40:09.061697Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/cryptojs-aes-format.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/CZMI8v_-.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"fa42278b8029f9c89bbc0139a97f51bf","sha1":"f7590db1c4f6ed7dac18ee9d02c02f09af2eb3a1","sha256":"b494eadfb7cc8447785e6577d011759c4fa511033d55a9440cf22e73fa4d24db","sha512":"692d5df09f315167bc681342c758ad882fef8af1d95063437d1f920fed197bcbcdea710d1abc0ab2a681b1dcbe32429b2cbf1695479bb4dbc7c3d0b71a91c187","ssdeep":"","tlshash":"42d02bcdefb061b4bb04455c449bc753c718b90022996ac5e47a65512f14d92c25afd2","size":285,"data":"","first_seen":"2025-03-21T05:40:09.062399Z","last_seen":"2025-03-21T05:40:09.062399Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BtCQzjHd.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"62a5d13a8fbd13785a5f6f8cc0072160","sha1":"d4748d454e9bb185d7c29a8092ddfc5822e84447","sha256":"96ece96f9813a290b87aa808bad073af0667b0b15d5f0992c66d99fb49e5d1ab","sha512":"a5f78f0df8776eb8d3447c95a2781814d7ca2a21e494e415641285f34a37a4afa0cfb30c2078983ba4d094a51d5951cd36758d4055e3c3aadc34333f92c7ba0a","ssdeep":"96:0PJZV0htFtbqKhNTS03OLODWOLONNwXOe3WRb4rV/74ZIiZuK/squSliw6xiC5wf:Ywb/1C1YXURb4ZeP0MiSliw6xiC5w6OX","tlshash":"cca186406891fae20fe208e294d54002d7984718dc69bce2e7ed4e766bddd94638fb3d","size":4900,"data":"","first_seen":"2025-03-21T05:40:09.063373Z","last_seen":"2025-03-21T05:40:09.063373Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VRDLWS0SHC\u0026l=dataLayer\u0026cx=c\u0026gtm=45He53j1v9186219929za200\u0026tag_exp=102015666~102482433~102788824~102803279~102813109","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/frame.512ab2ca.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.98","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce51876983cb2506bcecd23b0188b2ab","sha1":"e21c344640d3fd5ee571bff85e1cf46088834ae3","sha256":"d0d4050fe3234edbe514a2747c7644e4e2b536b7fd359e4a95af99ef11d6c0c4","sha512":"f10664ebd46602c2d8e6f2876e3c18daa163eaf8be2e446948790ebb1bed05fbfa2d76e7434ba22dbdafcca98786712ad343d486a7d0b6b8275759dd1913cde5","ssdeep":"12288:kSCjr4MV+RRx63adIVYQbsJ7GuShiIPuuMb9X:0xC63adIVbYJ7Jb9X","tlshash":"3e15b4ccb2d6f06a03976175813f200bf33ea999b54d8054e669e8d1bcb858d9237f78","size":926320,"data":"","first_seen":"2025-03-20T17:52:29.483613Z","last_seen":"2025-03-21T09:41:23.678999Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BW8fah77.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"60d129af05ac5ba3a8dd489f10e0b846","sha1":"199d77c9fe174ec0b562274dcbbf56c388addfde","sha256":"9741ea08901b1dcd3c517eff5588a091b4f9de5757809abbcd681de746fd5d06","sha512":"56bc20073c78f0bce766ec658aa0618d1073a51a36d93ec66763b047ff0a3d569cb772fd0fb1b552fa3ae013d9fe3192e9670ca373992dce0061814e0d8d670e","ssdeep":"","tlshash":"e3f0a21db76da03134556c58604c9104671dda46f4a140e0bb505f9a7153651cf70dd3","size":602,"data":"","first_seen":"2025-03-21T05:40:09.06436Z","last_seen":"2025-03-21T05:40:09.06436Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/Dwm2o3f2.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"cd4df72a97530f6f9e026695db5c98f5","sha1":"80aad54a738dd74b642818e58d53ca45d58a2d5c","sha256":"3b54edb6177676384b1f195632109b21d43ee89ebb1fa875143d27cd42f320ac","sha512":"6c3303ec20c0a4e2646e813be6b3cac08931fb7e40fc24d7fc05f44cfe190d201139af0f32c4bcb5fa0d696ee6cb0194f56e59918ef81f06649bdcaad483c670","ssdeep":"","tlshash":"b541ad0e9586d264eaeb0015a51c0281621cbd9ee464085df2fce7effb1c87d7b1da70","size":2215,"data":"","first_seen":"2025-03-21T05:40:09.065234Z","last_seen":"2025-03-21T05:40:09.065234Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/3MjjOpd1.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"48ba2882d5e525d12ec738b6c34ec6dd","sha1":"cfc0744bc41a539c3923a0755ecfc2310c70a037","sha256":"5994ea7a882e911a129820fafcdd56cdc6e12a5f915f44e5b68b20b626da4e86","sha512":"00df1f35bca80aa3f9ead75a1f203e5710dba6094cf5822164ff70d5d9f816f70005e00029c21ece5065168e85abd8496cdf03b78f11de10468ca120f19cce43","ssdeep":"","tlshash":"5621d265f94bdc9805ce246d951f260bf8740e5cde21f150d7f0edc26878af52582e1a","size":1275,"data":"","first_seen":"2025-03-21T05:40:09.066041Z","last_seen":"2025-03-21T05:40:09.066041Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/cryptojs-aes.min.js?v=1","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd93b7f0987a614bc17698503bcb6af9","sha1":"68a66448326499ff34c75bf31e2769b278584e0c","sha256":"8d4fae1a37a5b5338c889d0897b50024194b4d3ae94940e7e42c1c1423a1183e","sha512":"e3b87dfe10c0e3f3d801a85ae9c654a74eac22c2a93a757568a0d2b13755c36aeb5f9337e94a21db4ef2d1f0f1cfb98fccbbb0151d5cdf8d967730df96bfde98","ssdeep":"192:9BIGDmDm90mP9z8Ui015lN1I5rI2Tru6hMJFmHV+mdpwIfyAaYfKnNVYkUUFJZm3:9yiB0ez8UiIX1SrTegsEHJuI+y8Z7AX","tlshash":"625297c936edb94263963028587f6017b86b28b6945c4824f29cd4ddff9899dc03ae3c","size":13722,"data":"","first_seen":"2024-11-30T18:08:34.076577Z","last_seen":"2026-06-26T20:23:29.818692Z","times_seen":1206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/WPiWsW_T.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/tPdbiW_V.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"af7805d42f0e94d87c24a603905aa544","sha1":"7b8e20de9b8033988fd4fb49ae5214be2a1b317e","sha256":"67962a43b72e5541bff19a54203273e73fa6a40aef2c34b20da51c95817d336f","sha512":"4f5b71fae1dbed1ca64d3290836d4ee5f28885ca526c71eaccbad91c58ee45a25d2a2e847846f68d8e02509d5c833f84c2e7a9928991b0418953cbe3dc954732","ssdeep":"","tlshash":"07c01285d8202077cc607828a1d20f42027e3644e115d17c77fc2482f470565a4aec65","size":192,"data":"","first_seen":"2024-05-07T05:56:57Z","last_seen":"2026-01-21T08:18:56.877435Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b54e7d467fa78b7231bcb35281a42fd","sha1":"1d7bfdedc46be4f176ff4410d2771e2c699a81be","sha256":"f3153d173595f1f1049ddec2cabd1bb051017a90072ec1fb2d2fdea9323ac058","sha512":"b2a8b1ee27aeb69ef95d8c299f87c8875758c76fd8c64bc0a403c179a0944837b90c5888237d6ad8bc704f5b90f449bc82c1d45e45201cd321242a0a5b301448","ssdeep":"","tlshash":"29518486f35598222bdb38bda33e5206763217f21d5098f2b2719e417c18acfc523b5d","size":2756,"data":"","first_seen":"2025-03-21T05:40:09.068305Z","last_seen":"2025-03-21T05:40:09.068305Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/CLfxcPb_.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"6662a6840e056a1d25cf7b10534de34e","sha1":"9fa23a8e7447af22bb02bdde61ca3b2d1f2c70c4","sha256":"f03f78994697bfc75051ead86afe513f25a4d32fab43055b9f57fae4a573cd0e","sha512":"84f96032899e46531d2b40bd465a0130f95789fc328f7ca4c5f18facec99499b5ab350849391b8f86a896884bfb5aee87adb210cd54106681f22f718bf4da0fb","ssdeep":"192:muTmwhzQyxeCR+n3otu5/KwEnS2ZwETxQQR34Hw/G+lqiKq:maPhVrE3z57ESZEtX4HklLd","tlshash":"3fd10a0df255ed36c07350e4d41a2104925e3be2faa688d0b1b8dab327364b9364f7cd","size":6281,"data":"","first_seen":"2025-03-21T05:40:09.069298Z","last_seen":"2025-03-21T05:40:09.069298Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"20b714f6834c9ba3ff5c4840c7652ac6","sha1":"dd08ae7ae1a0a8513a4f87e4ea948993cb8d4dfe","sha256":"c8f48b7e1dac48b5e80a11ad51ff3701e88794ea9d1adc031c79065808c10b6a","sha512":"6d8637e9b00803a73b397a4cfe92c9140d2c40f7c5d0292259d3d46df7f2bb578722db35f7b6cf0ec05f8ba464b1a6c97471b1fb41eb266c8bb1345bfbe24091","ssdeep":"","tlshash":"7121d265f94bdc9805ce246d951f260bf8740e5cde21f150d7f0edc26878af52582a1a","size":1275,"data":"","first_seen":"2025-03-21T05:40:09.070189Z","last_seen":"2025-03-21T05:40:09.070189Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KN757LMM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfe08c62d0067b9cd652524254b20d3b","sha1":"e31f216d27c6c67b969b25967fa6d3945b98e9de","sha256":"8b1369d2fc369f8a42430ad6e816f4bbe7f2036e3ed5a290a928c268adf60771","sha512":"647b92b071f69b5ed0f4ff4dbd0caccb9f0526e20ff013c38dabecd4cc36231356a7ff04b28ad36833cbbecdd207ba8165fc5c1e9cead6615578a3b4f38f4aa3","ssdeep":"6144:A/tuMmxh8pMMSHkRzZroNnSmEyRZM1iYDbbP2X:AIMY8pZmEA","tlshash":"1c6417cdb3c6b46683a27879503f004bb17b29a2f84cc894f195c9e42d74aaa4177f7d","size":332515,"data":"","first_seen":"2025-03-21T05:40:08.940794Z","last_seen":"2025-03-21T05:40:08.940794Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfDHPoqAAAAAJ5uqpAtCwZEtyusk-ogkGIqCj1t\u0026co=aHR0cHM6Ly9nd2ZnODR4LnNwYWNlOjQ0Mw..\u0026hl=en\u0026v=J79K9xgfxwT6Syzx-UyWdD89\u0026size=invisible\u0026cb=g1pafpbu6va3","fqdn":"recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"16faa4827c488a16e5a65eb03a60d625","sha1":"38809d946de03a1110db903cbffa71a26f11f460","sha256":"5f8409ab2564b6afbb84d722169fe5a0e107ff56a13dd04c04ad54fa473c7016","sha512":"fbdb7656a416cf9cd252aaf0ae3dc2653eaaa2dd08172e9feecab6119de50057bf8133f31afb8ac1ededb11d719909a2ad37ea230c0392bb89ae299c17615191","ssdeep":"","tlshash":"84a022002c3e002e03fe2230008a00802222302320800c08a20fa028e2e280003cbe0b","size":64,"data":"","first_seen":"2025-03-14T01:03:00.25749Z","last_seen":"2025-03-23T06:55:22.178118Z","times_seen":1155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BTxe0m-E.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"81e99bedbd10737b031d6724b1068a80","sha1":"dae7a7f22ef2e466b4c421c02bf864b97a9113a1","sha256":"020cdb0c255c452ef360d7b7bdd32827b022f0f21a16fa17877b3b710c20109f","sha512":"bb35d6af0a652b5ff93ef253223d92eab17d6d3c3145a297a2803624a65ab1a9b2285f066f1f1b787afc427a515de5e30c602f0fdbc17d6d0a514509b5efe87e","ssdeep":"","tlshash":"46d0c083fe1124cfa38b1363f3320332a63408c832aa133296b834cb880f41d8c21f69","size":201,"data":"","first_seen":"2024-05-07T05:56:56Z","last_seen":"2025-08-12T21:10:07.727533Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6f2965a8a89a5d5f603a655042064a7","sha1":"eca7488a6ccc2f2832f5230036a35dd3008820a3","sha256":"2c2d997ce5e6ca7ecf03351397fd1e91600e7ed7a1aa23930d6b7cb13f7b914c","sha512":"151e58f8c8a20889842ebe7e415c859ef2cc71cc611369ca34cb65a7900a43b6a522bb196810c2c1668685118bd52dfa1e4c9d4f6460e613b52db1efb1988ebc","ssdeep":"","tlshash":"5e518486f35598222bdb38bd933e5206767217f21d5098f2b2719e417c18acfc523b5d","size":2756,"data":"","first_seen":"2025-03-21T05:40:09.072499Z","last_seen":"2025-03-21T05:40:09.072499Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/B_c0Fhba.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d578ff51fa4a13b771509db6ab919bc","sha1":"d431159db222efb3e27292ec04e0455adca2f4de","sha256":"4fea1fae15881bb28ddca9d028606a7f95528a5bff7256040630f3c90ea17e97","sha512":"048c2274bd22f898bf8128167579745310d0465df9fcc8ccdc878b96d622824fcb0162bf4c72b371a89af0751faa2dd8ba760a8cca523652a4143deaf5efd6e4","ssdeep":"384:e+0XHtuUeUeUZIbVA/sAHuS11HMajg4km6MFoyuPFwPEMCuzYppU:e+2tuUuU8S11Maj5km1xutwPEMCoYXU","tlshash":"c292e71cb44cb93bd7b284ed653c010231241fd8e60547d791bc5a5e2beac7c67aaa2e","size":19687,"data":"","first_seen":"2025-03-21T05:40:09.073325Z","last_seen":"2025-03-21T05:40:09.073325Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/fp2.min.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"02087a3f4f46b15bc198570d800bff41","sha1":"e59f5e3521d8c60e5772de1f65c90e5b87d9eb9e","sha256":"e753042decd90a96d0636a7df16df556860af92ca09ac37f0f6ab1d574acd1f1","sha512":"2c733c348e26c0b400befd5ccac6734eb06a0ca0c8c638f8d3a66afd75ea5860c6cfd3a913ba6dd6824bd9c629c2f28d14204efa625b10fa8fd9b366ba82c968","ssdeep":"768:J2N6EbuZaWRhGT8e20R5J++t6cOrVrzib:oxuZaWRhGoF0R5UVra","tlshash":"e6f21b96b2e8373c8143b063394bec15fb799495e784808a5e2d4180f8758e9e77bdf8","size":34877,"data":"","first_seen":"2023-07-23T18:22:17Z","last_seen":"2026-06-26T20:23:29.90284Z","times_seen":1217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/D0ptTuKO.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.intercom.io/widget/knfz4177","fqdn":"widget.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"54.240.174.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6afe6e258eb97d6d0c0c7d491637c0ac","sha1":"20b4a2d91a359b7ecd62967089b63a6b92f5b323","sha256":"c1330a4274f75eaa9fc1f9de467f105eb40ff421f4865c7cd0d79ba2e55731f0","sha512":"900f59273eae24230e20a16e313459385dfae697a4a5a6d85b76b70e9c86362f282057c2b4bbddedc5e5b9975628630b9b2046e97eab6fe15e9c83fab603015f","ssdeep":"96:vv8/xVqhstBp8HEZgOM0PI0FNb7fADT9+tlb1JFrlPu:vOVGH8bMkbMHOlPu","tlshash":"2bd163eeb2c23d3806a3157a623f770c7f3b648028494810d06989d87a76dc7c15bfae","size":6742,"data":"","first_seen":"2025-03-20T17:52:29.564194Z","last_seen":"2025-03-21T09:41:23.687173Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f03d1bceb0d8d891798e984eff7b9241","sha1":"d11a90b4a7cbdfd024485fdecff49bf11854b69c","sha256":"1f57b41c7c751dd5ae0511ac65792b007bea17bb27079d54e642ffa2a8d9fbcf","sha512":"a3ab39349ba6604926027898ae879be5b595864463b747f14eb138fdcbb9e7a06026c4e8dbf9d343d18522028a8c301b6535b110b71cb7b58c08ebd3344f0f38","ssdeep":"","tlshash":"e7518486f35598222bdb38bd933e5206763217f21d5098f2b2719e417c18acfc523b5d","size":2755,"data":"","first_seen":"2025-03-21T05:40:09.074894Z","last_seen":"2025-03-21T05:40:09.074894Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/VXL0wkEY.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"7bbbca3964f70a4cc307a6bba06b16d2","sha1":"76f70c6b5c5d24ada63f9ec9b040f71d0d0143b7","sha256":"1d29b15f03a169544365cbcc991f76c66d5b3224aceb617f659c7ff31504aec5","sha512":"f68bd4e1dd4900140ef42d51c79c571db66459c8c982ea00906473ee224fd317da14755498f9c26db5e1a0abe3ee757fcd97bf229d737cbf71e774d0e3761ffd","ssdeep":"","tlshash":"b541122b7eda54311b253430e0db5563a007e6d24c1dc321b9204e9d7a61e529ef2fef","size":2274,"data":"","first_seen":"2025-03-21T05:40:09.075809Z","last_seen":"2025-03-21T05:40:09.075809Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/frame.512ab2ca.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.98","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfDHPoqAAAAAJ5uqpAtCwZEtyusk-ogkGIqCj1t\u0026co=aHR0cHM6Ly9nd2ZnODR4LnNwYWNlOjQ0Mw..\u0026hl=en\u0026v=J79K9xgfxwT6Syzx-UyWdD89\u0026size=invisible\u0026cb=g1pafpbu6va3","fqdn":"recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"41f6955dc7487c70a39ce5fbc1054ec6","sha1":"4f8976ed6111589cfc05b3ac77abbe37fcd17e56","sha256":"9bb63db80b21840d1749ff5429d3f9a5db915d6940949fce8e7ed5cdc7f80e3c","sha512":"85e1ba5bf482804d920b82c4f0934e7472bfe11f235354296e01ed97e769f6c34016c5a54d847522af5989df6a327c6ab1be384bdb3e0c2d6b0e56cc8691478a","ssdeep":"1536:AvifiPiplvdrfbZV0uLfKjcNdqdeooy9/:Nq8l5VVKjCkdeSh","tlshash":"d453bf3a965334abdf7f9e004bd296e9233f914e2aa106cd16f705c34669c927b390dc","size":63593,"data":"","first_seen":"2025-03-21T05:40:09.076698Z","last_seen":"2025-03-21T05:40:09.076698Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfDHPoqAAAAAJ5uqpAtCwZEtyusk-ogkGIqCj1t\u0026co=aHR0cHM6Ly9nd2ZnODR4LnNwYWNlOjQ0Mw..\u0026hl=en\u0026v=J79K9xgfxwT6Syzx-UyWdD89\u0026size=invisible\u0026cb=g1pafpbu6va3","fqdn":"recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b917922850063db3d392932a0ae52915","sha1":"d4bc140aa95db6622beedf0eed2896b3ddcedd28","sha256":"7131da3d4e0f9b0b7dc68abea19c0985a88d91b0beed628c51c215304a8ac847","sha512":"5ea11e76612e1b451f4f673c3120b06446c5e77def82755e88391ee1f8c41fe1f1a8f83c06e2c0bcd47b61d9986f3f24b32f6e03c5f4012a42adb4420029a5f7","ssdeep":"384:DoZuVnkocjNIr+tY3n6QeXTAz2TW5OveJw4gysPLCPz6GXnaepYJvmzAR/lPW5gG:/VnHcjrYhG4/XaeMvEylPq","tlshash":"6882d9dcb262b01956b3b0f0153f0059b5bf795268096848e21dc5f86e70e8d91affaf","size":18877,"data":"","first_seen":"2025-03-14T01:03:00.275235Z","last_seen":"2025-03-23T06:55:22.177364Z","times_seen":1155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfDHPoqAAAAAJ5uqpAtCwZEtyusk-ogkGIqCj1t\u0026co=aHR0cHM6Ly9nd2ZnODR4LnNwYWNlOjQ0Mw..\u0026hl=en\u0026v=J79K9xgfxwT6Syzx-UyWdD89\u0026size=invisible\u0026cb=g1pafpbu6va3","fqdn":"recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a3e8fa9d20bba48b976315b7e57c07d9","sha1":"b5250b11bd6f1dd51c3bb0528b2b2c5d44d05029","sha256":"94cef5a89f11f5c3de750d572bef3b97e4fa0cbc566e868ab98d9bd781654fef","sha512":"d2898fde33bca07f8834c22f8f8a52955ee2b880029dbd7e6a83832e3250c62b65270f10d94079126e9e5f30289552b5207e2cbac4b67e3792e4b18d8f6cf971","ssdeep":"","tlshash":"217000083c8c20000022302000ab0808002a080000300c02020008800c3c00e220b8ca","size":22,"data":"","first_seen":"2025-03-14T01:03:00.273784Z","last_seen":"2025-03-23T06:55:22.168671Z","times_seen":1155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim2.ru/v/ui-resources.php?location=default\u0026mode=desktop\u0026lang=ru\u002644689108\u0026callback=getWebimUIResourcesCallback","fqdn":"gx.webim2.ru","domain":"webim2.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0999db46af3726d3ab44ba1335a93688","sha1":"1436b3828143bab8ff7d38856f06b1c9d1aaa654","sha256":"e0eaf15f6b1ad1e90321c10347bd0832c88f4f4985700654dcd645d51109ac2e","sha512":"b1e9e29885e83da69d7e42fcd4db621ab3a822660013256a83597a8185d5cd81797d374bedde392a88455a57ddb675359fbd6512e73b1dc760fa9dc9b5e1ec93","ssdeep":"1536:QQHOcWqV61g4iy5VkMNMKQRgME234Cs57h7Fbsas1sUs+s1seT5Ggr6uN+Y3L54g:K3bvyawQJ3gy5f9uZS44WkHD","tlshash":"3ad4270feed21469be6bee6361f70655713d34a25590079cb22f34de2f81ce29322b64","size":619334,"data":"","first_seen":"2025-01-05T05:22:17.123372Z","last_seen":"2025-03-29T11:19:57.877228Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BhpImTfv.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/cryptojs-aes.min.js?v=1","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BZED2XnX.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"c08a81e9a6c023e0812c731fdd9845c4","sha1":"e01c06be8deca47d87cfd48ae3c5959bd4adefcd","sha256":"15952674fea41a959e4a436564b4398d5ad3a3d185b3a253f2b432a660f70643","sha512":"720dbb756e7fa1351175fc82f160a8aa611da5689be263a435750b73b0f8f47308c58235e69a4dea27f1c5cc28f96ca69839cc2350b1583da2b9604ca2d7984f","ssdeep":"48:VQdbsb4bmbLB8qPsjuvzkWpi0HurB4XTPLbOYYC5iKTv+pl5MafQCM5DNC6NMgF8:VQjqPsCvzkKi0XP33biV1LfQFVlrVTxA","tlshash":"2d818c29db38b12d656b3a0b31e35cecc38bb025eb791c390f88da0b7035959e919578","size":4149,"data":"","first_seen":"2025-03-21T05:40:09.078612Z","last_seen":"2025-03-21T05:40:09.078612Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/D6I7FdZC.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"9db7c956f35da1748ba1a78715b7ec88","sha1":"eb7cf163611390e7f71d7b1095761fcbe450039e","sha256":"8921daeba666658cc22b8edbd82b981678e3ca6117056da13f301f96274401d4","sha512":"e9b54e5ab2b24669c8fa3badc4059f28672741a728c38bd912c911eb802f563c308f63b78bc252d4affbe0c74e6555ed689a01fe734e769680dfff0bf7fa3436","ssdeep":"384:ln1f53BEQ5M/0kq+ltJoIyEVKfHxvVe27EDTx8aaPqQjxmlFdb0BzSnTSS5q91n:ln1x3C5/0p0JoIyEVoSPBCPqQjxmlFdY","tlshash":"b282f80ef44a587d16b668d439d49905b6381fcbd04008e2b8f6cf621757c6cf37eaa9","size":18363,"data":"","first_seen":"2025-03-21T05:40:08.902486Z","last_seen":"2025-03-21T05:40:08.902486Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/DDfSOCvz.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"875b2b77faf3dde6350b027f71993b51","sha1":"feb2f28d8064afe3e14918179d372714606e1c27","sha256":"64f8b27f018bdff011d831d5de896366822ac4f1d3295db39498dbf36e1f7846","sha512":"52cc74af0d38733a6cbf5cc88a9225b4926900e4d5713821ed6045541e36691de9ce5dc7579a4417d0243e7257de449d2d15fb28764afc3278eeffae914001fc","ssdeep":"","tlshash":"8bf0acc8f424ef3326831a9d0013ba3512513d4cba30367096d392b599cf41de37d6ac","size":615,"data":"","first_seen":"2025-03-21T05:40:09.079307Z","last_seen":"2025-03-21T05:40:09.079307Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BCJiRCLf.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"42299b07b43aec512bba5336deebb8d1","sha1":"70bbab54e06d2065750ab10f0228c4466546de78","sha256":"c403e944aee4aeb65f2f547c115c227a3ca8e73f1c927344e5f35979c289f7b1","sha512":"efd4504538091a54bd8267bb6cb8c888e711e30210ae5d0ed278f65154ca5e2f48b7d01cb3892deb8a9bece73a35ea3067b29cc939d5c3bbef0aaf95d30786af","ssdeep":"96:irMd2mdJRoEDHyTOQVDITA8I9diuYQfAEhG3GTG3GFfbAFAdNyJcI/DtA5l/88W:GMoy/jDSTOQt8I9kuYQIEhG3GTG3GFf8","tlshash":"f2a1c64eb068bdb6497b3cc896f90ad2a31c26887432e4e026afcd6f1155c41eb5d3c7","size":4667,"data":"","first_seen":"2025-03-21T05:40:09.080084Z","last_seen":"2025-03-21T05:40:09.080084Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/CvukIv9x.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"daf80f89c657655e996d43df19118d0d","sha1":"480439d9442d2dbc1b7568661ef8f6b9fa196071","sha256":"9435fc448c07bb892677ab48b0adcb549a23bb9fde3cd267383aa4e4220d17ad","sha512":"507765437dfdfa283ca65c4c1195b9bdde48506a58e0485a55bababb61a4843215692281a60f8de4cbd329cd29049bc69a1f425ab0a8183a1583d2b83a42654b","ssdeep":"768:rU4ML3uaz4sTQ/AyEdyAMwi2KFnyY+EXuwZMjE/1WkOWwDbBcvFjAB4TyMfqVZVv:eMxrzh1v2cdu0Fa","tlshash":"e203fac8b2a1506583e2a1a390750203f33995157409816cbb2ceef7ad7eeca7277f75","size":40666,"data":"","first_seen":"2025-03-21T05:40:09.007591Z","last_seen":"2025-03-21T05:40:09.007591Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/VZmfE2m7.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"37dd6310a46709fa62d9324fecf77fe5","sha1":"86937cbe135215d18cf71a04891bf2a148fc02a9","sha256":"bd0d9b990a23fa9eb216890c162485a79ae3128c3345bcb946711f0efc6be82d","sha512":"75c770e209e7b6562c53c461c783e16595f0f608144026067be08eb74f4fc9424331b59685c9644cdf7e1b763beafeb2c109447766a11aa0a76cdcbf1ae49a63","ssdeep":"1536:ieG/EiU4fuPHs384FTCSZcAJu6GBynmI0wcQ3BynmI0wcQZBynmI0wiJu6K2Ju61:iAJPHs1+6a0Q59","tlshash":"fc64f8e172a4a1e4f407d7fce912e4f0325a77fb3ad1c5c541a4bf189a220ac6e4dd82","size":325561,"data":"","first_seen":"2025-03-21T05:40:09.015828Z","last_seen":"2025-03-21T05:40:09.015828Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/CiSU6wCi.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d0dde093a4546f580e5aeb324d998be","sha1":"e2b510ada4de9c574d5be63fef6ac2470774c868","sha256":"0cd3d3e1b755d4aee801a8df28b37e75b1de72acb130397c4629fb209c2b826f","sha512":"fa26d8ac002c578cd1a5d95faf320c9991855f1052bad59ab969a2501ed7d4e689e849b2dca02a64a8ab7f0c02e2a2e1b51a452cc9f14b62a065af781ddfd649","ssdeep":"","tlshash":"4e51b70db035987d713cacdae6bb0386231136c37eb4c4a4a15eac477b059d3d2577a0","size":2807,"data":"","first_seen":"2025-03-21T05:40:09.081Z","last_seen":"2025-03-21T05:40:09.081Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendors~sentry.78e69047.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VRDLWS0SHC\u0026l=dataLayer\u0026cx=c\u0026gtm=45He53j1v9186219929za200\u0026tag_exp=102482433~102788824~102803279~102813109","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"995344cf5ac24126e80857189ec1a2f3","sha1":"71682c38088daf358ab72c0616cd9722dfb1aec2","sha256":"4971bdb83f1c25ef2f90738d363c13264e9ea6ceba55cf311b06937ca7049725","sha512":"21115daed91a4a38515e22bc97e4951ccb7d920136cb795620c66cc19299ee0889176710feb1adbb680b539f6fe7d287719a5db9ccd58d0f29dec6fb16cdaa82","ssdeep":"6144:j3atu1mxx5yp3MSHkRB8r4nsmEZM1iYDn80S2EizeG:zB1c5yp7mEUEK","tlshash":"b06429dd73c674668392b479503f014bb17b28a2f84cc894f19ac9e42d74aaa4277f7c","size":315114,"data":"","first_seen":"2025-03-21T05:40:08.985674Z","last_seen":"2025-03-21T05:40:08.985674Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2063ddb143c60c4b9f35226fd24e800e","sha1":"cfa76d3756a7e01d7054ca0d05b0f7e8b9220526","sha256":"2033bdebd40124d34740b11c949b1cb9834f55d3989b5384c538c7299cc65957","sha512":"fddd92056ccf58bbe09ab79f7702536e81d3e82277f29ab58b58ff4852bd7e7cce78f15c7a2773e8578ebd68a43b55bc60611027b12f8bd320906b541b00c748","ssdeep":"","tlshash":"67210265f94bdc9805ce242d911f264bf8b40e4cde21f150d7f0edc22878af52482a1a","size":1275,"data":"","first_seen":"2025-03-21T05:40:09.081787Z","last_seen":"2025-03-21T05:40:09.081787Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BaQI6RfZ.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7fe5fc3d614ded93f4680a59e43e34a","sha1":"d71258f3e92ef5f1248c15eab8163140c2622a2a","sha256":"31756f0d3ae5e46de38eab79dda71da6273d0999514d4b0361b5b51dc429c422","sha512":"c5368eb598ec3c241337b6ef73f88a0ddd62b85c19cbb4e7fe63eb51763c5fd7d81bcc57fa69eae70ec85b26cd40041e20722dcff6394349b2fb8b006c1b904b","ssdeep":"6144:31u+yegAuvVcvTbOg1mTOr0OuDEo8xb26pl5Oa9pdo+lUCrxNx96FC:31u+yegAuvVcvTbOg1mTOr0OuDEo8xbr","tlshash":"60145b720e5d1cbd1111a156de1caa1a38de81fe3f9b93e203796e6e35f10309ea931d","size":196657,"data":"","first_seen":"2025-03-21T05:40:09.082401Z","last_seen":"2025-03-21T05:40:09.082401Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad7cb6616829495849dd0b24be7d63f7","sha1":"28242c3ea18f7c23aa42a54d00f042c129694750","sha256":"8a42e35e1d7724943963734ad919f9769143c877cf08349f44851a6f722e9292","sha512":"a75c095d7fb81b7a1daf61117bd8a32a6a0c09bfdbc229838fff77cfc4f6b3a5fe88cfaa65708c9d9ceb7cac99e4a8104544c6cd7a0f4ebd833aedc53f7a065c","ssdeep":"","tlshash":"4331678ab36145236a93383b643b5345617326a21f0278b3f2660e847c2ceefd533b5c","size":1812,"data":"","first_seen":"2025-03-21T05:40:09.083111Z","last_seen":"2025-03-29T11:19:57.985393Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/CyhBU3gD.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e09bb0db7622a5bf9d2630dcfdb3c65","sha1":"f77fa3be41e5768b347acb56b89c0513947d6ee6","sha256":"01109b07ee626d65a7ed114ff9218de6c32de4848ff808b34fd42cc92be28d35","sha512":"103d5b4afc58285103333d3426da895343cc6ce7e7e6aec72396eb5ae5d43d5865756a3bfc54d685272005bc6b583ff4d793831a8e15f43954460999fecb303c","ssdeep":"768:Wk26DqUlb+x1s6bQD93zqt22OAmPVG7QzzJhf3JsTnE88g3HJhr/au6AvcGGFtsp:QtU1xh3UAAmThfSkg3dvcGGFtsB1ZC2","tlshash":"ee334beeb46ce5f4c23387c468aa10107b1d3ff96a4044e6a1b81db5bf5c4b86e68d64","size":50430,"data":"","first_seen":"2025-03-21T05:40:09.083977Z","last_seen":"2025-03-21T05:40:09.083977Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/D0ptTuKO.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"db47bb87c72da2ebb2f53a1056a198bd","sha1":"11f779f5c9b0c17141c70dd169c34ffc4a20ef4c","sha256":"f750327923e0117fcb775488cd394b586b218d9fff24f6fc7e4a9bd0d30d7a34","sha512":"ea03fc30b473dd7c7bec7f4b9324eef0d52a68351250ac1c9cbee4431ffff435a164c9e5592af605c7e0d5cf1f99bcde81b1489d00a2442606f46f926ef105c6","ssdeep":"192:ay293eeSoqOQg6ArT8RwPO4ZLf6Jvkhf2pKurBX:aDDl1roCBf6JvUf4jlX","tlshash":"f30295ee12147a296aff076743b1145483310886f80c73e8b0ee9e28966ec8d5776fb5","size":8199,"data":"","first_seen":"2025-03-21T05:40:09.08475Z","last_seen":"2025-03-21T05:40:09.08475Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/DYZ6qTze.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"be332b0294ec52a43e6c9825cd5aa18f","sha1":"5e7bbc872cefe76445427d013d237ebab1817bb4","sha256":"4000d40a5094408db69c861a88a45eafa542c89f827a70ab75029e326bc3434b","sha512":"23da683f28f06da078867a79942d17015f24ab97bd9087dd7c38431788d0413fb26091dc6233ff932c5256ebbac5cd8425d4de818e5f3401da4a370d07af1080","ssdeep":"","tlshash":"4811003be18a072273335c79866821d28f640b8d3c7554c82c889f2b1123d83d53bf60","size":913,"data":"","first_seen":"2025-03-21T05:40:09.08553Z","last_seen":"2025-03-21T05:40:09.08553Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/DVk-ui_H.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"7c7b7cdd8fc516f008426493f1e7427b","sha1":"7ace6ec265171842c59359239ce70cc0d372f58a","sha256":"2154208ca2277ac38b7be71f4593a7d07c925fe52bf0e727f4d3d7e54aa253dc","sha512":"cf2ef46bd4eca3f8697a2af7a0c59e20a9595876e7b1001f4bffa3f16a3af76c420a64b0c9572ad8ef51023e733b00ba9dd6d62ab9d85b8b4b4532fef555ca80","ssdeep":"96:gZHXhK13OvgxqK6nyilBlzQxHTMO2sRQj9j5isCytpzm:gZHXmevgAKOyilBlzAHTn2sGQsP/m","tlshash":"6691e9bd15500bbc44a565f3909b90814e2e0312b05b93d57224e9c5fe848f8ff56ab5","size":4545,"data":"","first_seen":"2025-03-21T05:40:09.086309Z","last_seen":"2025-03-21T05:40:09.086309Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/C6g4D2Vb.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"1a0879eaa8d46f562270e49349e1714a","sha1":"a22a747796f130cce222ad540203b468bb0e2f95","sha256":"cf9ef32f512764ba46a74ed791e36449215e21ff8f469c662d0fab02687b87b9","sha512":"43a5c21117caf4db31a8a2b1d7b8b2f0483faf9d5ee1909b5bd42477951bc97269e37277b92d0a094fc51b16a5f7b642b947ec5ac616d7e08b21116564f154d3","ssdeep":"","tlshash":"b6f09e8d30d3e671b735db89ca32ca02943c1a42394de4d1e08aa649320a491e73d71d","size":506,"data":"","first_seen":"2025-03-21T05:40:09.087138Z","last_seen":"2025-03-21T05:40:09.087138Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim2.ru/api/visitor/v1/configs/default?jsonp=true","fqdn":"gx.webim2.ru","domain":"webim2.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c060bf9b6a40cac262331469f90e424","sha1":"ddde8dc51c7da4612e458ac9fa73eaa46f22ce39","sha256":"a8e94af73cd5189459113ff5600a9bd1937763def32c6613be6656d23a389891","sha512":"c80d3bfea9165dda45f46cdf93ff092c1aa5fbf439680058a67fe29967caab9fa4936068f534aaf1f2a0b42848b685fe0918711f68d620431168e7aeef13927c","ssdeep":"96:mXzMOTx4alggVgY+/Syo6ygym/WYH9XVyQdEJ++hGqf5b:k1OVY+KH6Lt/WYHryQefN","tlshash":"d6b14265d062003b16c5aa16ed39aacf237892d2e340ef3e8f1c0917f3cd5b461467e2","size":5096,"data":"","first_seen":"2025-03-21T05:40:09.087959Z","last_seen":"2025-03-29T11:19:57.992509Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/CNXwvf8W.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"697f17252ea622fa335e3da64008428e","sha1":"d1003867a6ac0f74d759136589eca5d05ffe324b","sha256":"5afb1fe35ea440e832ef9e6ce08fc51c99a31774a060761e52d1a163bebc8bae","sha512":"ce6fb73999ddbe12e4c41f00a4d3c0d15b66deb5d8dcbc1ace840ff84d17af815f7627e8eabe532f15520be3297f3e38cca1b5127af46c3d0e3e636710afb875","ssdeep":"","tlshash":"82e0220bc85281be4418ddf0d4248421163718aba7eae7a0c1ee47746321031e4ea777","size":414,"data":"","first_seen":"2025-03-21T05:40:09.088654Z","last_seen":"2025-03-21T05:40:09.088654Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"92042879fc3c206a6c56b1b9ae090582","sha1":"012e425cb6bfa3f8dc3c1d51984990cde22ca23f","sha256":"2bb7e40c1afad501b89f0045f88e1e57b1b530bf123f2dfc9deba96f73be03de","sha512":"47bf6aab7162c9b0d7d9a7134f3cfdb389356291c325e3c67fc7995707eabafc195b22dc9058881dd375145e9c63e6eff0377fdf1253b8c345387523655497cb","ssdeep":"","tlshash":"a4518486f35598222bdb38bd933e5206763217f21d5098f2b2719e417c18acfc523b5d","size":2756,"data":"","first_seen":"2025-03-21T05:40:09.089312Z","last_seen":"2025-03-21T05:40:09.089312Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dc5770ddbd1d8367204717fadca0b9b","sha1":"b2d6d0d58105f8404022c779d0a72662470760ce","sha256":"aac9da716c8983e566070ee480119e2958ec9d2190a18458c85862b5cd028ce0","sha512":"1baa088e52d662e2cabe2c4c08ec4a8f05120bd37ea68d222f31e7b4b1ff785112a51122beed2a041ad4840fe119e82014042539d99ae9c0e9859bd9880f3346","ssdeep":"","tlshash":"a4518486f35598222bdb38bd933e5206763217f21d5098f2b2719e417c18acfc523b5d","size":2756,"data":"","first_seen":"2025-03-21T05:40:09.08987Z","last_seen":"2025-03-21T05:40:09.08987Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BVxTRXQb.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"908bd66e1f911d87f02eb2addf2fb604","sha1":"40e67ddfc9508fee1c8946339903f04a80ba70ff","sha256":"250030b2348e45233bfe2b8e2f89241361670be656b8928447aad6d34503d5c4","sha512":"2da5b8d5dbd688732dc05b833c45a983f080788afce121c16db6ed35a1bf6bcb5c045c1ef095a579cdc13399a3fbbf47e73cf5ae468977c03837b498a636223a","ssdeep":"","tlshash":"1d117d1fd84465f3a85a8dede911f421d63c05d093fa0290c85a0f700ed08dba1eeede","size":1000,"data":"","first_seen":"2025-03-21T05:40:09.090465Z","last_seen":"2025-03-21T05:40:09.090465Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/DNNdIs2A.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8850f49855bbda24540e4486e740c5b6","sha1":"29fa6f9ba2ff6d18f8e42f07eff8b9794d651808","sha256":"16c805272d42fce918b94195fbd99cbb30c68952eb539884b370f51bded787c9","sha512":"054700822769e63ad07dedeaf5f78e480cb607ee92d8dbe8a9096bc75f243d03f7105c524d3da20069b202329cfde277cf145f3a5b3b6e81f041560a731ac0d3","ssdeep":"","tlshash":"e2f04c1fd991807c401dcdf4c5218c26773b849a23fdaaa0d2de4fb123d1065e55ea27","size":604,"data":"","first_seen":"2025-03-21T05:40:09.091052Z","last_seen":"2025-03-21T05:40:09.091052Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/DByjYhl_.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"d3ef5bc63c62e36483e18ba729aed86c","sha1":"2be187bc91a8a3e9468229fb4fa5093809f8cb50","sha256":"c407adb3621bb45b3a0173cd1a8614b670c5ee7f2bbeb3111928929ed9ac9391","sha512":"0b955c2aadb0de1e3bff9e4884ef94c9cfb859a5615f05c31cc637f4a5ebe9f647cf95eb65a86594710997fc2c013af21f2fe5c5c81ff3f557aa6428c341a992","ssdeep":"384:LybLmDw0G3HVVxVeR6o1Shl449OsLV5jbU6NhWWYZ9BqDXRoO5m4Zes:LyPmDw04HVVxV4X1NdshJQ63WlT4h","tlshash":"d59285c832c7f5968793197681bf140bb23e6d85a40d8892d53ad0d87c748688a7bfed","size":19329,"data":"","first_seen":"2025-03-21T05:40:08.922034Z","last_seen":"2025-03-21T05:40:08.922034Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BJPdvtHl.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"1b1fd2e0f0aedcd979de9dd3c360757e","sha1":"1a4393bf496455818e7c42ad1485e916f62d20b1","sha256":"cabe200cf6672cc6547a257ccd5bc31f840b32d53ccb8f30c3e2b28501c16fa7","sha512":"2a33d56dc31214e8b6b5ab79dddfbae5d7ef2e84e241fd863ffb921bd71ee1665712b21c4257933e117453bce2ee4a5e3b12daddb533a84e0180eb812977189b","ssdeep":"","tlshash":"45112f4e6740b43d435a7bf4d40b254992b3003ab14794d084344a531239cbde55fbca","size":873,"data":"","first_seen":"2025-03-21T05:40:09.091729Z","last_seen":"2025-03-21T05:40:09.091729Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab2afd7db42b50acb581524c44de5f72","sha1":"bbfb23bf10976b19923e31967594b105fe0972ff","sha256":"9039625813b5cb18c9c0e0c085b7349c51c446520fcdcb7df97b2b861974ed86","sha512":"bb65ca33c39577be9f3649f96a1dbca709628ae75271d8784019192cb6326c3341eddf88d0b971924e7f90363479cec85077118b57d7106765a567f7880422d4","ssdeep":"","tlshash":"9b21d265f94bdc9805ce246d951f260bf8740e5cde21f150d7f0edc27878af52582a1a","size":1275,"data":"","first_seen":"2025-03-21T05:40:09.092325Z","last_seen":"2025-03-21T05:40:09.092325Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/OZv6iJsG.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/B9uVR_PM.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/C1CbtQXp.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/DNNdIs2A.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/WPiWsW_T.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"b6409c7e1aa39bec716c612d3c137754","sha1":"423b977498304eb70f2a350d81572c590af6218c","sha256":"ae49ff6a302b1fa47c8ba3ce167344ea254137e3f98f32c6b6e42ca8c1092a0b","sha512":"a5b62ae62b79fa4f518fba253a8b414cb79af6f8c3d4f9391fd770dff425bf996f40ea8beeb1ad94c5f9e12f371446d4620ce7deb769ab314dac3bf51dd29e71","ssdeep":"96:6Op53hKMoKMj1W83idAp1f5HnPx1oRst0CBR5/8DtgfdbyMKPRv5:6i3BY1W83fjvmQ0CVECbmD","tlshash":"e3b185e4b0d9e09bbb768fd1c036225250076b957434e0d0e2baad73215be58a562b2f","size":5163,"data":"","first_seen":"2025-03-21T05:40:09.093102Z","last_seen":"2025-03-21T05:40:09.093102Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/CgVp1Teu.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"6f4f78f60087a6542f0886d45a807f4a","sha1":"0d168e9b2a16c68ce90acebb23862e06c2fb4c08","sha256":"07cf010042bb4181cbdc8fd7ef223c6ef1eec3e65bd15f25eaa1c17725a5e3f7","sha512":"cd89258be6ffd2a409d22227cb04c7273708f5202b97fe4cdb6bdf3b726630febe51fcdb49907bac3f4cf559163c7cd34d3f8c1d83a6d1a4cf3ad12d6600ba57","ssdeep":"96:35JQkFyW+mLsD5YkEPtLhmLBqNnTp5EnBDjbkXJcBHjwh2b9Px8OoGz5wK2:35JQS26PZQQlGCX2Njwh2bVOA5wl","tlshash":"3ac184ea235a047a2c26f24198d398649b205fd1f0fb905d7c7eddc6b24aa46fd34b34","size":6139,"data":"","first_seen":"2025-03-21T05:40:09.093877Z","last_seen":"2025-03-21T05:40:09.093877Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/js/fp2.min.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"02087a3f4f46b15bc198570d800bff41","sha1":"e59f5e3521d8c60e5772de1f65c90e5b87d9eb9e","sha256":"e753042decd90a96d0636a7df16df556860af92ca09ac37f0f6ab1d574acd1f1","sha512":"2c733c348e26c0b400befd5ccac6734eb06a0ca0c8c638f8d3a66afd75ea5860c6cfd3a913ba6dd6824bd9c629c2f28d14204efa625b10fa8fd9b366ba82c968","ssdeep":"768:J2N6EbuZaWRhGT8e20R5J++t6cOrVrzib:oxuZaWRhGoF0R5UVra","tlshash":"e6f21b96b2e8373c8143b063394bec15fb799495e784808a5e2d4180f8758e9e77bdf8","size":34877,"data":"","first_seen":"2023-07-23T18:22:17Z","last_seen":"2026-06-26T20:23:29.90284Z","times_seen":1217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/C1CbtQXp.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"e0ce0062f90554af5891958e0e2ec6e4","sha1":"9d2d0f345f85f8b10704c8670769b0067a264bd1","sha256":"8fb59fa1e7b5c91c4cd2fc5a67ee1444a5ddb8a5ebda2b340f3999fb6eac3759","sha512":"b62963a79723488bc7ecb51a23227b1eff822f825c2892e4df26963a8a16f78dfbb41bf414b5fa7b5946b73f7249af2e1b287a1d50d73d7c9204bd56da4f5615","ssdeep":"","tlshash":"b821657d4aec2dcc091cbc802ad89d6c3504d248a181cc8638a6fee7f887d5aec08471","size":1111,"data":"","first_seen":"2025-03-21T05:40:09.094457Z","last_seen":"2025-03-21T05:40:09.094457Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"fe364450e1391215f596d043488f989f","sha1":"d1848aa7b5cfd853609db178070771ad67d351e9","sha256":"c77e5168dffda66b8dc13f1425b4d3630a6656a3e5acf707f4393277ba3c8b5e","sha512":"2b11cd287b8fae7a046f160bee092e22c6db19d38b17888aed6f98f5c3e936a46766fb1e947ecc0cc5964548474b7866eb60a71587a04f1af8f816df8afa221e","ssdeep":"","tlshash":"54600088282020000000228008802020000203e02002020020c020202aa02280800200","size":15,"data":"","first_seen":"2023-03-07T01:02:47Z","last_seen":"2026-08-13T03:59:08.440837Z","times_seen":87387,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/icons.CBEgwkkS.woff2?v=1629439516391","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/icons.CBEgwkkS.woff2?v=1629439516391 HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=hixM8UQWJnhyJBkc; __ddg10_=1742535566; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":1105,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":750,\"startTime\":1742535557596,\"versions\":{\"fl\":\"2025.1.0\",\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"cb9cdd10-4afe-4faa-8548-4e17365c7c89\",\"location\":\"https://landingpages.kaizengaming.com/betano-splash-screen-bz/index.html\",\"nt\":\"navigate\",\"serverTimings\":[],\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":737,\"domContentLoadedEventStart\":743,\"domContentLoadedEventEnd\":748,\"domComplete\":1205,\"loadEventStart\":1205,\"loadEventEnd\":1206,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":0,\"domainLookupStart\":0,\"domainLookupEnd\":0,\"connectStart\":0,\"connectEnd\":0,\"secureConnectionStart\":0,\"requestStart\":0,\"responseStart\":0,\"responseEnd\":94,\"transferSize\":0,\"encodedBodySize\":0,\"decodedBodySize\":0,\"name\":\"https://landingpages.kaizengaming.com/betano-splash-screen-bz/index.html\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":1206},\"siteToken\":\"042e1bd503e64dc0aaee9cabbc9b1f4d\",\"st\":2}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=PS7WWjCFtFHAvhYR; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:26 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 9324\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\netag: \"67dc31ab-246c\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9324, version 1.0","md5":"fda09e7500d3a2867129d2ed80c57583","sha1":"d871428e4c47c45f3cd7232c489442943ed079ac","sha256":"fae8a414803516ee3ce7076358411be3ab4fdf1f68c8b9dee7e76802bd3aefc9","sha512":"94bae208ea5a0b8b9a6c04bd845247c59503852b42c32fa1a8e5833859dd963d3a1b26da5d3362babb5185206de0c05380fb3be080229284555f2e81d9f96485","ssdeep":"192:XlV9RVDfOg6KUzP++NzEsfO/aL+rNHxUQqj/qzT5SlrDuZYoh0:VV9RhfZ6DzP++tEsW/G+rNHxUQq2RAmW","tlshash":"8112cfbfb53be2a1e0f27d78141adb5259df317842fd0b781006313567f4b65a042532","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-06-26T20:23:29.819246Z","times_seen":134,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BrS-pQtB.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/BrS-pQtB.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DmT_aqZN.js\r\nCookie: __ddg8_=OUfJMXjsch1vBlTq; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":3958,"data":"k4DUvUwUrUDUj3mc3mIUEQ349oBEB6mlQ816Lb1migmsQz2m8mk132BprgmM2hmB2BMmB4Bvom9l2mBZGBtmm-3YmOcirhDsUz$mxUy2mWgUBbLmzOVPanwnZArZa0SZOcvRCDR$mZUa4mjmBbm6Z1mnZGmL7$bX3d-g96sEzu8Wx9uQ7GmUzgQmd62mmFRJZkAjyMbtglmMshBm3RySWUOsU3mD7dTmzbL6Gm9zGBam62mr18rJbIWD+nkLlmrmUBinEW$Pj9PVVkP$F66FSQB03omVQBXmg4IzGUCiw7vuQBdyfGKgUmKnZsCBdJmmdm3ZFB0x9o6O3sygd1DkQmMtDiRInhDitUfBdNzDm9GVynTBhcyGm5$4Gn1LIlUIln2lL2lCDZoI3kayxmmU2ZQm9dv1Gg9nvGyRhW9L3Bm5UFdkh3bahdFdDgJR2mRhkXxTBLSR7b9mvdLfgb83dd94mbrIhQfm1QBUoBOLX12$9PEoKBUjb8ijnr9mu3dwyPiDrLS1yN386L$6Fs3dPzU$EWse3QgGGXnUMr1$g$k7JNOm3viO1f$r3yA96hU1voJdc3D6S1B3624ny1vLwCyoBG$yLmD7gKYzmfgKL03Az-LNChk-iX6MEBGoOdSOUUSM$9ely351I8ZxyBK93OLwomx$nd15r793b3mVidG$DQ$rU9mGlSLCxigbvmBk7lUIx$+BBrGV7imBCrTz4lxMKBNDFgpi3Ogb6WMmuOxxEOB636unMQgGF66yUmOoBUlBjXQMWA94QrDb8aQ4jGYGF6mK66eZMM4X1JmWK1GeYgZEiu9U9W3zmPm4o8XWi31gmlENi6YX161kXZy3brGLmneos6ADDqrygGlMJk7rlQBLnxA6$K63m3B3de$$3d94Ie3gl0dG9LTrczD6W$z4KBj6UWg7D$FBD00gmF6$5UWrGyAwk7TeYk22GQDrX12k7KmkwDTrKg011n9Uv3dBmvBZkGa+uXZxBZ6Er6LWUr3dXGsNbgghzoglm7u3sTeuk2rlP6LGWPG4OQ1gGz1VmncMG9U9QIILeBTk1GjGjGaQ7rGGWmNlFmWBmQjxEoVBGoQXn7j0QQqBgCei6u$6LRGe3io3tBQym4QVe2oB4XQfmGkGoUB31dWueQym8wDsmkjQVat$bhUleol6zhDdnBoQhd1e3omGjQ4Q2X1yBKjGKmJL3CDl6Ugn7ggKmFK1$mlgQGDnm1rSAeQBrJmukObjG0ZdDnOQQ9mrM4rQJBgxUFmIduRBGk1CetooQ7Ykj68DG$X7woDsB6dmt3UIUp1FXeJmcjQXWxzj927jQl3LX1O+20olUFXAldcoQ5dpulFm16msuPyYS44eQXQBm1sRKel11qymJ3dzDdW6gbRBZj1+m6XQdW39mQxmwU$BK94i3wrsRDP3-UUn62s6xEYKzvt697b9L0x$EoS8B9mk8lyUg6Mgb0x6BmdOLgl+mlXZQD$dmS8jmom1B94t3ewUGQFyYG+$gBsZiDQOj$9L84l94xmQkdLmcmoP6xjGxBce3RBTXG+Yg-uzthGosrlmxmUiyUzmUd6Nppa02WUvmfBT80e3c$rlUd7z2GQy1lBA3YzhmgDiUUQ6$zuk15UrB7nGyU51y4ld0Od6Y9U3DxmO7L30j11GsbYB+6xhqXQQQK393QrDeOomEx$8TB0rJX8cDfBQj1j061qZeEuk23Dw4b6imD9maUJB1n-Iye3rgvBi3L9tz4S25UOBTmt6LaUfm4BKBNEoe4QU0UcmWUo6mmnSgGgtzUomLdUWoBDg0E1UdB3ig4gGc1v6EB8m03ymDVa0Oxy5oQjmsFd64UZe3kmk8Rm6+Jeg6mLno9Arrdm9mgnNm69B9mye0dsmetymdymm1DU1mZrDjQKB1WMg2z2e4xBlAouqdu$gOQMBE2g6$rTUdV6x3UgZjQTd11lz4BuMs0UmdK61BuW3$BEB7BTBUWM+midQzrkWcmvhdZbBjeQomEdU1GmD6Dr1fB+MG3Yzmem5UiUG6K2ggUUdA3i9fBu3411cQht8oDgUvm3mFzuBPlnlU63by7X28pknB3Wu3wfo1QU5Uwd0XZeOxBOhQz4rkEmm1P8msu62bmX8qNO6J9Uc1rm+1c9BoD34qrKdoz4yYyda8J6i9sJOsak$OB1jYX1n3UUmx5ZQzD342UYBQ9keQcijgk8Zj2EO11+a3djg4BuWUcUkne6UyDDDm1$BeB6R2c1yB+3CcGmCXmrMMMUBUXZlpwUM3G+QXZ$QKQsl4zryi$DOrk3xB0gW6YFmuxM30UunsfBJByzr9L$lLBYWuB1o13m0UQ3wdExL11pnABQzmZbgUQQM6A33ev3Dem9lfz2zCE12NSxxz8m1sUX8Yneyu6$gaUMr6imA6mz4znXCJzyeoDAlmBZim1v13Dz1O8Z6k$GEMGnbu2BAgR1Nsmf3pg2BgXNndJB4c8g3YlJBN3O9lEScUgnLqx9G94ymd1qUK3UEOjQUdo21zyymgUd2wUqBD9m9LKBy3OykxmDDimBdeyiGQWEOUw1Kj$S03m5UUxY3QDQ9mTrNBj1D6mvCuSTm73negcUyB6FZ30Uo3mcdV3Utu3Nkmg1DdBzy6S34JBw6x94mojnhUDBjmAknZmnPT6$yGzUk4oBr6A6YgljmGnUxoowI4O1GQ5dIFajG3DO8ONA629UjQ5dZQ793KZi7FBA6u9yXZgUBBLuT+QyUBGUdQa1$lXQW7KmUZUtrXQrltxUnjBN6GAUyBd6wXrj1lgy$f633094ll+m4m7aujgZ44801V6oelyGo$0o4Bjoo9mLmYByzSlQVoggYW2N$gGMUcUVtFXiIU3mm1dun6gEOBG9QV2kyB6meyqrW3dpBegBGm8LCTgg6Lk+m80nQudWSgQOQval3s9U5UqDydUzFc46YXME3Oyymg$D$nW3o9uroxLa80WM6YrmPj$BN6EGi946RsB01cBTgGSDAzR61Eleo6G0I8+69BegLlLmLm-5r9u1Gpn2WAo-S1Em+brMCUirhL2QQSedBDzDoAGQL3dmlV7om82ebk3U9UmUemb6$6myYXmwUUUQg4oozGbPk6Ageo$fUvBsmpK8g74lLBYZbm0zmy1R7mx4Z3DQXmodw6mwBjGL2EBwBcBqgAwAj4JZLzr9UJnqFsBojUDhDQqe36Ld1rQkJrBbU$5Dh9ymomgEFauDyWU+BBB1yR-8nUGrR62w7EO$Dsm21QyyyYE1PLyZ+z8guS2gn1gc6vyY98dnPm2guj11hLUJUcB2mrfgGDfmf9BglS2CvTmn94elnllmLBGBAD7omRBW6Mgg6VxGG3OxuBQQu6Gimdjp851gEmO8tvN2F3U6GrOjdj3sk1c1DZDxozSuGXQ2R38Tz8eoSDN-Emgzr6ujQvEidczygZmo6U9rvY0WoD3Uelg80LwD6uDjXDxDxD6Yz4Brt4K0v1gQhQ3Y6YEOEOgG98jGkdbDk2DG9Jg-k1BLrG31ymggkZegk16uz4rmOpgl9LyYy8t4rGeQgZ6DgKxf6UELR2BUgZz4DJImBLD9DIDDXWk7oDm1XcvQ6UDbUuBigGyU9GkmGQymegrGmAk2jc3Uz6E$6U6u6Y6L6G6ukNgGrhDDypKG9Ueoeomueoglovm1X1DDX5G$rG9moooD6LBUokNhXG9Lgjz$9UyDzUyDmuzEo3XCvQ6m6LBmBLkG94g9zDgZ6Mj1mrxQBmmuBcZ1mUDUemzUeo3Ur2ID91k2kcdUm$EGj$wYBLzgB$OmXiw3j$a13Dl3zUeGEGE5oDoDEuOmo3m1moXU2louOUymjQy5Ng9DmmjC$B7mBmIUl3+yDBDd4mxdlB$Bc3i6$mvSpmS9Syn61hjme4L3FQP3v4Y6YBEgQ3NmUmY6t4BONmm6imm0I13Vdg6mEoDoiDXQ9GnQ6U9U6DEoDlzo$mm"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=x108i6Iin6eAOURR; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-6f4\"\r\nage: 2905\r\ncontent-length: 960\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1780,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1805), with no line terminators","md5":"c24bd9da28b497090091ac18b37a2514","sha1":"0387679b6b2b31c125bc502a0fb61c58030b2e42","sha256":"cc88c226440d8284835c4aef89033dd1e6735137d35463dcd5a4fddfe34ed4bd","sha512":"b781b35c2877130c7d8438ae28075be5636bed7c330132459267155fc76329915ac4d7b8b52b21489c49eecc393bfbd6a6bae7539274a952ecd41a8e293d6f68","ssdeep":"","tlshash":"5c31555ea3519e7a012110b99435609029a27d16380145efb93bea9b7534cade90cbb9","first_seen":"2025-03-21T05:40:08.894485Z","last_seen":"2025-03-21T05:40:08.894485Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/home/happy-monday-main.webp","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/home/happy-monday-main.webp HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=p6jbeaWUrL6qwblm; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=jRU7wOYNjvAPtHvS; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:48:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 200408\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"67dc31ab-30ed8\"\r\nage: 3066\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":200408,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0ecf6f61fb0e6aa83cf70d1fb74d049e","sha1":"fbbb78aa251d13503378a5760a540ca57fb42b4e","sha256":"6057ae52d5d5d8fcdc811273d50c223d9a6e083498c555ace107048532b93c55","sha512":"7395469a5830e3eebb2eca6be3cfe0cbc71799a76c5277fa089b28d6011976296399eab07e2f9620a4506fe9d222674d9896a7dac9025d2a480ab684c9f44aa4","ssdeep":"6144:yX510DSqpY5JrjLYIp2ClbtBEzgDNxxKfLpynCf+iS6er:YWNSHoEbrEMDfkDyCf+Qer","tlshash":"b61413ec72c079cc85a17da02d3aaef1a47ae51d5a4f9cf452f5edf11042c4aaf1a063","first_seen":"2025-03-21T05:40:08.89521Z","last_seen":"2025-03-29T11:19:57.912922Z","times_seen":8,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfDHPoqAAAAAJ5uqpAtCwZEtyusk-ogkGIqCj1t\u0026co=aHR0cHM6Ly9nd2ZnODR4LnNwYWNlOjQ0Mw..\u0026hl=en\u0026v=J79K9xgfxwT6Syzx-UyWdD89\u0026size=invisible\u0026cb=g1pafpbu6va3","date":"2025-03-21T05:39:26.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Mar 2025 08:37:01 GMT","end":"Mon, 02 Jun 2025 08:37:00 GMT"},"fingerprint":{"sha1":"63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B","sha256":"E5:08:EF:15:62:0C:70:BF:82:8A:23:7E:52:A0:03:CC:BF:47:9D:AB:89:97:C0:F6:BD:0C:85:14:3C:09:7F:AA"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/J79K9xgfxwT6Syzx-UyWdD89/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha\"\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 20 Mar 2025 09:12:16 GMT\r\nexpires: Thu, 27 Mar 2025 09:12:16 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nage: 73630\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-08-13T03:44:55.974466Z","times_seen":707314,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim2.ru/images/gx_site_logo.png?1701674734622167","fqdn":"gx.webim2.ru","domain":"webim2.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:29.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"webim2.ru","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Dec 2024 10:41:08 GMT","end":"Fri, 28 Mar 2025 10:41:07 GMT"},"fingerprint":{"sha1":"39:22:2C:F3:51:C3:18:D9:E0:56:1C:F4:75:2C:8C:7D:D7:C6:50:3F","sha256":"3A:AC:C1:DD:28:20:B3:C8:03:99:4D:E0:23:B0:5B:D4:F5:06:10:9E:06:A7:B3:20:A3:45:F2:29:D5:3E:95:63"}}},"request":{"raw":"GET /images/gx_site_logo.png?1701674734622167 HTTP/1.1\r\nHost: gx.webim2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":2729,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"https://www.prioritytire.com/\u0026ptid=885bf60c8db4e588\u0026af=err,spa,xhr,stn,ins\u0026ap=1228\u0026be=1251\u0026fe=1068\u0026dc=1012\u0026at=grpufahdsrg=\u0026fsh=0\u0026perf=%7B%22timing%22:%7B%22of%22:1742143494713,%22n%22:0,%22u%22:1322,%22r%22:11,%22ue%22:1325,%22re%22:919,%22f%22:919,%22dn%22:919,%22dne%22:919,%22c%22:919,%22s%22:919,%22ce%22:919,%22rq%22:924,%22rp%22:1252,%22rpe%22:2207,%22di%22:2235,%22ds%22:2254,%22de%22:2263,%22dc%22:2303,%22l%22:2303,%22le%22:2319%7D,%22navigation%22:%7B%22rc%22:1%7D%7D\u0026fp=1816\u0026fcp=1816\u0026timestamp=1742143500501?__cf_chl_tk=ou1auhtkwc1cvc.OOplkcM2YaXNLkWwY7GIjD4KU.yc-1742535552-1.0.1.1-E3VJBMd7i2D7LZFxchhE_FapiIVxjh27liJbubToVPg\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":656,\"startTime\":1742535561458,\"versions\":{\"fl\":\"2025.1.0\",\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"558fe547-c4cc-4f73-8879-c6e985275694\",\"location\":\"https://www.prioritytire.com/\u0026ptid=885bf60c8db4e588\u0026af=err,spa,xhr,stn,ins\u0026ap=1228\u0026be=1251\u0026fe=1068\u0026dc=1012\u0026at=grpufahdsrg=\u0026fsh=0\u0026perf=%7B%22timing%22:%7B%22of%22:1742143494713,%22n%22:0,%22u%22:1322,%22r%22:11,%22ue%22:1325,%22re%22:919,%22f%22:919,%22dn%22:919,%22dne%22:919,%22c%22:919,%22s%22:919,%22ce%22:919,%22rq%22:924,%22rp%22:1252,%22rpe%22:2207,%22di%22:2235,%22ds%22:2254,%22de%22:2263,%22dc%22:2303,%22l%22:2303,%22le%22:2319%7D,%22navigation%22:%7B%22rc%22:1%7D%7D\u0026fp=1816\u0026fcp=1816\u0026timestamp=1742143500501\",\"nt\":\"navigate\",\"serverTimings\":[{\"name\":\"cfCacheStatus\",\"dur\":0,\"desc\":\"DYNAMIC\"},{\"name\":\"cfExtPri\",\"dur\":0,\"desc\":\"\"}],\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":641,\"domContentLoadedEventStart\":700,\"domContentLoadedEventEnd\":707,\"domComplete\":708,\"loadEventStart\":708,\"loadEventEnd\":709,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"h3\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":0,\"domainLookupStart\":0,\"domainLookupEnd\":0,\"connectStart\":0,\"connectEnd\":0,\"secureConnectionStart\":0,\"requestStart\":10,\"responseStart\":559,\"responseEnd\":560,\"transferSize\":954,\"encodedBodySize\":494,\"decodedBodySize\":665,\"name\":\"https://www.prioritytire.com/\u0026ptid=885bf60c8db4e588\u0026af=err,spa,xhr,stn,ins\u0026ap=1228\u0026be=1251\u0026fe=1068\u0026dc=1012\u0026at=grpufahdsrg=\u0026fsh=0\u0026perf=%7B%22timing%22:%7B%22of%22:1742143494713,%22n%22:0,%22u%22:1322,%22r%22:11,%22ue%22:1325,%22re%22:919,%22f%22:919,%22dn%22:919,%22dne%22:919,%22c%22:919,%22s%22:919,%22ce%22:919,%22rq%22:924,%22rp%22:1252,%22rpe%22:2207,%22di%22:2235,%22ds%22:2254,%22de%22:2263,%22dc%22:2303,%22l%22:2303,%22le%22:2319%7D,%22navigation%22:%7B%22rc%22:1%7D%7D\u0026fp=1816\u0026fcp=1816\u0026timestamp=1742143500501\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":709},\"siteToken\":\"067d5fbb795548abb489d89e8d740925\",\"st\":2}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 21 Mar 2025 05:39:29 GMT\r\nContent-Type: image/png\r\nContent-Length: 4133\r\nConnection: keep-alive\r\nLast-Modified: Wed, 15 Jan 2025 07:23:25 GMT\r\nX-Cache: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4133,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced","md5":"9460cd83deb241c31b3c89cc095740cb","sha1":"b24c36ac0199eef5b5fcfbd9a31dc00dd91762b9","sha256":"7dc21fb032a685f9f4a865f120ffc7d24262798683ee626ca4dae26298129593","sha512":"1ac88431aab31fc96cd46ca39ac27245e9d12bc98aba48fb9b53703f5d32c719b0a7faf7b86f674091a73dd60c4b20c9c4ac6712069aa00b4df29cd1742ea337","ssdeep":"96:TjjcoQqosJxFjeAcv1TGJirAUmGT+mPxO3:TjjkyH+AUbmw+mPS","tlshash":"7a815dfa3e3273d384609a024a795400543b5ccfba95955e86e7c09b3d44e8946cf2da","first_seen":"2025-03-21T05:40:08.896449Z","last_seen":"2025-03-26T02:25:21.312938Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/loading.gif","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:21.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/loading.gif HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=POVIkLDW9zZlBYLl; __ddg10_=1742535561; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":12494,"data":"9q28fRhGfp2fz+jhEhgSx8RbS-0SWkWttRGhnlSMwbLwV2SrMTOjwphISzE2C5qqS-1tSPStbt2hSmthAjv81pq3Bs8Mwyq0-oIg+CF8AtSchfDO8QyZShOmN8TYofU04hoNhFC8RTSrIeMSjZ3WRq8LB$h2Oa31IbNSxDiSha0D8IVDyq8WShwI6UESD$G-SSDlSy7aRSS3u8S1+RN+S8SFIiGRPQqDt0NSM6ipC8T9hy4cJ0N+SRiiVa2pSfRljQ2+Z9gbIPVGNhk98f$hn2S2IjemmdWDNR6XwsC4QVhs1cXO8sC4L4hDEXhgADb5GLPvQNSRzYihV8hh-NEtcXShRvghZN3QnNrn3fkmVnmawXLbm8bhqxThNSqZRtShAY-ejMRM4IWaw8S5gxkDLPil0bkR29VlN4Px09g31wPyxmCkXlNSzUV1jzZDy6JW-iSSDkT3Os9eCRID3zO8quPczgA$8h506PbooQnnSCcmmQhIG4r+Lue1oW851a6RUpa$tSPJASbDMkPq$OM3OBhQiq$S7aNqlw8RGBDtlfp98SI52M9dTFxI0x$zw2fSZdYMgznPOFJJdznArETeDMTuhBRptA3wwzJETAGF2i2XPt2nCQPY$Iiz6kQIcveNGdOyZdtgV$nrgJ4WW2L4M3Qd7W4EW80EQI4UJqQokzwLT00yjtDShLJTMfYVhP-Dz8I+Swo$gSDMmWFdzwSzV8YfzF57W1yozMtr0kR7xhdtPY+Pf8C8+Sq9hah7-tmfSEZGSS2g8GRpC5cSp+MyhiS5e8mRt-tT-2eNy+qeb0S5zyi-6Mtkxty2MCzd8oh7e0yCMTRMfAdZUI7rSIMtOt+RwIWpSr9S88-hhP+-l1ejO9zbPDVRDRR9hWwt-0R1tjZ427lhyMTI0ox5txo9ypfGRGd8ThThSt5i0Wz7tGxqIqQDqCikb3SW+xGfjTqg+Mz7q+YC0CPGngLjuQbQf8Gx1S2hewBRT7o+w$xzu5MRrjE-0iAMR8yAS5uRitR0d2M5pVADjWPMOtcMZTOtAP6BWMSSyEDhWwfTR0MhYeiqSzwyPSSpbOwyt2-JFv5Pq$gZ7Vb93EXMrfNxkbitcQi+MVzx633hJBmrcl3XLaQ6Gztm-q3z2P0A8-j78xGh-C8-xAoSFCm0hMVO8giRbZcGmOytSitq0ErqB-M+KjAWMZ3Sp-muFMi$J8wMjTaGMj2pKMDRyOeN9hR8Gctw-2O7wSwi8QU2706jOj7P27mcojEhuEh$r0C7tFboPjvYTMn4hodb2Eb-T1Sfz5QMmfq-Arh7Gq0Z7Sqc7zwEt+G6eOh7hpOfA+VycSYCm-2-8$m2VhP9fXCGC0+SORG+S0o1TlGRwAPqserh0Utee5av5NW-tF7w472VWwEQVkvNj5Dnurha0yyBqt8wyWnyz74Mv5A7gFI$26F$ZXKF7mkpJSmP47m46rI5m2TE2TZ$CEmU$0+mp-QOiyAJ0sG-LI8yIoxU9vN9mwR1YJs7uR8g4StYOfVrKaTsiXJKL0KAfVA0kUq+20$rhZ6dc2NGx2Y-d0gSSpI8hSKqD$UrTSbl89S8-i+P3SLX7r1puYQSteijOtcTJvrFGY8f8Mxyrft2EhbyhMQNMFlhFwrDp-2S7tX2bYMDhKu8hW6rDbvW2+N9W6wEiTepjLlN9hWa+8tV2izQUc-W2GUf28BQm-8WOWi+ys+U8wC7fzy2b0$fRg8S5JYm1GS-DjmGfYphg+xCOWSJkKU-aYPjMMjtWSC-YVSPqUb78s+PDR+SArtyKbRgDMMiNaiFS2hW-893997rw+wCSy6TVi0XyqR7bS9UB+6N5S22bViwfRSY5veYX1fC-CP2VDkU+iRU0WJJC$WhESwWMoa-ANUGfUh2Vq2EwOXD$O67822-S1h7f5dOAbmhE8oxTeO4Ow9lRxVYl$9z-bkc12t2jz66wSrS-rMRUUw3qnM0U9Dx+Tt2Q6AhS$WtO5jbEsWWRd9-owDtfM+SOwv3qX8+2FUPDStb-rb03ubl5zOA8tjlZTYo1t+ze8EiFCTISd8LQyR9ygiM5Vi0+UXCPDiF4SSuhZuU7puYDyqr8$Dr74NEs$9kqgVI$+NSod861kVYV6pnC$pg8OY-FuWLTcyXYKQwuGpTB4sU2Z-ygeztyn1M-$SGYy+dtUN6-i4GYhSORpuRJ6nSjgmQgjq1NSPtufOxY575NAmgx7W+wZraV$6Ei-ZwY7g-FWPrr-Qh5pkIn+IN1tPxJXEx98QDEUOLS9VNciS7+Lj9oUGROZX02tnUy6iA6YezbtEDjYx9hmRXMtFo2hh7uRuVzbWftnPIrvn6wAOujEDnlVWM7-Gy1s51kCDFfT1thiANB67FGO9GY0Szx1htV2M0+2DTkO9j9eWC-WNk-xj-SPKZVStVMRfpAuEbyMFaWpmVGzseaR3Qe1Ro9Y6LZmtt2rC8XenIXUFY8cO9jZcPRaGbhWBFQ6r+M9ZRc21ih96yOh9SUy7u4j9cJVhsh+rs3QRdQpmDqrV98wxe$Xu+rh2S2ZFWpFABhqkgU2eYc5VZD$sZXYY25r2rkDSCVgoAgzVhMQLZZPpebx$-67OYcMxd-gIAstDi7lSqUl7wh5Vg22gh7$jbqXpmWbSVh95YeWTqoMc6Xl1O5y95CQ6uuqxy20WSGlNdNjGw4n$ZF5+SpaMfghOpjBvDnRt8Cv-rP0rly2yDKRQCCYpqNzjU18PwKG1SIxi7Yhi9zR31WofGcS9D3NZweRrV7SM4Qq+3i7DImRu3ldGY0V5Vqk$e-ux8W+6YW7$ePRU08JNWgpJL+jsBGfckooapJWdU2y2wFo6-3WPNO$e-Pp1MqCIe9zJ-RifT68V1+zu2zMuZ5WcwQgrnDJJp$n3SiY70YPhd8w9kRzfKQotFNE-rxWYn2VSGS0avDMrjg$fIii19RW5ZNWIvBEjPnaOVo62+fm2woiPmwMS+WYXrXY6AtyUW0Ih$4+iI+K57lQ0ggpsbwf8VqvVzpWRtdNS4ybRJsog+y28jp0xXzzz6nRr99pGUTJIyS63Bw3izZyn+GaM-9JbgcbDLZ2SL5sj3owRkskRFBJnQ856PR+ur7ltOLb5edFRf8DIzCmxr1MRkTtycK1rf+MIdPuflaejqn26ZsVnI8E+n5N8lk8W0Y3u-lUnQRSksPxdK4M4ZcDa-wT-Ya7iUsajytStmXSeFJtgpRFaPpYAnrcAS8OlQCWhWt4ioG1Ysbzvj9d64k2ax7d9YyIBoy$-DfP0FqEYwIr-K87xdaEXuGEWvYdxI7rFjzDvvIJD++mg6IztxA8$WhDF5SYA9PU6h2OVD0hRjxO8cj1xYlNhZ5IGR$FSZeX33fjKcvnrQ$db-WhfniGoyS8NmfKi$gWx-tawmO47lXDdZw0zi6ys$tfJ9RBdZJfh+Yvl9zNcvmzzCSVS$jthi-zJfhWWoRvMSVUCgssf7x7Vv+vz9GSNxlqldJsjSLbeUVDF4J4FWz2VDQEYylNGAdglESdlNF7pslktp+0SXOKW1JYm8W$-CtnpLW+eztUzUWhcpD4JXd4JBD$tLxAMSDtx8-zJJyZsLVUzl-tSQSfS4YczNz1+vdKJbQAVzzKmltlOtDKO1O09xtBjKeNPZVNpksgl85pYBjgmLWg9zVlshVRJF2bmWfAcKGwS9OR-rcKhzdVzt2kzCpLjsO$RsJt49WiFbzCzaYd90e$+zsCRt9xlxzBJ$-8zlfu-Zme+pycGtqSBnz8m8LYJ9db9OpNqCYVC$j$OLlUJTGtC$ztDEzChN0ZsgsK22ftut1SrSDhVMM0tvl+mqp21CRN9ajzlke8zfFWR3+QF7Ou-tJ3yItYzY9WmsclsQcsRNpLS6GyM8FZS7I1jB9LPzVSseC$-gRSnM2+PzLt72Oi2C9qEgVkWgyllTpoFVjJcgpq0vCQ9EVhM8DsOi2kGSB+GwlAQx-SrzfS2b977bO7Tcz8U2aqiSBhSz+kSUzCMozNDMSqbs+SzqLxGNqlmWyWQxGS5Be$G7JJO5m$WFGSZUMRlksVOzZUJcOzvbCLj3zrqufbD3e8VEle2KF-hC2fjOTrq8hiF3xzTuJ1PzM2g8mMyc-hd8z7ei-hPhjdRNSVS2ZFMzc-MCdO3ZxUJJF7WIOhdcjvWitzk7wSn49Sk2nBlT9xl+-qvMqNmMs8FsySdJR39Fj7eFeSyDd8DhD7tuQLdLWqTl9IWeOzpPsVsLdb-h97C8V1dz4D+O6MIxC1W714tzZrNvS2ztVkJwaum+CM1KJSPo2LeExvMzfWyux7+ujz+tg$hpzwEER82mxLC8+50odUDwAq55nccKWUztWLG+22-XxitnGwPZPtFaWsc8Q8sfV7BUx7-LPGUUtNZbYNI8XNXZVNZZhacltz0lCt45oUjbGSk4htOG6r5xQKySG7$O4zj-+SV5iJ+MnsJtgMqR9WQvzCdNigVqvbmqVSO$25sTy5ZBW$YsPSALl2ZNDquERj1FD3pjIFP5ArQ$+SYBl+h628JT-rm1YhMtA2gAF6Y695a85ll7$T4Z-12mpQjCtzEivzztsQtOAZyMI2KJFDs8VVtVGSET3KcDO5VRcj4i02eEj8EDR8XAeEW51wXMchFi+WIsyUdRNkYiZFmiAVlFVk-5uq7RIB2WlBpEtAyJfU-Atp+pcjNzE0VzxUdfOzugPDJndwq7KNoWedSd+zPdlSSWhLQpzaS297+2prvLzlRkyWls9SBid7l8D8ujBFGWSWK6yctghSy9V85edDBiWeF8peVqrd2NzfPSzLxm9i61tBPq50t7w4etT-PzC3pkJtTt3bM9jMKVhnPOoGTMJ8ztjfR8yKmnF-9xM6b9mM+22EcvsYGSvbzNcpSzcK-qi8PARtCPpQlACJPzkgPeD++gVzR8VoMMZ3tzzNsytkfSx2ZneWGSLtDNcSpsYsprXritMxMwTN4j32rDvOS8WFsG7bOGgd9kXW4jKGDt+qokgEJl2Yy-K2XNN6mxf-TAPeJnf4cj86-t26M6tknGne-zGAG77FeBQSh$B+-2Y6812xPrZWC2nT5NDUhRImQYJbG-3MwVc2lQVDTIM$Wcd9cWMshVS26We8JWMFY9RJpt0k6$eW3Jf66NUYqlFw8YZbzz9nYyJ9MrEpgEl+m4GAQRqVOVjka7LIcKyuO5+Sh+--qNGRasS1dzht-2h2R-UTxtZE67YEArRM1ECP2OrTbczNYR1DE2U7w$P7AZ2G4ZzCMeFd2Nz8285jKsRw55r8-7TJpQtPF7esfw5f++GGiErYAxS1O-a-oxpVWPcelN1EbpqCOeGtv$8IcDKksq3TEg2xDtpkZkDfj7VIdOu-CTwO$dlXWnSQDtq8DJD$ckqsMSzafscSzUcYkkwDq8c$OTihSzf3sLPgcZ+LeD5WjizDTSk7-5qtYIYixxSEiNsrtORkJPgDacDKz7sQFE2p+S2mGT5ltB+N8tZCFsp-OY6W+2221ON9Qq7RrrixDd25kPBUJ8VPc49ABqRlc4tpiwAP4X42pPz$kpgOnMVEUMKpwpoLlXhWxWXMxUma20G6NzjZRkhsCPGz8d-afPQlsSLqKVeY68A8P4-00AsObZJx2xp5Zkh$4+9Lczd+dqkkSaJM$LPqTqIPlNlNtzG1GAsLhPr$mtNYepVFtbwIzJRS3zWM$SLMZUCpw5Rq$FPzwzu3NbcOx0NmrSjEITclh0g82EO-JBmzqvVuzlVyn+OzDAYYoSjqEyCPOGgziq855X44hrgJ-ZzNlNm-Tw1ka-4-n-kZDIG+cSdSfSJ9jWECRwi0wiz5GD1cpFPsO6$-RNcpZFJwKR6jaF2E9P9xzaOa90PP9SKwj$vZwzBw30i8ONQSp8GIswJcjqLJyq1DXRqpKJGAC-Q6t29tIT+7TAGtumQcGti-008j1vQIFV9jINg$sLfP4TQ8K8k8+EyjKkPS4pySwzV6JSVXv-mPsWTkVePV6GXhgbYuQcNeJGUF-Sqmwm3W9Wtt7A$BM5iS1sDRLMXkg4Vv-AlOZNG67YLbmMBzp-F7Tg2hE0Iu9LPckZ6sMkv8DEr8fw3WNZIRI-5AXxYToWgPLdlisdsV+8g$7Nw-TeD5qU9feiA8s4Z3NZzOXO$dhR$D$BPPNvf+1D$Q-hB7tM5zPbMEcVwJJ8WlpD+FGS$Qf1RNs-u-vUwATAw6-1QW1hrZ9kbcmqlVTSAUOZGZfp-9yBezmefeWGgVpjo+hLp-eUFUMKmK9-IPSVS6e7F7+SkpANGRcO3IMOLMvblaeNtkBICsxXB+j2KJm5TMvEd-5OAG7Wxv9Ldr0fOVOtrZLnTj7NWjNiBZv8mqMI9Zhj6w6i7XB3wtm9aSLWF+BBY0e7+Pjp7sSnQk16hSOyu1FiLtwNRtmIzC+rq7YlR3$Im9FapDW$YIGRmhrRFD3SFWxQ3hg38df0ana7mc-3vOin$+EkLbJc782JfnDb-9wcO2DtDWczW$o9-6TWmmqn$-sLGDVRYUgSJXKXTYth7mefD+P3qCC378V2M8z$KLmmahbWR-nhKVvkTcF-EnXxWA0vTPq5UYB+OAv8dcFaWitQdb0SYleYY1lP1AS38nr9AFdgO9JN$Fs50WW9NnpfuSjxMjaMi9p7JmL9m9S8RfLTmmqPy2zyBSLbMrbO7q1Ip$ZC-wbQpcCGUvZbVUcvCNSKseD9yT4bPyZS-kZExSu4sv$3QvGSAZLzrYD$0VFyZVgkbc8MfIW9M8fb$v5ZW73v5yI1cE3O3A3apkOEBlpnrBP3eAlXjzllO5C3uA1e6dcQj$WG$c$Ui8li8XO43ZKosrxb3N28xxqQrgZcK6zw3spggQrzYhETZa+aG6a3KCdfoxCWB6uz8pLSen59FnwZXqCJ2XdBRe0U4K-ZbcOd6$FYAK-ZQ$j7p-SjgE8zjbzoAr2Ev+jk01hiLMBWo1r$9SPFffSVbKhK+vM43iMi8$5iEBOGA8YP0$GIh156J2a-zKRPzUW7ia1D$YitO0utJyg190FM0dZnkSbtx1Ym742YOgouaQo9MTicDcVmUmoQQgWdrCrY8of81LJMA1B0mha$7r5I$IdeGWLMkPhtdJYCUFr4gzWQulytYPuZqYAr+ztWMisoEgCE3u1Z09VFl8AexO$kpywcTnrPkaokgurG4ej4pbgvrStBJ9SVFy4wEqLITwxnczx1ov22DMce6DL4vxf99xCjIcnrvrkCzI2mQMJ8VFQWeY9f8zpoC1u7l1bWDDq0zerccocwI8zlx9DDV0U0$kzz-kCCAta7eUS5omAdBbXolVSd4jwGXQKLClimn1yS+kdVAbZoDb8naVQVIP9VfV9IeTLPf$A8m3Zja-32IlrB1Ja$w2l$NkxeZsCeUs9sRSXyqgiNzazlDaNntwZKdE$W4BKkj-bPNznflk$g8VPeTJZ9Vkc2i-UATWm3N-qRJuaLI1cBzt+fLMUsAJWGZb13M8VX5$Oz8t22fEwf44Oc$z40zKMd7nTeQSS291Zxhha6jIiAZVq7fArtjNAX0WS9Ac+ttMS46TRJSla854SQLM6SLb9FREWFhd2fnVF1EgWg4hP8fMyq6oCkRr7tj8WpPRohA$4ST8creZ39h7f4SI7BuS8IqCNcy4GSXtW2D31tSgMWSSWc8JrSOh1yOt9jJih$yzMXoo74vPNZN9w14Sg2NFmNDkWax9c0hkGO0RtCI6Oym2GSGhUee7MGb68dbmWutjAhAy7raSGDlV0tfmQyMvS$IZe05-U8ahf88qMM-3hYR0Ou8$X2ZSGCmfIhkNGDxo-3STNr2ikWzhMDl6mfN0P+VRh8lcqc78Dwt02J+R0eXqw0L$zpVq+W+ehw0FKdDBKLpeiN8h0$WzPv-9VcRT8WEmN-8h6MbRw5Et7pVlkeSbRAw9yyq6jbp+2y$6RSy65nJpCZfL$5qeXrTQ$M2hXPOrcOZNWUSbfZ0mSYzJaiT+V8shGbQNzMDeh5tlWwtAM7qlKh4qf0yN3Sx5xkSK0ESDkPi9GCiyYtDGKhpqjvRpeLf$GnS7B7TV2kcGy7KhhD81kM8sfuTxNLQ-TkUhlRB0mtK8rMMpaojLGS24qdTx-1JcChXrl+0hJO8M5rNrtGhSoEhbaRpzPGp2chtw1Ybd2rN+MQG0VMLRn6I$z6hiURfJh28wXF7CSSfeThM5aMVjlMi+8Y57Wgv-qYTDxbQt5mi8WqdfMNeof7je3li9vfD8Y5qy2mMSewxkh8ix27cyZM-yObW8g2676erAS3-8TZ0ISznoG+zCFtfyR8AqOD0U-mS4yI2LNdp9o+p1+SPUOrOqxtRENO8rPV8mwDkZg7Byn7b7F$Pq08qSb91p2O-V8NDvtb-BWzMT8uhetrNprmjyzxkRtNaWyK-zhtM81bRG01kSJhUOA-mfrXcaeEVjS$fd7tyU8XpCFSp+01g00rx2ZADFW3iRSBkdwegtb+W8rbkS-Yh8MgMA1W6$zb5FjSC+$Njb2qZjMYSGuZVz7qt3YCa1u+-bUkWN-7swN5cNhSbzr2RMrj1+NzRbONtx6EP3S99e7KOh08VC+ZW8ebKOhNF4Y$fk2rNy5O1iQ+B+iSmErNVFDKenFBoybtOOJoX9x+4SK2BUWE2iUnf1SANR8PS+tUNhv19zSbFA9vkzq3RpSC0sVjdhgiPV1wBqMtRtCPgDzjV$OfRmn-AgscRV3SWiCNC2r8Sm6lUQ0xqU7URvG8Xly8ogCWexSORfUVqURAcp85s6CZR5jBOe$uyP8mZSwuSIKf-rQ2zsf8fwgFzbUOV+AtIRUIAkwhM6F3zUhdSIuotRXF-PpVQWtS-1lTRSbKhjfKVP2wV-QWijCC2Z7bP298PRetSShWttFqxU0yDxN0wyG-t-690WjdmG+Xc087RtyddKPDrMclF-zMi1XMcSB22Vj-t-e+hhtla3YRoa4SdGAa2TdN2DfA+lARhzIxSiWALQK2taWlj2jjSb9wOWOriRLil8SU5ZbOwt-UymeRfaGZwVDsh2gWPfxV+tB2+OD+WSGZtGntK2bUb+4hrMN4pqVji0kl1-Gu7LYha-v+W8jZYaQwt1IpIJSlru76ePV+d+ohPYVOpsoG-UNzh7zu7ZjJrAEAzTEO4rMOdGSkfTSvk3VWzDjRYSeQMb4pVicjMn0RiFZu7Aif8lR+v1c8EzZjSVfzW1v0bDzLJVu-iytk8cezEylvjMimv8cwjNkD5fyIw0UtbMszFtPkiDtKEgSS8CqCPN6+zyEOuKSbRgCL5Rymt-txWlqrj1sSu2NIlWxn-OhOOv2z7xRS$RX298Xwb6PLUnhVOM2TzgECbfpSVodz3htvVxjGqqbIP8IPYtBAUItNxDUAcp-eDGiutX2kwdZ6bRthjtY23Slify-3-Ag7qbt+2fQjXq8SX2C5eZMNf541nxc6rPg6kO9I3kdGCGeSxNMLFidac7MF2uu9S09c4RsMMi-y+fAWfPGYMuEszRCiyko7ctyBAa9dUhkDSeMYEyCx-8cZfcYzutSAjgUdW7mhG19Sc+YDYgR4uoWxiJlMRpbsN+8WYd9txI8yxj6GKP2FPnNK9ph3ihsCLlqiu2Wm0588lcworMS-zUStEQUUxR2RlWsMYmOTiq+hgc4KOtEsgtLIeGLG2TkEsgedguZgWCjxmOorFA0z84L8xGBlj9AJk+SkNRYO8+BAYttj7GZXYPVBriviz+TgXJJxq0lgn4U5KTjXO9Uih1z2R76fkifrXkr4C513R4W8QzjhG05w8cL9OUTt7XgGZS++h7DYkCZA7rcVVeZkfkAmdY9k+fRpkU0P8FYVqiCNtSBnfcdTIKPByf$XeG+IbQhpCjFra4i+b$hBSN3XgV1fcuw0SlnSqD0geEXAf0zFjSiqcA+aWMSYsjNQte5WOikEcyMeinqX2Ojp7RtCdIjit+RBM89sjoIpD7mSR6hzz6M0Kif+PiKEc8ojJrNKbPGxyczBBIPDaPUik3pC9dZUVx+KR-L+Bjn8Pxd+y2g5JK9TSjgXSKMnydKVTRyD$y5tdvACM9AJtm5IwlyWskfAZD-klzUVp9eNNjMp+wGsVt6iFURD86XWfVs8Z7kQ4LW3WoyyO5X8WN+49WrSBrrOJWxBTA9MZY7rCUOksTi69VJbR+8rhhZsMsZdw6-YURkU8RuZY-rpJvgh4VScVcF9MfASWSrrpWVFjdUOZ9UeihEyEVMJlcZ305iqy8hiQTydG6SsO02S3YlgjApRX4zsEYY1jX2lSPtPvDfAJx-7qRitCE2n4pDE7ZwZSyz6iV39r+RS9JlrIbNN4i+DrwPy5h0Q+TISOD1DIbSERFgxcDG2gPaL4z92DctGa+pQOK+-bVhSuSUcj--UrxCh$RokZyi-8bxV8hkZEeolIWnz40eD$PP5uzeSGEQzMfUQjCSityg2BDq$YU-ECTy-c7tyUJrf9UWuMUxk3AWqo5QoWcQk66CAnjQJJS562esDsQ0UONgg2nw6cPDDURTSJwOt3Dcz7XatnIZvjXQdzMoYyhYca2AEU5+UJORfcM6qEO66CrYkZtm5$EeIPnQ-gfUzT1Pck3vAmkVQOpLEy8Cvr5Stnp65PQwCrDyuv0Wp8s5xC9kcu0StTW9WIVfUV62nC6uPJS-fOW6p42pA3sO7fQ4ki4h9WoyJVZ0Qk$n9GZbdY7gtdDAnQMWomLj6Q+6VQlGEhRAjYOO6lQCkJmJYBfJ3u0UjXS0DP5t6IV1+dpZmO87UQug8qIDg+JYBLr6bk33$amytMlUeuonwLFoJY6sruuPQeTobW-6sUmxan2BdXyD6sUskFnlTNRmM6LxAxPQtR7NV6j4Y8DhQ8DuGi-38J8FYWTR7fz872zW6O+8$3oy8ZfJzxcbM6BhW-uNYnuPQVR1x3t3aVODXkBOE0stBtn-SA+psCfWSjNL5xM9P-1A9N5NETD0ze-U05Jj4JRxy+Uz1ny26YfV6c+$cW1y$3OJYtxnQ-oOmru7wmun+4+-Uyqo5QQxN9Ui$vy$3ROWNon6AkbWXuuQ6FLnAAEbyE7UQ6panyAgbWEurwXDn9Ki1WR-Z0DXD+97W3ecMCiJyDZ9qW3Vt$BnzuD$nEW13JLrSwmus9XWFfz+Z$O1DnAb-qZQjuMLWp+U7MsgW-B84oxl72Y1IC+3pYVpqojYTcJj6RwZFE9C6iczj7Fx0FhZs$Lxew3kn2SioWYBGz5ZfQpuo0D+M8f3P3hih0Q9tvup9xoQl26+LEyeMb-8n4SiSRWSFt1iMn+8E8W2$qVgAMV7t$q52mVp$37e5hl$-rmB3U27SkhZXiaGNmQxo8K492S7E8srfq0vo9ZIAabjd3crXSJQ7tjNetP3h-NG$grmrDNfDe5h2SSSmiXw6+bZhp25SmPM82tZ2Yamr+GRFRFbR2dRYMxti2i$0DwhSmuxRMyLjV7237DioF2SSMDtDjlp-PSIbztZEu8fYYMMXkwS4cJO-cEO2htBNotqtj2fYhohS00MpDW2iVLwa0SxPLSC6fkh8S5dSSR8MSv8SSUhg6eCZMYZQPLNfe6XETaXdS3T8-9Msg5S5dyNxCtEf4wSh3xCOuZl8$$O8X3uCyeM8R9S-tJ2lIWx6bEu7g7lSxaQRfSS90Cd13uCJ8iGSwtO8JE5LyF6N0wRokbShPC7UnSEae7MMESPU9qR5zh637cSSS+Za8J83IQGZtSLxDNjmZSlC6RfzhE2WmZnDIo6R$0vcerWSMbM31ItZNsXVjj9j5aTROtv2W4Pl0ykG2ZNBMxGJVSnW$8jtk7YlcXhlRZgfA+bWGoM2PzDhLQj$Ig5o89W$0PGJEn8VqMc8o$dPKuQDsWfXwmb+OlS2CFkfA6+SRSv2Y72BZqRCF$tzShrlF5pfEaz2m7xCYSfnRtS-tmzOLc$RIR-67RwQMddgxm1jV$O5OdB+PhNufUGGv2d4QtiIhoh77DSVS+SeeEqhyVWN1k+Pf89$6L2thLOxkf6CitLG3kzOeOCZSShipByKiIRepKGqj9aY9wXwKpnvSPgspL6Xnpf1zbSxazhe8Rb$rqN82CQvZYRnfES-S+2SSC4Mzq8SSxkih18J2lO+kR4h48-2bNfRCAR4RGh18ESdaG2-XEKpy8KE1scNzzlrNBoSSjiM7Oh0fhSQBy2P9FCh685mitn2Fgf$-nUbNlO8bMpRiCbfr0$ta2srPDC18ykGqM4l0RdNFSWS9tfzSz1utsT4tmqSGScSXhh8WSO598+TlXCS1Nyw2XMFNRyC715yX2KzcrfCSU5U0qNqwfnR9S7td07tk8+GjE-lfG06jS7pO9V-S16222kMFRjy-71jy32NrGpjZCY1$yg24wck9PylSbNz6e9-Ml+CW1d0qzqqzxxRC61wbqYjG+O0FiUjN0uNK7FykOh41a0Bj98SY9sFlSZzM$xb-EysF17WSxapGmq6bagdWqj7KNGq07h0fctk5+P-P8Dh4MdtSSx4SS"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=DXISyg7qMDnKV06O; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg10_=1742535561; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: image/gif\r\ncontent-length: 11144\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-2b88\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11144,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 64 x 64","md5":"e4d96bb51227829e536412e5392bdf74","sha1":"8bf350e63f7bc86615cdccc6d16e0c8abb00584a","sha256":"d2911698581f2b0f538c0d770d1b677ecad7b9e61e99d89d1f218f9dae6c31cd","sha512":"a580b7ee3f1a213a523cc8ac69662809cd21bf0952aa2767ea1c3a8ddf934a3a34c4c578d34525d54ab027915aa9097894545713f135126bb8cf7f280b8ab0e6","ssdeep":"192:Yx1zq53A3H8YLSfEdDNsS+4tygrQFFpslGsTg1z4cWl:MH38WdDNk4Ygkrmwj5Wl","tlshash":"5a326d2c1ca447e6e927463165dba2cb8811df2d226c18d39eac347fb95b23ee0dcd10","first_seen":"2024-12-10T17:19:34.10667Z","last_seen":"2026-01-21T08:18:56.850207Z","times_seen":57,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/cryptojs-aes-format.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:23.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /cryptojs-aes-format.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=t44G9X48ms9HCwMK; __ddg10_=1742535563; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":2057,"data":"{\"signature\":\"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\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=NGcdHomBY9RJNFqY; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg10_=1742535563; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nddg-cache-status: HIT,HIT\r\netag: \"67dc31ab-5d6\"\r\nage: 2\r\ncontent-length: 562\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1494,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1544), with no line terminators","md5":"f64648d3d21bcf5cbc350e14d16af9ee","sha1":"aa44c6cd079b54792e2faac3d86471b87a8211b0","sha256":"f66ba51e25c2e5fb5817d41ac71a73593cb380e04c5f023221b5504d43f4d381","sha512":"6782f0bd631349c205bef7e9b68d75470259cbf627f072b244dd3219ad6bb3852a8ddb63b4bda997774fd35cbb301251d93a9d22b3b49683da0865dbe04f4039","ssdeep":"","tlshash":"6f31048738caa4c2cae8e1c50874e15cf67a79447211caf3a7167408e3eef2246325e4","first_seen":"2023-05-21T11:43:23Z","last_seen":"2025-04-06T02:33:43.040103Z","times_seen":142,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/builds/meta/a9f6fd6a-4967-4268-894e-43061ecfe506.json","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:24.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/builds/meta/a9f6fd6a-4967-4268-894e-43061ecfe506.json HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=93RiXvsslcL6mOk3; __ddg10_=1742535564; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=dM6hkqZOUZ8VbEXN; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg10_=1742535564; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:24 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\netag: W/\"67dc31ab-93\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":147,"size_decoded":0,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"d982b63abafcd5efc214a7c1fff45e83","sha1":"be736bb165e1fb2cbe233ba906e611434040879b","sha256":"a675a82170b0a652e0a7b4459ca5a2ddc06f834748c29d42cea3ba0973710765","sha512":"ed629325bb1b177bbe164c55a551c35a9949b9b35c6e22b541eab86d5261bb66f787496145f49fcc37abbcdf42aeb5efeadeff554af59e31283c4d7f597656c4","ssdeep":"","tlshash":"29c0806d502f91553dd95cb1b47d3d30c5d9043310bc4dd5498a0d1c4554125fa54115","first_seen":"2025-03-21T05:40:08.898837Z","last_seen":"2025-03-21T05:40:08.898837Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim2.ru/js/button.js","fqdn":"gx.webim2.ru","domain":"webim2.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"webim2.ru","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Dec 2024 10:41:08 GMT","end":"Fri, 28 Mar 2025 10:41:07 GMT"},"fingerprint":{"sha1":"39:22:2C:F3:51:C3:18:D9:E0:56:1C:F4:75:2C:8C:7D:D7:C6:50:3F","sha256":"3A:AC:C1:DD:28:20:B3:C8:03:99:4D:E0:23:B0:5B:D4:F5:06:10:9E:06:A7:B3:20:A3:45:F2:29:D5:3E:95:63"}}},"request":{"raw":"GET /js/button.js HTTP/1.1\r\nHost: gx.webim2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":2112,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":320.76,\"startTime\":1742535551973.82,\"versions\":{\"fl\":\"2025.1.0\",\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"351a401a-ffff-426f-8af2-ef3d2b69839f\",\"location\":\"https://www.prioritytire.com/\u0026ptid=885bf60c8db4e588\u0026af=err,spa,xhr,stn,ins\u0026ap=1228\u0026be=1251\u0026fe=1068\u0026dc=1012\u0026at=grpufahdsrg=\u0026fsh=0\u0026perf=%7B%22timing%22:%7B%22of%22:1742143494713,%22n%22:0,%22u%22:1322,%22r%22:11,%22ue%22:1325,%22re%22:919,%22f%22:919,%22dn%22:919,%22dne%22:919,%22c%22:919,%22s%22:919,%22ce%22:919,%22rq%22:924,%22rp%22:1252,%22rpe%22:2207,%22di%22:2235,%22ds%22:2254,%22de%22:2263,%22dc%22:2303,%22l%22:2303,%22le%22:2319%7D,%22navigation%22:%7B%22rc%22:1%7D%7D\u0026fp=1816\u0026fcp=1816\u0026timestamp=1742143500501\",\"nt\":\"navigate\",\"serverTimings\":[{\"name\":\"cfExtPri\",\"dur\":0,\"desc\":\"\"}],\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":218.08,\"domContentLoadedEventStart\":439.74,\"domContentLoadedEventEnd\":446.06,\"domComplete\":452.54,\"loadEventStart\":452.56,\"loadEventEnd\":452.94,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"h3\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":136.76,\"domainLookupStart\":136.76,\"domainLookupEnd\":136.76,\"connectStart\":136.76,\"connectEnd\":136.76,\"secureConnectionStart\":136.76,\"requestStart\":138.9,\"responseStart\":148.32,\"responseEnd\":148.68,\"transferSize\":7979,\"encodedBodySize\":6204,\"decodedBodySize\":10425,\"name\":\"https://www.prioritytire.com/\u0026ptid=885bf60c8db4e588\u0026af=err,spa,xhr,stn,ins\u0026ap=1228\u0026be=1251\u0026fe=1068\u0026dc=1012\u0026at=grpufahdsrg=\u0026fsh=0\u0026perf=%7B%22timing%22:%7B%22of%22:1742143494713,%22n%22:0,%22u%22:1322,%22r%22:11,%22ue%22:1325,%22re%22:919,%22f%22:919,%22dn%22:919,%22dne%22:919,%22c%22:919,%22s%22:919,%22ce%22:919,%22rq%22:924,%22rp%22:1252,%22rpe%22:2207,%22di%22:2235,%22ds%22:2254,%22de%22:2263,%22dc%22:2303,%22l%22:2303,%22le%22:2319%7D,%22navigation%22:%7B%22rc%22:1%7D%7D\u0026fp=1816\u0026fcp=1816\u0026timestamp=1742143500501\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":452.94},\"siteToken\":\"067d5fbb795548abb489d89e8d740925\",\"st\":2}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 21 Mar 2025 05:39:26 GMT\r\nContent-Type: application/x-javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Wed, 15 Jan 2025 07:23:25 GMT\r\nExpires: Fri, 21 Mar 2025 06:39:26 GMT\r\nCache-Control: max-age=3600\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":897269,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":495,"timings":{"blocked":148,"dns":1,"connect":19,"send":0,"wait":101,"receive":89,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/providers/dlv.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:29.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/providers/dlv.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=QTqm4Pigx9kMgmmX; __ddg10_=1742535568; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":6126,"data":"k4DUx3BLGrDglybBNmseDB3y60B9moU3D6pmgRZUXOg3EmUUjQoUmuDLdTpm-EUr4BWmoAb1mV1BpmOQ670my+hbmaUmsdm9GBMy1gCbkm9lBdeWh+em+DO9UmwdKQmKsPt2mq1UZuBhmmhZmyri6mmTmB4m8ZxgNbiyd6mm$UmLqm3pLEAZ5mBe0m3Zmm81e5rhSmmpm3hLyUBo$rMbA$dp8rse23B9mzn3mzDGqmd9IKaumBGGkeG6IJyNlRapOmomRE2mMU3y2sjyo64Geov4Om6wmgCUP1eBy9r9movgAMc4mErY41eglIL$eGA61meCUanrVDmB7L0mgkBNyyDmBo6e3$V$MgUhg2232m343mN5mlur32OrTjl3mMQVen6mTO8iOGmanp$dU$U1IsdNIbVBU8UmT2UY3e3blvUORoPY6b2k3V0RtUUME42ZZBKUABD46Cmv2fraL0b$0gomU3LPtbGRX$2KdCk3nOUBXaq9b2U$M9G$2abmko$IZgDjt8ZznLxCGnUps+DUOVwmnS2t3egTRQbhQ2CC3ja32igaa6DB2$rjG5majg42e63jGXe3vIb+rlVhMPh$TzC0ECCroZUdC9D31U$zBQIGVKDp$rVjh-Ko4DoBvD$ih0XaZmdAbMGnrCmUkr9a9RLZUk32PZZQjG3aRFt1vRdN+CYzlhB186Do6meW0rYdUGUUueAmopm2e3h3CBUaQTg$t8Uk$uj4oG8UcBD011l1eOW3ZL35gUA1G2iyd9o1bMZ64h6761p60E4oZCzQ+74z1YdZgDVB3o1sd3EbGj4XoGrioGLBpe30d33e8m93U4Wdo1WxdgDAWaolldDEi0OCgD+QumDSru3Ua83mUT3B64dx0EgydrmOV6hBDmdi6103yzloUxdL28Or$oUgZZenTgUYUo$4L6e61a7yrgPnDmO7dpE28xyo4WdEoG+8ig2d6eyDLmO328UuDgKGiEg$Z2o1F1-k$y3Nz4QO2EgiGDjUqBI32XU6BUT6X32t8EmOlmheU+78dUsUOy7o3U04mUGz1eeColZS0yDyd332bZyz4Vxrvrs+LzlYhYgLt74bYl3gBUZQeDgoxagDa8Z9geBEBrnnUoYIZagUSjekQe3CyDNZsk$k3Ay7DG73ZgdUeAo32g$-dQeGt7CS2+7No10nOk3YZ5y7IW0XUkBUXDI13kQqMZrgLBIjke1cjy0UcoICGQk3-UumosU6mDaQQBCl6h6DlBr9GVBpoFE77A3VUYO2y3AeGDvey7Be49GemOeCenumU56T0b0WlEae1iEbT6ho10U9mo3m9z4FnZymlZCE2PO4X6p3ymDyZ2X$eWaoYVBOBLdB0eNfe461B13mDVZCm27d4DC21398q6gXDydTe398ftQO34r$VBYBLl3BrYE+ly7AQTyD0m-oG5Z5Dg3BP+mE75eG7xvXDOBD6mlUgUq5mlyO8UnMYxlgZeIZvu4lBQ6b98OEboZBr$36sDglZg64-xXy7NUlkQkrP3Z7UgxDMT4IGhmgULyFEX$0Wgzf03P9u9EM1hQR-F6tX$BT-h8Zn9u329D7UQ6Vt2mDODYU$1-dOmDOQ0dAZsg-jtsB2nwMQrOjGM1JQBB99WxbSUa3DBbm0D4W4erj6GBmmmc+l3v9gdmu6V32BDD2aQPUgZ2oR$10mk1994kucBIU43SQ6zmnn36C3Qkg9j1DOm2Z7rmyQRUTmR6dm1e3M1$mQBb3gk3BmEQl37eeyQy1lUimTgirmJ1eBJxx6lgUMiMP+y1y4k4Imn1QtdDZsoJGx3lm3BpmfVmlmQSF3boGkrx1NdjuZ32Vm2Qev7g3mDrDtQvdDyJE2LDdU2muB138OGLm$niyD9LEm5dZBbUyj2m2n1eIPz2BDzpIrFdrr1327QiWI6FyySuJGK1QB+Xs6bXQeBC6l64jGym8m-61tOkYcG8dV3B9QE4JbhBG1gtQBUmGAnVBD9ADljB3BrZQepk3M4hDcU-9$mOygyUF7NgoE8aJlBZSLz3kQoJuD2mZU0jlM4mQ2Bu3pe3V2Zo$U69bx1cG5BDdp3LDlBmkBrdCrAlUa1InZ35gN61zisdq8umg3ZXUpBa32y$67e03BLZ2gbeGODGD31pd99L1DsQ$UfFQmOSmO1M3TOnvZlQodQUfr2DlmG7dVBOyDkQe143hmZw4m$$goB7Dl3em$5iVBZ3mhd2$6J8xV3W6Ue3OlOnmZF+YDZEQDhn7W6Gop$ggdi7a3gk$j1aQt6a6ox4rQkV8tI$zGSnB7V049BUDPJGF1FZg9og$o$2nsUGw7V3e1CFAWDuDym$g$Uh3wOO61$UqBN-egxN2o1y786FbjoXLZdlqtXzVnDDGhB6mUnUj2g$21gBnwD3UymA1p1O3BUOs3sU3tTQQ9bWV5Bgeg0JrQk2S7ll-g36b3kIaYBSmJ6DaEOnr7B30r04UkBq6z$hnDj1Un63ymumOSUlU$mcB9K$LDc9dn76Gk$EEYdAx7U1yL7DPVu9U9QeKLDYU5mO64BGXUur66h9$XU$Ua8Lml3groSlgd$NpxwB6nBK1A6oE8l1$P8BqBuzQeAC1yUoGuzMKWJQqBlhYg3BGrmD6+AL30E4s4keJh+NOXDXQvukm7gTk$rpkk1WBkDzlJmLBrpxxLRUiG5mh3NzOm$1nXUTB33PdUcGAnE2equIj31GMGO5mey7jwDG83GdB9Do1yBjmG9Bj2yeFUVdi3u9DyU1UeiWg3kQm2AvIm3goXUDWxtO3Pmrmo$gsiZZWBOg2cGeD3Zg32XUcD-dmUgworTJYymn1gZ0BLigenY3Eb33ZiJOm3UcgZk$JGqBG1i3YbYSUXU5BU3ti11UwD0Q-6c9LWOLmMBy89gbdoTmCRSeprorQK1g6g2bzlOQeVXdNdGgq5mdk9K3ZgXU$gIdmZ26WjIsa7UTBry8bYJ1A1-3g6oY1lQv2vxL3Lr$ODnRx3P6Di39ourrdbID6DM1oU2dT3uroBmlgomOBnolcmgdJUSpdmc1w41jZagTmDcDT+6F$iO+QXUXduUSnO3ZMLgU-359D64k2VdrZsz2gC61yBtUZxbol$UrheZ4gboOZ1m8txymyE2nR+ZVrSzOzQjkJb23g9zOUSmv$l8D64jAa1P1WJ1Y3ojb1ddtxagNBU1QgUvxd9bQDn0o$v6L3Fv2MpVjNUhydDThm1d1OBzQE3+G5dQZUxP02j1-Un1O3P4gLdVmD13yCR$OQ5mM3W3kxbcGYdQLoP$y7cm2QNyhuDzmJvE$2z73LDdhQa8sjqEokqwUtQA-ynGrg6BEQ3dhGym$oAodjm80BeGVQNUDpAy4mSlQ+QpDDmiVUOz5U3Oa3cFDOkE81n8ZOE4LNurIrZgbgLmKIUz-l98r$DWVmBxtOOmDo+h4jU93vBGy464yo6mB3dSnO6zQNpfm0zO6YmeBnmG8Yy43ra79$z$gNm06bm03emDBr3e9BgZmvxB8iFI+Ume9D3gg91Awkq3BY97Bn3p9QzNme9I3qUkgNyozFyzaladmrBleOyJB1B9zNF9d9WMy4yNy49BBL$JgZ3gz9IEQ29QB13qyJ32mk7mt3BXIvWUyQBO6b3qZ2mum1zLy4gZyJ9qBn6vp$6Ls4gTmum03SwJ9Tm2BQqkp$m13LBMaumu9WZ1B4813umu81gN6W$Ssox49B3LzY7eyomgzXxMsQmem1yQ6GyEsuOu993Q7hUlr9BG97zbzLgPF$g3yzt3gNyv1gydyQ3eBp3BgS$b7q$1OGaVmLZ1gwBCWUgb9Q3hnU9EBOgN3C9TuTBYmryYnlu39UuiUsuSmugE84278pmu9ABEci70B96MWm3p6gmy9u6eq0tOzy$TmQm+Z-3uyVB9643ymug3zz326bBY9B9MWmmFt3B-d1gx2hzLmcz6xs8qUidLydgQpd999u976XB23LmuBUBGyJ6OeeBn3eBGm4yZdx9Q97my6bFBm3z1r2m06UyNy$9nZGjmBEXLyDB$14Qgz$31U0BAt2zQzz1u3q97BpzO3eBymgzQm0goBp9762gDgwyoyTBnB99Qz3gfqWZsZm7NauzLBngztE3egEqQU26YBU6g719uykOa32X-7Y+b3j3umgB8mug76UgZyPq2rsogZp6mzQmrgrE$9EeEIQBvzNg1m2m0m0BO97BWwQ3aI7zQ6Y6vIA6b9D6UBkjb9a7uzOzOBpyogD3ezN9$B1WmgNBOmdmuFQ3emyBTx8F$BYm09DB4Fxmg9Qmr2omuI$mugUqOg3g3mymuzLgZ6CXJ8pm2goz33mdOBuZuB1qQBOmeB965dqQQ9DyJmnzOmty4B2mnUQglF$6kU6ZOB1gt6S2byQ976G6U3YaAyJmGuVe0yN6M32B16tmc31gksJ3dBbOLBUyOzFxU9UoY6WxC3Qw$B9goyQ3u6UgomQ9G94IA6TQQ6mgEdnF$z39ugvjY3wg3yurW2YaDgADg9DzLxGgo9B3B9$z0xP$b3ezrxmm0BU9A31BY9Do1W46G3zUPutrnzOy$BOgo9Q3g606GyQm5oTzEBG3P7O6h6fc6WMme6m3KzZxYB9mi$wgT9u3pmQc6d2B1z0pwqk$o3f$+3U+mzLydgLQyB09+FBmPzckmI1O2mgzO9ByoBp6gBOgDgb6M6D6StNgw9uBG3uy4mMxUmu93jMB1y7s4mG3gygoNBK31Bp3g3O3QBYy9OO6-gT9E9P2oED6cUgg-8G9jW+8ZBGz26ZoZyx2bgIpmZkDcnDuDgDzL3Qr$RlOOz3BnyZbX1y8GB9gTB96mmg3pgD6MgX9ruo6Amu3NWG6jdfEVsoB1yogwgP6fmmEdyDyQ3g6b9Qmume9$3Lmez26GB9Btm0zQ9ABPISm2gjUSB29AgTz3z1vUyVQN23BO3-rexXWa3MoNB19DBYuhshO26U3mEQ9D9DzOBYzvQ03O6whU3jrY326G9vDygT6U97y-z2IQBu0J673p6Y30zPeum1yNu8RA3Rkdy$zNtNg-87Zg3L9$9PoXq8r26+ubyTm+B9BUzqnYzQU1gT9bW9yQmVwQ6gzL9B9K9QbVI$B8G06Yz2BmogZs9KZgm00R709dgT359$grjnBQFRz3zQBn9k2ZmwKQ30yJ31goBCBUm2yLOPQSyPtCnlao3OueO09$IuBLsDBpdU3fc3BTj0mymygomyz2BsuZm1hBbw6gybD1g5yOmryDzN649yqe1gmGs$go9x1Q3SeD9u6bmo9Q9Qpd3p3U82msRg6bgogyKLz4amBpmqgf7UgLnmgTyQ6UmrB7$U3v0fyoyQmO$Svl9Ae01SNvbaKEaG$vhi9D6-w-vlmQ3h9x7A3vN2BgwTGUgSN4nmBVxbBDq4nmyDzB6XpTaOo1uZ9SkA9IsdgX2ZmV6bBpgwBFm16gyQ6bzbrUmOB139p8$ZyysOaOcOswWAzwWmzs9vBuawUQaF$Dy4zQ90eZz1rzkXnjnU31gNaR7Sa8yV$rED3196o2$ZzQzr1SbbnmgX0NzyZU9pB61g6l646gzOgmb3$DigyDMmzJtDy1DzhQVkUrBGzL12Bn$N9zRwh2OUzlLNg4Mm6jINxgzLnmyrpDy0Rg3u3PNm5lWl6uh265q16UmhWUgUyT1ryd3ggUgGgGyQzuVAgx7FO0zz646gO0mgB8vJgG3pmiOpyGWm3ezszVgZ3LSYhpy56p3eBzdngYWqep9y13L-9gmZRMsAOUymmcbDyryO7UmmyumBV18EQLDLe$nYDzlDG$TlQ6Om+1wqmlQBOa1$gOEv7N1cQpp5mWu1U9FXkJGD1rbGzLX$15m5Z+431aJAZv1WMjOigBSjlalie$15DzQEQ1re0tA-6snEr2mmmldY6G38F46l9wLD3Wu4r7nsSslNEogpSwJplpVg9wlQ66$wm$3ElrrIm2moWwMEV8qEMsS0SEL$BslsisiElEVplT5siTSlggsdm9awLZy5zXgNzsB58nm0mgmrzszchn9Ey9sgBwG2yGMlmmmrftmcUcFd1cQshBDcGclso1gsAlt3Z6gcv9Zm$cZyosrmms31Us1c7$Ys3sls4sgsjUec2cNyxwtwzwCtjw3nvw1mgwEgUm"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=D8gxXTBoa5zFEebv; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg10_=1742535569; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7509\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-9f81\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40833,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fd10397e4cde4d6bfc4e9ba25ff4f3c4","sha1":"ce2eb8e4d28d5e12bdaf25db6320cc00560be2a8","sha256":"d806932121ff74dc7848b1c401bfddeed58a476519d0aa74d475689f17ac383c","sha512":"be0caa33b1518ac871e6e6b0085812d838c7b67b6a7648e56db0cd67cbbb38da7c8adf11fa36c7ae314b837682768b229310afb657395c0698db2e4a5f4ddff2","ssdeep":"384:B1pLXXAlMrUrUcbAD7BuPhJpoMUVecccCcqrDiI3N0/PAW:j1HAlykUcsHEPFUEzTDiI3N0/Pp","tlshash":"f803ac6bf724dc37d28ad3bcd954806432298696adc4c38192f9ff1f992588a3d4e7c1","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.890504Z","times_seen":80,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim2.ru/v/fonts/Roboto-Bold.ttf","fqdn":"gx.webim2.ru","domain":"webim2.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:30.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"webim2.ru","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Dec 2024 10:41:08 GMT","end":"Fri, 28 Mar 2025 10:41:07 GMT"},"fingerprint":{"sha1":"39:22:2C:F3:51:C3:18:D9:E0:56:1C:F4:75:2C:8C:7D:D7:C6:50:3F","sha256":"3A:AC:C1:DD:28:20:B3:C8:03:99:4D:E0:23:B0:5B:D4:F5:06:10:9E:06:A7:B3:20:A3:45:F2:29:D5:3E:95:63"}}},"request":{"raw":"GET /v/fonts/Roboto-Bold.ttf HTTP/1.1\r\nHost: gx.webim2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 21 Mar 2025 05:39:30 GMT\r\nContent-Type: text/plain\r\nLast-Modified: Wed, 15 Jan 2025 07:23:25 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6787626d-28da8\"\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":167336,"size_decoded":0,"mime_type":"text/plain","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", name offset 0x1900020d","md5":"da7ecac250e13817947dd1f5c1571f91","sha1":"aa8f07e3b700656a5cb3a0a402451d98e796841a","sha256":"027ba3f46b3e647249971010ed596b9443d4eb95b96959582fbe5a1f8b83bb16","sha512":"506f2623384972a3969a8ba6b0665de8bb1d708d1e0e143ea77bf559c8bf82b678f57db34cc3240411e8679a4a86c532b2328eff4d9c4b8da2d226c78e7dd0af","ssdeep":"3072:11FSM9EcsQqivOV08PlIgn/CsDQVb16yyfHC820XRuX/4XhXXXXXXGKkxIMoFKna:fTsovQ7IgnLcTUfxhdknoena","tlshash":"0e246503ebcfb7aed14083f37debca8856eff03a5d11e557958a2011c905498a74f62a","first_seen":"2025-03-21T05:40:08.901524Z","last_seen":"2026-07-17T18:42:53.960132Z","times_seen":160,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/D6I7FdZC.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:31.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/D6I7FdZC.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/CNXwvf8W.js\r\nCookie: __ddg8_=HoQ1GuZP8P6g54xL; __ddg10_=1742535571; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=IDEPuWIdKE1xpqO5; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg10_=1742535571; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-47bb\"\r\nage: 2905\r\ncontent-length: 5942\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18363,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (18362)","md5":"9db7c956f35da1748ba1a78715b7ec88","sha1":"eb7cf163611390e7f71d7b1095761fcbe450039e","sha256":"8921daeba666658cc22b8edbd82b981678e3ca6117056da13f301f96274401d4","sha512":"e9b54e5ab2b24669c8fa3badc4059f28672741a728c38bd912c911eb802f563c308f63b78bc252d4affbe0c74e6555ed689a01fe734e769680dfff0bf7fa3436","ssdeep":"384:ln1f53BEQ5M/0kq+ltJoIyEVKfHxvVe27EDTx8aaPqQjxmlFdb0BzSnTSS5q91n:ln1x3C5/0p0JoIyEVoSPBCPqQjxmlFdY","tlshash":"b282f80ef44a587d16b668d439d49905b6381fcbd04008e2b8f6cf621757c6cf37eaa9","first_seen":"2025-03-21T05:40:08.902486Z","last_seen":"2025-03-21T05:40:08.902486Z","times_seen":1,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/WPiWsW_T.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:21.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/WPiWsW_T.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DNNdIs2A.js\r\nCookie: __ddg8_=RbNrh8y3wkGBGL31; __ddg10_=1742535561; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5163,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5226), with no line terminators","md5":"68636c99ffbe0d4e381a4a631eb73def","sha1":"08a3d4b5d227bb9c13a776ad4af8409ca7d359cf","sha256":"751ac112871a322c0733ffc1556e35ecf8c9b9ec1adfa1128b438f4659cf853d","sha512":"e1fd2e2680eccc259edbad544782d5ddaa95d61e6f9f22837cb676c4126671ad4943d27a8ff61689bcfaea637964e34370b2f90cb5fae059f1198d3914b9b1ff","ssdeep":"96:6Ep53hE4oKMj1K81wUZ13XPx1oRst0CBRL/8JXgfDblKPRPR:6g31Y1K81jTpmQ0CHEgbYH","tlshash":"bfb1a6d4b1d8e0dbbb764fd2c036225250076b947434a0d0f27aadb7315bb54a663b2f","first_seen":"2025-03-21T05:40:08.903313Z","last_seen":"2025-03-21T05:40:08.903313Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/3MjjOpd1.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:24.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/3MjjOpd1.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DNNdIs2A.js\r\nCookie: __ddg8_=ZXEgGxkQn6ZK5OtK; __ddg10_=1742535563; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":4359,"data":"SLaTuTHTRTaTq8nP8nBT8wIhi28dnin7pwAJ3nQEhTv3IEnZnz3ihF3lH5Fnd3AFnonStTnuETn4An4WLlgnRa+EEFA3IVn1wI7nRr$IengTn5kJyx4yBkrO3lGncBrN1rnaBJIubWtsrHAnEccqFwMRA5zni4WvBwbABlPRMe+h$tshj2zInlB4l3wW8Twn85nvkZRni5nA$32grVnzpwnc3wna1wLawnXnIhka13vqr45qTwvjwnUjbTdywwn81VpTAbFUq74Xc6onsmZulzWIbwnTTll$P+j77ejh3nPlMF5HbloEVQVHnnKRVQdldhMERernlQj$nD6JvE9$8Q+ThFTn8C2bnwn4z+7q87RJE0TAuQ4nWnldkMFPIwuyEC$LfMzdifn8sSdahz0XdlZi3IdnQCsNA3annWN1-de5dfkgljN7V7EbNEnj7VR7bllTo8bNlbdnndUTh8cLRbZieBycMInnRwnt7SE+Wi2e$cFVrboITvEru3hOwfFahnPAB82hrGxnazdymlvg38Rj55MFyInNScR1LIlpenfPlHIIED1VhTu5TT$1TcdvgnEu2FfepQ8GuPJcErxIzgA54IwfUfjBVvIng8Qh8wNEr$lpIItRyElIbEAQHM11u1HeeppTD7wOKFKky1T01OKIlHhMwlrQ5EFQCcD3c1e35na51zQgBQRHMVQgzNqkAwQbEOwL0bdrInZn3EnbdaAzVzbNq-l7D3EE7NR2inSlJSbEl$nEmlrRnC7KiaQ0cRa4lFCQOKqIwQRUnaE84yVzIQ8clMs8rt3wA5ke4o-EI5F2II843uew4JjwhOat14ohElKHwFaLSrM0LSbNnZ4akR6T3IldMFVrxinzLLlTFzGAnElVHpQlhEhHe3S-kRj8TxIfycitduhj77iazlSI4FRJe7C344JBUVChNl4dwsurOTsVQ8WDwlq2VThdpkzkAnleUEJn$En3ueSAnPnWi3QqiM4frt4apKQA5$Wdin58xiT80rAclIsl21Moin4w2qt7KdVHwe-lz+eTq2C1TAwsr7nhonURaD3bo2Kpx4-hn4dwQ0pafka8dc4pBiane3MFfTdgb$lU4aHrkR-V7gGvP83O3TAjdwclp8cmnESrZL2z2pB-q2NqVohQ83TEElP8cC32dc5IrHr$8sdc-EEIFuM7UnS1dgzPIVSQIl$dVyIVzkml+lT5n-IcSlciaSldu21ThEwmIVzbkTZoQF3Kq2hMDSbjIkO1yIoUTmIqRadIrFhF3d8ckRdqhQIVdwDcEdpkSmC2OpnynjIodTzl2EwS3BMnk6DdcsrQzL72ZEQnMt3wC745aPlbC-fMqgzR3jMcm8xoQQnLl9SGpC-jKh0EppxAnylbGbTT-InPnmgilnEgzi$sA5MTb53KBJ8TjBPd2BIsR8QlVMwV$ijwkaEnEsbcGOQV+q2j33SLQ8QnEjwElfInmoQ7wUREQl-ia4Iql2$I8lTF-LdasbZnExlVHVHMxIFyngRLG2-EhmlJrTI8VnhNRUA3i7VqfAR0kJQn8o2th+T7eLAfqh124nHeSnkHa1J3hah88QR-435ea3w$TzLIbjn581Ijq2InKwM1pi2JJadsevTlnER-8Fsbln8dyITPbpwJlPi9dr8F+Tz1lUCI3SnwTgTb8SzbqT$1B1p8QlTRbDwMl3I34$4bonklwnfohdTpwGlh8LintLu3fIDkvRaRT$nlnUlHl2tLt3cnWlzSbv2kTlnweLb9znmlQK+PfE2zL$nMlL8wnamJclDew2tMnIbi35r1Iw4JAnlZUT3EGEwqTDwQlL8Gdl$3es1XkMT867EsTZ79Khdwg11TZ$rT4i3n3u3PEhE2ininQ0jnLlbl2lTu37MsiWHpn3cn4n7MEqhg3QnIlbEFR8jbn3jedTsg0I4sbHr1l$4Jm3q1LM-dBiwqnF3MlpIwE28FcnkIheO+bznpw212lbdazTzBnAbdvdan3+Tw$EnfA5zbhTL8kicR4Sc$3geJifRERbQ0+8QnEq245IlXlSd2R-dTgrHIMMERwdJjBaMpr3zninLbpfzdcIFzbAROrAdcln5dj1LMrE8IFIbu17ccI3l7onIt-ccda4JgeIz3n8q1dndTD1VcTna8+zbpBPIrnnqW1Acn3tha+yl3dBdcdTh3zn-AE$n13algIqEK0813nl+nnGe3zL10aTwlHSpb3onwn7G38cSQ4wJTTiQTaI-uncccI1E28nt37TbG3daoT5ldXeCIc2A-VTaIklHELhTsTz3-ELl2a2Pl+VJnaq2tLsT7rRkvn3lwOnCTcMjlejTmrkncU5lvR8SQMI8lkCQ$TBnHr9VVacEnzJ5ljlHREIn4lar2yjlnzT4BX77IBgb8Fllj8knAtcHhHT5nKAciaSTEn5qodBAw8nHBFr0i7obohuTInvIoc5$p+Tf83HZAEVbC3MNqdvIn7J4BXqrOcI4xLR1Z8klHdr7EKwnTw8bgzoSBnQMQI3lnRTjlcUcdEATiTBlTLE8Q8TnwARgMzRTiwzLq7V8QI3SGlFhFV8JRlTaid5nKLj84l2SFi1x32IjRadhhn-lJE2icDbIAenwdElnhTonk7k8a5bKL1b2nmIzl7nafT5n4ib434ro-h8xANgbvRWMGUUIEIFnTSleliBEdwnTnTQlPlrzbdbxnRrQdvafthD3Ve-InSrvwfzQIEi9Iwneny-I2p4lISFgn5e9ILda5qSiUr1InAlKLHTGniwLKcInt1eNEdTI4a2fQ48GEFq2AzcnB8xIz8evwi1oMhT8afdhleJ1cdy43nwDwcIGl3E4+FOpw8zNnRbcz1TurgHFwa-Vn1eikTwS0imM0ZlQVqEwoTbiX3md2l-WhFak8Z7VATxLpy1wWb8qTK35anAdHEa+Sct3iFdi3SrgnQnVe2l-P3v2El+lbTwq2qTNaM32yvATEhHei$krLnhlTuetPEE9I44yhbIIQEeR8IbpBTLmdFQLon$n5IA424gzz1ySclEFE2gTbkZ1lSc8TnaDwWhWinvC5cs0Xn4A7EkVL6TMn38-8c4-V5kMNrSgbzLOwQTUrb4MuE1-4l5A5n34bmPg87nAZc$3Nz3nQsoTF8E1eDeL9-oQjwuelccElz2ScIV3I6gviT73rnnI2$C2Iy3wg3paQ2iGtNnaEMngnOcoNz43R6eZ2Q7Eq1X06+TBlgL0EXDPeG5IdsSD2R69n8I6FFnnxMzoTCJcnn8-BnUTK823n4rmN2znvQrDkILiTIn5h8IoELoad2uOylkLm-X06j3l-dIw8cRPaDsVAVIpTEo$Gz-Jba4PbwMQz$Difdanbcnz1wiJ4a1xAv5IDiupcEbtl0nLIaiwSnBDa9sIaSHp3v9-lAs5SbN31Tz-cOJEDZauTzswrxkySDznAnxDtDoxtLaC7aElyEinSnznSP7aaCPD73SnaC43yxoSnDnncrhnfEwRx2qPzUfErIwg2E3dwSwRxKzi9laq5Eo1Frcyp7hi5IalaSflbaFlaqnlbo5lxBhRxBzdLarELoJdLaaHEILgLeERx23lS6+nFgbgFSFaFzTIh4cS5IFRaRczFSazcRaR3lbS2Rx2Fn4ocaFR3d2RFS4RaqD34g2ITnFRnyLS7dJdJqwnJRxK-dcaalbRx67dcg4gFRxkEiJ42o5g2Eddco248zSMhnFawl-Rrqro5qhicgwRTnFSflwAJnaErlwEqPKBboagJzrSaS5I7q7SD2xp-ISZDB38Vz4lVaaqyTNda8VqbqTi7I4dEIEnU3bIF8ViN8X1X2mBmwipV8iBiwIjNwgTaEOBI2LIFn88F1+ZMKwn88VApgW6f8z6722AfIel3iPceIEn4d5k43lOwk82NBbP9IVwoykdocpiknCc-iyExyyE28S8l$nnEIjiPnTlHIwlTd9rVlp3TnEix848bn0IzAQ8VlbInlLlirRdrjdrGAjw1w6rI1nAfiJ8VELAuZQwWp3E7H2ioyJlnn9TTlVInEcic44ifiJRnnTi9lpI3pA3wEFn8iW7IycELUQnzM0z48hn4nwP+iAaU4Uo+ifnbimrT8QIurAc2nTEedlFzEC$TA-i4nrlnA77NicA2AbabIFpVAQEci2d4APpZq4lFTbAf8f8SlP68ALH+o4lx6-lnIz8TnaEFl+pwd2Iblwn0ERyG3Ti+waIwIEdBlzlnFr8VlAahEmluPA6+nhlLE9lTilzhlLlOFZZQiGzojkdv4giyE0rLiA8REta08VItE9nEAqMO3W6Z8GI-etyaiHPJIlEF8bItnoiR1HIb8SnldaAf8bnKUGI9KySsEQrTd2iAdElwlnEU7nn"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=hGzgwTqJ4SA0eR0c; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg10_=1742535564; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-66c\"\r\nage: 2904\r\ncontent-length: 915\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1644,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1701), with no line terminators","md5":"119ce3103deedcd0a45471fe59b71846","sha1":"8a5ffb64499685c6f095fcec2d691667a1d4c9c2","sha256":"a49edf31f8c547c4f449c36fb72c073aadac9795190fe2890a8c4c591e006466","sha512":"6402322d4813bd7672ad4ce26886fb0a908752b1e1389c4b69ea8c690c8236982ccd2e8b43d47450c7b559c43c9b49588297c040a53f1153148f7e6af2219d03","ssdeep":"","tlshash":"ef3174cef258e573d0a7e7a845324431b8a275fb3e99e7d48684d5351323074664a6c0","first_seen":"2025-03-21T05:40:08.904164Z","last_seen":"2025-03-21T05:40:08.904164Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/home/play-icon.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/home/play-icon.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/Home.BaH26edq.css\r\nCookie: __ddg8_=hixM8UQWJnhyJBkc; __ddg10_=1742535566; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=NC36JhQFvHRWrN8D; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:49:16 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"67dc31ab-564\"\r\nage: 3010\r\ncontent-length: 493\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1380,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0eb380a67730d23fb5143b8ce7d30801","sha1":"7a228a252b68c9e1de00fba8dc49db65cdd4f52c","sha256":"cff07f7f0645b3e7ed684dfe0e7ca4b191c27fe1500a5a1a241df300d52c0974","sha512":"a6c29b73bf7b12e90edf3dc9bc20c554713ce919aa91afea24abc12e35f71060baef02151a3306abe13afa898324f4c7a0dc4deabcbab6b7c4fad179215c011d","ssdeep":"","tlshash":"eb31dc29e30ecd36d815d2af9d30883b2102b1dd6ace42559aed8b0e60300ff255b2e8","first_seen":"2023-05-21T11:43:23Z","last_seen":"2025-03-29T11:19:57.805539Z","times_seen":10,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/locales/kz.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /locales/kz.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=PS7WWjCFtFHAvhYR; __ddg10_=1742535566; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=0ec3TgW4wXltydZe; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4434\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-25c4\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9668,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"697b66257293de7b23bf7ba5c759de9c","sha1":"6fec51ad292a818273511ca1f4bdd7f9b179d35d","sha256":"46a51486508c7669887a55cd5e8e5bd92a7d8f4175a80a3e3839474210379f9f","sha512":"7adef72776545ed79979a6e945b4badf3191aa69cc132c4cb137b9399f028008b692e414125193938d8807074e429f007f7b523d7fa7190a80df0fab4fb9ec8f","ssdeep":"192:jBNdFsg4tdGkDH9Pv5NSxEqAXT3ChxzhUQ2c9CXmx6P:jBNdFsRHDJxNS+HjCTp2L9","tlshash":"c312d7c1ef70f2b479c637aaeb396c6c394b707d3a2b8b8d817d5b4465d3a5c8604884","first_seen":"2023-08-27T18:54:10Z","last_seen":"2025-03-29T11:19:57.925925Z","times_seen":11,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/providers/hacksawgaming.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:28.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/providers/hacksawgaming.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=ddDZI5aCQKaI4K7k; __ddg10_=1742535568; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":5444,"data":"63db896af8580be9560422af2fb60067b349279f96090dd7a9918419b4d5dffd=XqF6FeJGrVSmxjVq4vOlbdMorbPoUNRt0mx0.6nWRHc-1742535552-1.2.1.1-aP46wy9IoYpmGy.C9FQvzVHptLBEm9V.j8ekXc9fpSGN0SahtmpZbshjyS_31ip7x76VpV_gs1SNVAfulUOd8NKjq.ycYzjkqXXq0mbkhloGlqWZMw9AedywhH5ikQlkRH3hcuttS_rFf82RQtwJOO0dniJCOxtmOjE59io7i2ai_7EuIdFB0E8iAojyTq0z1Mx9XbuXJFygPqlY_k6XA96unE3lsTMrzTA4KzAy35CqaG4n51qEPGEIBx2TVNDCi0_VcmVdc8pi7Ybmn1D1uiiUAJqH7lA5TSJ8W9IWJq_hh5dF_hpSSFyn0HjGjIR_ckoAo4ImUnlVtuHM6F2QBfBfyrKkqSDLUpSTqaFarzFELfFBOeeJk4FrBfoqvYtoGnMFjjZt7W4gNe2xA6ICOQATDw62SLkHpc1F6d1Q_3x6KnyZypjmhLHrQBsXmfn5YSShNRW51.AZLG.yDFaovALXJ5ZCCq8ge71Y75qyFZV54KvDLrv12qW784IJ6POTZOGTo916u7.HYIbb_ck6newTyihmEinKysW1B.mNRYBRRmOnJopGEU9g_WodAqiWB34uRb53DaMMiqslvXF7tE55ejL75.mH.tNuTV0X8J.dEDiLRvFtCKLd1B_trgp8L9XFdtFVEgcT27pZQjS7KK1ckHDdTa3absrmTbOnm_aPUUL1coYfXz.keE3Y3EeGSkqawLoRDdICsLu3FH_R5SOO5yJhGS6mYDyioCmnr7zlcnmC.89ua1pXUHO5OJPMXkdkBndCQn.z1p7ooRxglGeR.CUpn5XFw7yKmRC8d9enYGHKUYX36JtZBS_YCHPllQ3XXnNSCNmH7OWWVfmyTVtQVDjG4wPFRKVyEOh2Djr7FUYWjSTlBjnrxyseGab5537h_R9EMwT8prBVsuFLx7l6Pxum2mMv_nnrF95A1hegVT3yOXnma.6CmeRhUQXe0eeDbFtz5136zc1zrOR.jCzrqGg1qeqcd7aEEINEf7O3KzhAhvhrz97M4CSRykbdwr7PtlhvizTaupBJvCqpxxW3IKeg3d5wiJl75AN7YJeyikZgEn9q7yC1td5T8cddEYigmPEdXmK7qXRhhDlgYg0QLEG0ucyVoCB_YCbEHsttxSVDxKRdfQ2EtMbabKlCnb0Hd3pzt2EJS4_FterrFU7T7uWqBicsIMkenQ4dhSiyT8vxFWiUbw8YbaiZkv7cS2odUQ5K27GZgawSxenZywP5kzwh9ZeeVZC4MTo4lEIH7qeyuzWo0CeKvH5wEkwAQvFVMC_nyLqRd_qR1YvjnhFh5xluiepw0a4hH7mEfB51e0p_xZVXH3b3QGlI458liIyJGKt.3DFF2SaTHDuDZfXWsjLaZ.vzrgr_H51fWN9J.1Dm35GBRja3ML6_yN4ZFitiYKuhH1B9xGF4TSHcvUs28rmgiTazspKnpC_9RZcOzZIqSwA0d0qbDzbRKQRNsWuPWhhOgbT5p_Ist1GBvobbALehDK0g786LIRZdhRam07keLgjaROQDXCGyd_QxN7YRuvgNjV9vdaGLV0fXD8nPIZVV9uIVpT7CzGEYh8MeViZmbbcrxcsZ.Msf1LtbT5BRPYQKE2bkngg8REewaJRLPg1.YHbMeYnNMmmaCD02h6e1l81hToQ0NzMXkhKgHZCKpeQhojsmhZATmFFNZvcjaFHanjx8v8WVM1QL8E_MHkbBHSeqmtk7O_OBAZhkyQUJ4k4KW3wRAb4..SXmLtrTUi4a6UsV7ESJmpkzIIJQMbgmvDeYlpCg5_jwMbjBDqsA.JhB1jPpXhx9QhPAXFxFEe64HXHeHeMAju4hh1DXA30Ul1gI.VKB_Y51yAGhBjHSdm58jQs2eAwzIGLVqnrJNbt7MrUE1R4rjP_bdXG9fd728O4Lo7K0EjFj_UTD1vp.mNr195Aue24kjdeciemuCaW8D3UoHKW2X9qM773bZ4lU4c87w4s4_lZ8VasJBBK_rJyPG45RmYbo3_ezcqi7A14oq60CcAi3ZBvGYhmUrQDDvgY7K0d3JxdK_UpVEq_G_1efDUCpQnj0.ZjVAgWjwbuC4CX2vWOEnpowsYQZEhzE6A_xMgL.WRurno6VuO.GxHebWjqFF8njbnarSkLIl4HU9oGlqibq7wHHmKQXgJwsIhKKiAhZNGbR3c_oQp.SyRfPrREMkiLki.crpz5oT2zcz5szhg8tlOgOA13Gyz__ISDKD8kGka_VwLmwWvu8ah1moh.cgP6yCMshW7fsbWyErpzGtfhbTdwZySSxLdAkcX2LrSVjikInOWnrVu1WcuGdCiXFFeroz9WqoWZIFjxvU2eNNjN6abcFxIhXWdUk9tIJto2y27Sme5a5jzABFNLD9YwqQyppfTDOYQ\u002659b87113d1497d41d833ea9ea59a6a26fddb067290664734658c8f4d91d8ffcd=IPk8ghPrjlP1zKxgcjIDxRVlT5FUDK0nSOLvY2oWm5c-1742535552-1.2.1.1-daYYrPSU2kXCVn6YYgXpqzIu2qgb6B8TLQieQiyoBd2QS9BpiZ4ISMuu9OYr6oyKHnt4GD5wDEP33ct32vNtjUbpdJfcnySETiOnq0sxO23y24c9pzyz3arwxxWERxXcTLZyvHDLnswE65iI3AUqiBNiLE.WjfAyk5cDHrUZbG0j9KV_glXsr2j.hQAPOYASonNW.1UQnUdKvUWX9e3M8U4Jx18sSK9QSG3WjdmNUpJvOeMeIRpvGJNyUv4lecYQSrirkX.kiNAArPEFcYA_QvMPBBQ78A7E5zPCGewPCOuZcj3Kxb1at81vZLGjMC7ET7DsgLnd8dTjRcFJpUDYPDzRvRyqNVSbTyAvq0cKqE0y7geEnaDBO6F1o1mApvenmQseL.uhQfignMZ9CzioOfPrjgFqxixlgwEF9_OUG8GJcELr6UTHyZ9ISY.A61KBDd6_O6ngI8ckZtuOjaImaqgRBd7eFbK9uZZfHjezqpV4RsVMXXMQ_0eLy56tWPOHJ0gEy78lzKwoXlfzbp_KG_oTWC2DiPcTvDgC6QdttxcO70wGFu2QeMMrAXjUJinvQ2_KNoyBt4REK.Rn3i7voqfKXozSEP_38JglNG3lA_ejkyv5uohidlheiBngaOVEgJXp0vWUDg6BLYma0fRpdHdoXOYxykOSgB3qyhByJP2VkxOcFMd3sggE43RhGpxiZkWvh6uJU34HdfFyM6j6KUGRBBXviDWs7FGKB1Eg5THn3PH4cG19FOeUYLro4RUjwzOoMW1uvZ7XnW.IEU_oSqc7SzJ1p2o9w_r0Q6J0ExUpyx5DBGa7VjXDPjwlQjut6UhW8LEDo2DdRZtmYcWYRdm8EpdCPhI0I0jWQBlz1c2q.jw0Zf.n8ycnX7kN1Rm7nbu.xwoZEisDXcVl2Y5l8lVt_jX5r4mXC33Ep_MqeDB52qvkoRXb1sFtvnHVc_TLcAexyaCAXK5TRGSwFcKmidteHldLqQqFCYKm96elHfUTME4XPBZ3ZVvVv2NIOjp54ADTSx6YsrRTQ2frd7zLcZW0O_C5_1PMrF3Z6XvMRztvyVA8RmPKuIWPllcGcYJCspcOM.PLMFfyDrFWqMtwBgf8RPx2t196fEXM9DPwg1c2ZVgaDKKEf9bWyW2axXJUXEqTcKGJMN.6CxqYCAeMSmmFd7hNPZumLRAFxfB5PmFdzVaO__XjsCDKmno2Jf.zWRrCyibctS36PPQKtlLVm0d3T66Rho0OpEXNLI1V_YF9nBpPXlt259nllHpO4xu2eQT3zt.MRnP5PYGKPkhVCRBhDsq3UbyKCmGy9uFfiPNG2yeBNHB2TIMUpVC5_geBMXn2TZ8w.a3RuOE5iP7z1419FOFLDRc3rjRlbJvxWPCNv.uSDHOqRsGB2kQ4qD20dKBmG6RJoZOWaMC2Id76i8OKA6J7oLpQWPYIGH4gshwhMXHdpnH._Cu59v85DObv2G2osNAl.kfGoWml5ZDA40cWLms0GeRUCQJ1rftX68hAS3dMo4nPyksnFiXanwJm9iOidG9OjugZqrLYa0MO8oo6Od7RE9_LoFmfLnd0.XznPQW5_Usp6b5LCXltg9JDhqtrBtIw6tSAsA2MMtcTJysYpjUEdEWL7lAm2JVKadmpnttUlHmGGPifRfyEBqSyvaFGuc.qjRIqWN1OStCYshPFcLPET.vPhSyJM1wPUsR0KRUyHCLUqvutTEe_NDsxsYMPHV9VOpTABIUHgbAClNLnOcCThCnIDRHPWQCIf3BByI8fE1mYTB4ZPrlP9.5SiPXNOa6AkPUtjL.b9kzG_BaUEG1NH7jYxCPGmKmwf.Mu8EVY4qw84CsfBIbaJfOvPflcrYyfTEmPENTARB3q6X4pSfTlF2vZLhu52TwpGGEFYaFkkZhDTdfizGZ5LUG1XkrQxvS37VhCE_FljScy0ccGJE.EcXHRvMN_RUKOxtpk3cuJwOp79hRHewjnRvcGNNGCh8U30FjNy9p6noxDCXoG3My4lVQ9sQ7sJWjQ.tNwLetP4_CUGj.aAdwnt7UIdNPfzsMSNembqu_GGzEK9X6Y.6.LO2nKq8qm79fBSJy.JQV17tSqLRIB.YN.a7macDKjUYUI7GREK.Kr.GPnDO6SbIbkPMjsY.iK3w4mUu57iSvVRq94QHthc6N7ANL2owIm2RcoYjR81vPSAoJzcEsD6xfTO7E6c6Ki4h2YxHNjlNgctNCuKl1I3iXCbpF0twj0C1VEWdCo.x3oU1Y4qarLSKUsv.tMC2xUHs36wPV.FW9_gc0u9EEQQHrgF362ynz_dslN6JDJkeJj7Ew0ysathU6tx7Qe9mrHfNMC80NDaut5bMOkqQR9xRtVE5J0JI51rN3fWfPZabfTvTBDBaORdie2Y4wB6E5e2Rt0N7_COAMR0WXekWY5Z5Cd5i3nYi11kLvoCsF44FTybpDaLA\u002630955a2f8592bb2f2ce0d4ce2dbc1c42a3252ff735f8d1747005d5136aa9185b=_tIJ1.comcgkLYUBIrUg9MH4E2sWIgKVtjh8SqfJk9Q-1742535561-1.1.1.1-QShzPcCT7KbF4TtjYw5uFfgAUAQknhwP9FR2sg.LCmAioWR4l.LbHwpOttYWAbStbP7FmDSF9N7XQb0RtM2uYB6Q0ej3wK6ndaAe0wWytVn0XLwJ20CnnfvvikcU2dUX6gtqZnneFBznXMYh2sf.MJJvaKvFPuq3Mt9XV4tVbiFtThxJgA5fWSJp90f2zcSsPyUfJt9jVpN94grZvF1xmg"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=paon3zTrYjcj2WRp; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:28 GMT\n__ddg10_=1742535568; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:28 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 237\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-18a\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":394,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8383d8c9eea3b222535fda6f06d9746b","sha1":"be10b143dd40450ce4b0a121bfc5dddff6905ba0","sha256":"ce94d7769a3d6678e54d303da0b735b74318b85d7e0c38ff393c61048daaa2d9","sha512":"87e6c1369de66c66908015b0c3d29df12a5b3b3d2c3d6fc55e33765366e36f617308dff5dff3f271bdb7cb40c251581a1dc59ce7e040c3287dcce6d9321c4565","ssdeep":"","tlshash":"6ce061b873eaa581630cd73956314435bc12f4f9fce513758cd31b06325516e465c194","first_seen":"2024-08-19T21:28:00.792003Z","last_seen":"2025-03-29T11:19:57.757442Z","times_seen":9,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/providers/vivogaming.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:29.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/providers/vivogaming.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=paon3zTrYjcj2WRp; __ddg10_=1742535568; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=6n95Xl7XAzQxI8gT; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg10_=1742535569; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3662\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-3fb0\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16304,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d628100fa5d779e3b9bc129fa62172da","sha1":"f608ca7e628bb6851ce103666626b8dbeee8bd77","sha256":"3f26c9bcd48d8ed603f734858a6dcc490927aa3991bc5b2d5de26fb9bb82b632","sha512":"60c2da3dda597931491baedee8dc8d8ad2762e395f0e026ae3bbcfad216a1f0cefb951e36a372eff6396689f571c13e5221eb99ff94ac1ac7c8309d099d8887a","ssdeep":"384:sug5o71gg1u/CzY+xMQD2VOUWX/yUA3egn+1umMoHP:RLT1u/CzxxMwgOUgqUZg+1umXv","tlshash":"69724298f3e6f2a0e505f7f417299d79bf6a2cb63c23c96c0bfa0d94ea6251d4054843","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.873938Z","times_seen":80,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/DmT_aqZN.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/DmT_aqZN.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/CTURe_1d.js\r\nCookie: __ddg8_=mWTlSWJpwMpyP98o; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=OUfJMXjsch1vBlTq; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-825be\"\r\nage: 2905\r\ncontent-length: 134548\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":533950,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/tPdbiW_V.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/tPdbiW_V.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DmT_aqZN.js\r\nCookie: __ddg8_=OUfJMXjsch1vBlTq; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=zGM6e7N1Z4h5NEzU; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"67dc31ab-c0\"\r\nage: 2905\r\ncontent-length: 121\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":192,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"0cb881a9d79fc10f4c0c8ec3859199fc","sha1":"f4859be9e377d1ce38069999badc180ba1fe62d2","sha256":"6a930c27ec0eb2b8abdd6068f3b166910af16da314ce79ce210772508897e599","sha512":"6a2915151f88a09c70d5e8aaf1d065367a2e2c367b35a427f7a6173290ff05da4642f28f2e29b00f38e31fbdd600cd69c7465edeca12fe0a879a609dc55d1a57","ssdeep":"","tlshash":"bec01285d8302077cc607824a1d20f42027e3644e115d17c77fc2482f470565a4aec65","first_seen":"2024-08-19T21:18:59.559781Z","last_seen":"2025-03-29T11:19:57.926629Z","times_seen":10,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BCJiRCLf.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/BCJiRCLf.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DmT_aqZN.js\r\nCookie: __ddg8_=OUfJMXjsch1vBlTq; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=gqJgjnm16miFfejU; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-123b\"\r\nage: 2905\r\ncontent-length: 1877\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4667,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (4798), with no line terminators","md5":"140db2599961583677862bbaf48db93a","sha1":"428331d52546d6090b9845b9c67f6a0dcfd83447","sha256":"ecc4fa07b774f62532987d3d26e6555773d7288c2d699ead9f3e5f1f696a352c","sha512":"5cd3e4793e2d07a793edb2fc322cbc739b7e3726720ad8560150a364f9260f572a6a1c4c9978eb27ad064c8e6aa22c3a965fc88f11185f01025a19f648cb4033","ssdeep":"96:irwWwthoQaUMMQ5DIFlHbC3LIuYQ/lHhz5GB5Gb5GB5GdXruulHKlH4NqJcI/Dtt:GwWEh5aUMMQ4bC3tYQlhNGnG1GnGd7Xm","tlshash":"37a1a44d70bd6973492b6cda96fa06e6d30c668d7431d0f026afcc2f1191c91ee5a386","first_seen":"2025-03-21T05:40:08.909583Z","last_seen":"2025-03-21T05:40:08.909583Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/Gamzix/f4d66f6e17ea258e1d44d9eb553d258e17f627ce.jpg","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/Gamzix/f4d66f6e17ea258e1d44d9eb553d258e17f627ce.jpg HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":35421,"data":"SLaTM8l5bRaEhdJlVnyzaIGnknzTE3n5lMnv3dE48neiInvwEElPInRwwAL3nQEgonIahnXgT8vncwIgoEnicnmTEJ7n17K0thTEVVnbTnhbhh3mLnNiEalQnRrTlHPTAJFn$$uHS2EE5Tl+Ei4Rl3lKnl5n8ZFUl3cRjMFUnl4bHqrETnFRRjIa-SF0aUto5wnSy3an3Z8R40an4wQ083qva0qK5KmzHbF61GNywGzREaERluQ3IudAiIb8EmhWrCN1FRfPgTnCdnKyndcSe$y3tZ6s9zg$utOr2bltzbno4LfOZXGAnI0OjLy$8aF3n8O1hGEtg2xGAAbcxJE0C8VTn6z0z7BwfdbsiH8tas02iWj4qly1Eel41W48nnPjLEn8ad7Ee17raEel7evEO4krVL7cmAFp19waBp$2wy5aP8tIb$nc2ZAvTEvFvvTn5MTnoVQFeLo3rOWL5Tnj3Zk0ZaRaeBTglTREZguw4Egt8mHu2tlwvMwai0aiJ$SAIlwgd248bt+svbS1+Lb+Stn+y+ZSu+IVmZG26us4EZniAp3r3eAbbdiAlnVqxyjmxuI3ivdT3K-piTwwwmhmCjOOhkE-p$vNqvONxNi5fndaFn38EepnCAw4njHuwX$su5g+K2X2G5ZtI25QNTv-St9yWwg-iKtnbMNag2WI2eK+1tZl5gENSoVO0Wdbdnn5dfrefMBMblBuRVHjbt0gkhv+VIIxCvn85hEDnbmnJMThTEla4dMHH2dlHnxrPulcE6r8RW6G1MRc71ju$+bI8AUlIE4JdUXfMThhnmBLnPJgZdF3eDhfJenFAOfg0cI2TQkzkT17dzOe2zwvn7n3Q$3T36z-M0vFjuwIr-yRqiM0HnEwa-aRVHgTOtb5mAFIn2Lwd3sLbzl$zDREj7J4FdIl1a-bzE3$8J8JcjrovyIuFp1zBS5k7WoFsWT4lVFTE7ABXn5Bwu8EA$zQGbFAt5By6ovITdR19cDdU81RzFtOTnhzFNTVL1tIFv$$g0gaheU36w0ETZtv1+MncZxj+7F9FK47QahGZz6V1TpkmtVdWEghmn+acJRqqwI12SAcR-gh4PFb18rpAcw7JS41l2nbI1zzwKrj8cKefxsEzj4mL7oSacesqa1lji04c7ibzzpMmzKlAcq1apMJrZgEep-ea1880sgg+ozTS4oZp7igEheFrLnuneIp1zAcJTP4M8KJ63pScnUCnuAa7TXlaP48sawJ7iKppUIqP1rD5O$HSqC8LK0I1jEwWepO3AScK$mSEvJ7+-waJ$7iqp+r88x36cqaJqRADjzua$nE4Fnb1NuDwz4FS6xNXa04aIe7+SbEJXAc5I2pnzwnaW4SaL3w4Fw1F8sWewAc1naIIRa5Ghzm0BOy5WXa-vRZaL344bDKEwb2fJAc40WZACaZ2bmm8T6$5+9qllQvEvrBj0Jewq8Ng-nzmlwziL3LR6Ees$IfgJnC4uq92u$XoZulbGhz-74Ag-RoCJTRBarvogpR$elMGv-z4OJwo-+1cEbL$Dgm4Kezw3qenMtatnMuBAFn2jbwROuREU4MRctJVLen7gP83iSEQwo8onWk7IEBz8FSc5awaJhGZLA3gTOTMWojLiT$kJeS$lKTSTFnSSy8BA8qa5gb3snCdDJoEbultnOZhnbAfCI1f-nhzEcazB3rvZExw6T741EM6F7nxFh1ENzoht4laa3g1pSFa54370PMfSLoe3r0r3lHFMRheTJcVer8bEwRbM8mXn$Jc6xHjra$GoJjLOvhnJnva5Na42ERnOlo-cV8pF$3F3erPLk32LMb8T7tL0Rz$wehl3qE6Th7U$nyn563rp15FTixVEivk7pFjopjFORr77dWl6uaEER3PevqFExlnKBCXLkHS3G97nUn7nwnhJ3KTL8vn4cAAh07DAgR57bu0j3EIsSQ3IPl1J3I$Ur8shyn0GL5SwND$06$wLSlrAa$cj1sV-AwNJW3DjvrJlQ4FGTnbPF+lQNwQ3JS8zG6rEcgdkpy3x1tShHnJemdL3FR8FceShy3CRTovaB83nwbetdAAOZt7pEpIT1Lne4rx64AzAlvqvnEVRhaEWWzt$bGtVK7BZzl8idVnbvUUz38JVtjcqUfqIeaEqa5iQlIaT8GHzpOnETPMjByopfc6qlMHiSJwAHmncPliuF3fht3rcFC8n35gA-VXLJR3aonoZ8QwUhda7jJT5lSwcAa7fCZHAiK9uwEE81O8LzA0sdfl+Tri8HV2$lWVQjzl1nfVUAu0BQy5qdFntl6KpFjqChSEe+lQkkPpTn2ea43SZyjcnBbMRjfzpTkprAwTTTJnkcRnIfZTNVxh5eainAbvsddJJpqH7+2wGUwEqnaRkJVeXbSFl6qGOZmypIai4kcuSKl78mGrQLlMePsg$$nonjlg2n8JNc2p2+JDjNzETuJUrbZSXWQheuIm45gvIn6NSt$NPGpNudPG8J8$sK5NVHT5JAN+8XnZ6pja5lcung7QUejGwJ4XoNcZDVwBIKIyE1uMjdUfmlgdIJ39iaHpNZXt0RqcdffVe$wttaeOAQqWXg+m3FQ5rbrNmk$3w5aCsyFNC88QpG2B8KSZ2Ucta$rv4FZLzv0G+1ESTTeSeOUAVmR6wBAatSwX124nL-MxhUZ0Z4nZPaq78l+y2vkPveS7bNNQCfFTAfU552Bk2ITIJL1jZg0Rz9+frd+47li3aRn819bCErcvHZri8BqBUz5WSNHpn9b7RAvaii0S4zhgoSgmVsq8HshJdHJr02pvA5eDVMwfnfJaXwQKOZwM$roTnUhMHXu7l5sJG3VaR8e0lQw7K8XwueIlEqvGddRU$qR$jOtsP0KtkkczwJ4VWcMhD+6jepQ9yVE$OQW$Gp36ACfFH0cmub+SBtuztSBw0uRAK7bB$7bEMK+zLyx5XzV+HpdJHwVrP-t7EN$0Ib7Tsqm2mxx3LG1eEiBvDG8dulQryv$1vCnjZTX50EKzQbp31CNRrW0ydsmj+MmLnyb+1ynA7AfN3ZEG10f6CxINybiP-cOz2ULBLvfhlTM-KeT3Mm14XGHsyTcF3PZQkH8jghlMNjsdvpnhI8wEIMlgNaoU2dhb5UFS0T3rKwEV4yKTmURauGEBreDQkOek1rddtL3W5f7JVQRjmJu+5cgFoa77y3wilSR23--z38nu+62AE3S1-OvxtiEB+fNXzBMnF4cVzQ3J72yJrp1fNvfVlFlrUaq773br+5$UXFTMBr48QoJFET8eKlvRNPfDX6mpm48I5zeSzBam0fiMiLjtxr9odk9RT1V5RnfPEfV2l4oC7fwiVSr+Aq2y+t7gN-OjHTbti4gpZjodETImVsXNUr6sBcd8qXPmu-AC8GyZ69x2BVgQCVBgu61MHXJMPmoe+yUm-TICwluZKQEe+uWwsQOwRIuKbNvVNa+IeKiu0Q5bgX7bbaEIH8pqmf5$l1zfJIRV-bel4nltltPLapplLWi3EXmBEf5QQaFL7nJpzb6W6XVfwh7lxfFWr8daaqg8fh5MDQ+R67e8BlUR-uEtQ3JrhizRpfytXhhTsQihbRpnJR6K1w7IXhsQDpvVaNUNcivhG0+V7EBpiltt9V$u5unqnW$ql$RlsfhteIzh+VnA+wkw3eTAe8gb$uvhWKtL7IzN0wzlbe7Iep9BP0eIM0pVkI9r-LFnTflupemnkVTWczbL4uKwE$NqzAJAitQflQMuNhRlvq701KlIQl2nhIgWqhxKlIRbh8lhanxwDbquCTmNztQdMQ5NwEyVjQ7M$t-u0KjlwnheuN7ndNWh0uZdW0vfJMJT78jhfbgL5fGr0QBikX5bCV7pmumuaBi87p2zwbw8XB2XJqGhwn5MvEJwvKoz-80Epig8tnFMIfatPXM0zrXuXVIR1KUV+andR0nio8JnowTnFlAnhMadk0xW6VA0rnS8sK+QMd-XNtjtKfRdVfqKHa7n8icdJKtdXt2bgLPiJAybulEBJXPd9wBKEAP1kLzIpM8AXqs30WEb3B6wUiXeJt17ATUA7rVbE8hK$tPWGEanvd1bffcpwr5btXXbeQCqmBFlufZlpWVfViSpplTUpWWdziRbCASAfLXEbqzQJ0Ke2u$N70SwWBhEybnt7Rww7u$tLFk0JWZdilTF3HrN4f-laIeMiatQqtHe5F6XCEJzL$JemNawdawh5rffGqOXCpxBwK9ErdJqli$lPLf$TbRnvbzFChQd7TzlbWSKEfgLfLIb9H-fili$PLaFFfcKFU8Ee1dhQVDWcX0HGWcB2z$aRlvAi7hwgfiWfnCppfmErWgLdFybLIWindwEHUEVXz-Mcp+lLdMVknBHldeIBHVWbUjlTF3KDQpLgXUtFiaAr8UplLgW6V13JKZKgOIi6VdKOHJb4Afq$NQLRWElvLRdpeFNMfmQtE8nqHJlwIgRffat4OJh4IRuIR7l4nC$IzMaIw-LTl-u2Orh8r$B4z+W9rLRaiKQRdsqRVqbE7wekUSAuhthHEElHEe1pfqhQiMF8n4lmI1il8wEdzE7Ep1nRW1n7B7laITrQWcE2d0F5idt8rnf8M8qZBxfJuIaJe2lPheU7BDH+FVLChQHR0kFXFtNXnE8cKFcGfmKFUQtHQ4zSh8TaBTrV0EIyW8enUizf7IpFqRlvR6fHhDiQuVdSHrK4t+bUdObE8KUJuAzC3nybjSISfvdt$8cEQAUWU5eEwapvcouwO5bLUiNyFEUkueKrQ4R6V8i3Ople0FbgWUb+l6XqH-LqpvNBPbbbX17Ri-felUOSbrfeE8OIHzimijh1yFHFEtQJ0HTznanL3hnrF1Pvd9d+caBpFz0DfBX4yJjRfLRQjaQFTPfMuHKl7AMOhMzoi5O6BgBzwdj7A0EbqRykukbOtvqvW1QZNCeuczrd1eIPFybsFpFBLolmlkRiBpW0cvpzA-Ks1-cXyU84qqErpuETEVzVjSb4l$RC$DcBd6bFr9Auj1X5VfHcwQyUO5VkdxA+pf0gAJz-8xcMU-jkF6apeLqKNOH4WGc9QEjwiaZ+AwwRNGtF8etzIx3EXNztXXnJTCnuF2ATUDQSuTh9dvIuAry0Wf$PjGKRbhWrhyiL6Gh86mpnXAInfWUg0MlmNHnhARqXyPizAf8OyzUAVgFpefnGREw8FCdhR5QSOmBCOHwljLnUnE8sNRlAdFQqBpLpZhL4nC8LzjNaKzFyb8l1p-TUEtFOpZnVqnhCBaE6XFFGApucLpMR8yNZUyqQn8ILbhp1l7Fctbqz0S8KneIIchwuHNHZI5X$IMyvV-UlZE0Hpsjcj6LRhjfE6pOg8z3Flc8xy4RpExK+2$PVpQKQKskXpguGyR0-PI6rLw69cwLhrXBVFUWydeI0kqhU7VkNQ5LNU3wpOWy$lObsc0awq50ZkmO8uolbh-kZNtB$7pN3BHa$u2FJREn639WHuvbxdD1nET2sVhdOPztTHFyO6bu-TQb7EzPp8xHGk4zqhZVXpIjZyqQa2E818CLUEHjr8elKVIUEuSj0pv8NhzT+nU7UIZ288v73HhoTr8u8uSF4aVa6UBPRb8lFUVkGAdFanfFyVkPku$hDNGNRQJIKE4jczacQFRlQUDXnt5a5r1ASVstKzgPQ2ChTQZVmduU-jpf7V8R3f2F8lFQ42mrajW6uf-kJBjFrdVf5LF8bkcpINneqPXTqKUi6HxU+qLQsp9UkE5rL28qXb1EeIXbxZ7u2kJnPKUcIz-Tgq4duUzHcE0u$Xi32ZpWTTQPcnFAzfTo$nmemMLBrSR4tutA48Jq4zvpelvzRcbqzAEH6d$X1AQ1P2JaC84UfI4HeL9P-LprDUqa8HvS7z3KNkGr5d3pykayJSP3saFesIfLbcmSc8h4rXekGPhf8wTE4lLaku-MEKXAFIQlduLwlEVzGOGtALzRrEKEjOZBD6udpI8fZuXKTykbkgGMVycK0kquciqbC38OLK2Pb6b0PLd6RFVawnwIQIXQXBxL-U5gpICwRKrt3JXLaQ-Wfn+FmAIPCTek7liIlL6XOHRtL8Eu$eioyg-noUl3rA+zEpLqmB+WZp+RtQHjTUx4JezTuVR6elRHw0T28j2leUinpjB4j2A6bVJVcg+2ayzA-jm2s278Hb7X8b$lel1IzQocMfaclPCzL$doFW9iycwPv6rNFj4PBWdRJPRWpRpftXtfCRraPHBkIKOFcyu4VCUekUt0ROaEWUBAWUHMy2BfXBqwkwinTHKqtpXwCARzRbCEc42+cckQnG6X-+8PcOmBxf84v1iE6E0n2a-yJKmA1Bsd8TywFRi7KKrR3ZLp3fDo0U+gBX139GxNWI1L1yKdgMkoTBwB6d$kD3-SEb1A+jZyh2DZ+w3whpEip29e5oKywWQ1bgQ7j4u4fjcKG+V+3gUZ7na4RlSbE2pJm2K6Qps2VzRN8groZpiArCjZQg3B9GtWKh0jvqiLKwfobz6FxUlhsyJkR0JgmjS0I+9CnNSo5TZU8rhzaR-GZFUl5A8BelpXnhotIupdIkv0iJfwOhnZ44yV1fh+ZjHTwlpLPVdudbz+8hL6l7LBdtJc5JEWQ3CVbbO$OA7EOJySjnf1JT5rIElcLnB7DFOW6F1yJb4JwZCLBdA4b4u+ZKcE4SskxUzyD7SNcEiFhN80oipGzG4jBLJcyGKj7lHMNXgu5PaPqPB8NQuF55$E67MC+04E2LpqZK9oL21w786SoQdk-L$8Z8OX$hTr-dBnlcrNSW8wFMiLB1+g13bTrk$E8T+od4igF55M10w4bja5+CR+-teGbJ-bjLRllbOnFnJzpTR2phVZf7vgwvxXt5DyvAUe1nUSUgDwjSvadL$bZVyUIjuXBIHlwW1ZxLI4SbcomS1SQq7JeViG$nM2hvDBhvaQpvJIzQqNVpQN$NtWjpfp7uiRjpONrS6p7S-J25eW2X5h2OlWyyCbG0qPuC18-W2cqASbgAzreozhrQBlxWUVJ8voxKceOvqibuQXxUBFoWRk$Wy0jwFThzePhPCrjhX8jjbWoxtcmCCo1g5vGmAxdq$i5bQG1UxB5JTG-+EkPPGMZhNbR8ECGhRmSARm64CthoCOqkULkuztMkbm0FTIIFlW+R8MpArlHoX65uIu3hWKInSHuCcdsXOdB+QC$CEGoI$TqIBI-DPGv+GK3y3MOOnvBx5rxjjLZWX4CAHommpXTZH6Tayk-IE5-QFvz+HeaExRpZWUNJUEQCRbkmnEdkOa8FZKneQ1ccE417-e$h1yqNT4uVa2PQNc1y36Nv1+eLqtc+AdAAjhBCP$KctFZpenBB6fplDGDAuvweRbKAaOREl42I4Q1+9JokZIoI8R128zoQCq6mGxhm2H+loNGSwIWbxptPQ-6Z4RBye0MI$IGs+w6RJTgmj9Pk+nac4HbizZ+gIn+ntv$fs5Mv-88a+8wE+9v-X5KtzroCnEhagDKjFnD7i$u9wcF4V9-IdCRIPETWE8fhnRXAcaUWavfDjXkj3XAbb+2N4xllU4xzEAuUr0eKJ0-T4PAEVikX3sIT+TqXrK$qNpLW45G87rdK6aiFl-y9tsrciEpwwVL1CPFS1pHr2mMGDkAH0snhWCbA2bnGTd83cKu4v2HK3rE$lkt8TxdySIF89eF0gmWntHtpTypVl-jf8wuNqC375Q6tTTZ4c3xDBn8ytFyciacazZFnVbZcDqhVVbOKVplKgCAIGup1EEQLH8kPRxr586Qn-Trwo5aaZjWwbsZghRvobeFTuAE-dZAljIbSte-jv7m0RSbx6oR-bPGbHqiRRHAacSSfvF5KVz2ai3L$gBAmuJHe-iKtZFBoiATFlxhWBKpt33LahwVf3wiyO0RW4ryJLw5Xkh3xhS+6Dej-8he$I0uHcXK3bKL8rml4gPeprsWnJ3SkH4ULlxWLvmjjUI2gW7f0227bdfgOjiXd5W5CwSFinlKqNRxTefiEnN1izgsxTG4gDMmA9njwFLiNct+wjL8Dl8b4y5aAf37l-0tnCwAbqX8bliwob$QIhy1pkiB4p5UBihvJR98LBHnt2o5rt7+BO8xT2rEWnFE-QwTobWTg0Co1n8DlZ4MBh1abcmfre5hFVz3iKdizen7QbzSL$gci1arBnza+EtVEgIdTE1yaCHEcO9BbM81HaHDiKl$MdTOLDctSzzI0A1S-1+aejoZifEi-W4mj1FypSAT$bC-oa0uAXd5I5rB3CaOa36UzEG0xLA3MqzzEXMV-l1BaSkO08jA4rW5TbKknL4$lrre1UHqcMH3mQQM9bf+83RujcNITH1v$n7ncZKqdrc7odAeq9$gzyMv1R6R2t$8haErm11aHDSroREfMATa3yFvkP1AJnoLhh93up8N7rTTbcTlSSmdS8p08hW4iki8R9nPwXcVhHLbJSeide4BxoNkI57Wu+sxb9hONayRAE6Ej-WhOa+HSsMfE8nfCQTuyzKAAMxhevmEyM8oT+l1Vzwh2ajif7Gs0JMaZvq7qeMStukS2ccSkoq7f00BowyjlDIhBmlrf4hCLqJd-aAwjBd9ELEHqsuItQdG-ooFHReiMmIh3Djbodz2eRIq13k5T0sENrfwFguhZTUcRvhfr8BDKd2Vwlbu1IL1u3N-hcZMEhBV9zRaTqlkS8N8VLhEULcH4i1oMOnqLOc3$E7qBrnhpEL5g-S+Vlbz1L3ce8-niB9BQ1O2mhGE8aHa7Z10E2qdPFbOtmd1ZE+fEeKbHpI13sQP78Ei$AwBibfhUhge7gqbSKnp3gzzpzAAZbd2xuv2xrgLiHlQvwLjFEWOKth7wLt85aEVqMA7FR3UHl5NEdX$L$IfDhOcmB4LHQ7eRcE674T3EF7eKRV8cpvHRwTDZjcaJE4NrrjdLRITbHSpt0F1NHnVRT45zlp4oiSEW1dFhBq0gSli3fnUanTI7k9Mss13FcfzyrqRb5eLcgb6lgek7OjlMgbb5$IFwTfNbm1zwjlqVTzH4R13q44HGzMUKV18bvx3ue+j9WS0Q0Gwh9U4wQOAm5pa2QlzjaldA$jbBcOHSvKzFVRZaUcDla3TmpWLE3cK3bE7Ejlt4W0pbDzPZ4h$$$l0Tmml8SzyOM$dhEVl6E7AB7RSI0ytl3dCHiK87Rn4lP4F7Ar7lee3$aAbghEG7-l2df6ox+mEqfaMtnRl5FUOlc34bJJwc7biU29TC1D0UJxfPNdIKSLatCnyERLIeFTn$Q7nfbiAdHnbKF2wr8xVDBn8i1d0TBi9uH3O7XJfkrJzPqwEar+0glkpSFdl3TbMRznT-ddq34zlHJmgrvmrMsqRaNLt5LvEng2g$iRls2v5RBONnFA6t3LIv$fdlSFnX1xh11Ec89P17D$5pt2idlyBvTLn60JTnnAzinO3VGEPn62-BQadTnqQmaPZxwtELnHKAbR4OZXE-hhTQ5ed5zCiDRteowzHxPFN7C8Dc4b3bN-z3R4n98qVPL7OcqtwBrky9EtiXaJXMEG8Cw2hgp2AnC1Pe94Fre-HuRX8DT+XQyN5RHFWBPeX2B9JgAjH77ybT43m8jkilG2VVUkE5$-8H1kjM3c23xgUoowqrcEI8hr$VgIHepABL9lnnGqN3qrT5vFl57pnZMrLOlBbxgRE82TqMGRkV4vhopx$saBWqZ5xgAjAd8Tt3XWgvP0FCfrTVLAL0s8ooVwqMB33FF7$Vg9rCRFkmFrz1MExH8$2BZ-Zgu8eiFD38lN-W9NDgJO3T+aMcHGc7848-nr3En8l57I8lQBTtThQ5nmAIiq8xTU1gn4Rg7LVR13I3qyzGM6EfM8bgLpP4dRZibSbEwhw4Ewn68JeGcrbzvvNEmWEe4ted34IK17ro1dEO2AFdMwGn67nrQohltZqst5zEW7-IiFZzMrWLXbqbJdmy6RnzlbLs28ljsA1w63wt$nALoMqqMzzdENVianbI1upqhhlrC5Fh0RIbcBnc3Eb8iRGXW3bb20NtRs82yDEOAbhbBth4lOGz8nPrRBhOdllQIUA2cQhAwGMMgqWAwFHbgEuFp57bUx31CuEVKWiwTpprrR$TKFU5zW4Lod8eFVBlkqNJCuRB3LCFyaA7kM8+A8pIzj+0$r7A$fqEE4PzqhT9-AaoaVjBrnge$Q$fz2ChHX8XAu7+koa0obIzivZlQ0c4C7uRnLJJDd0mPTmWtqTU8T8L4APQPpqAUq3ycRwbyPPs2hp7GBQJ031I7jUZD$vqJVgP0qSUwjx05bbw8WjWAZ3llq5JZe45XAArkWPGPnqoz7TTKi0tslHi9qZE-rstC4JArNAUAiwqboaulcOLpUyD46q$nirHcBnNay6iwuyPt4ajhwQbJLjlPCrajRtoWxKaTwtwyBbzTweDnePSLvR-rCvtximez$7ROTSiorJ5cznwbQkqAPhVvFkbWUfzTA+68tjcu-4r7kWcva7Idz8LwVrEnFdyPzzlLFVC9SDE9rpud9V88jh6kgyzV1jR34WcVGINBztjHVXt5p0wtd0SjDp75c4VuTfu1jELVmr50knLqjBRwxU5bJzTgV-A0cQLiwOFcFejkxzbn+EqlFL$pU6VbS1dazcmqeE3QXU5bVQLGbQQhVbT$dGhw22hU7QfHCPIDT1uhZwcfc5AiHjbqVrFdPZjnqzcAVlfbQ6hOwuqjAut2GQXR7pVVaxBJZzQwg4bb7lvuUAj3zhnFiu3TwmAlF678wO17x1mAtflQ3X6FjBMaTKVGB5TjTjsntZO2cHOCytPqV9TXQeZ0sIblSnIWprKfqGGvjsnpAKzfbR1TPHmIOUrw5iMabcnulu0655fjaaej-KHjrb1sm3$CP6mWALfsGPh0F7hL-lO2SqA$iFPDutQUcHL5lGRyZpub5zsE$-bupitoh4f2c8gbiPMpwJ0GA2QeGE$muPFtP$IcEC1i11hbJb4a5VdRITunBP2PlyGR32DlobNV+51GVwc4QIAlVVtC1bZjpVJHqdL2z1q0QsAJlsdWnMlqPOIsNB4LZ73pzsHQV-94H0M75lFkEq5AB80l+pewZ1BHtZdB1QBJhkVq9SwrI1yE022IVfUIMQM5h0vyyNKAvWzB3VIp8dQGScccpu-1wki1Mb-dVzlL0wRgNATPrmKPLVzyyQqSwLERvhl4ZeNxh5H3KQF+$j1QL+vVeqPRFSyBQW432C$mA0VI1uF+G7OIxFCRqgQ7Uapm47yGT2LQVU4CzqvtbbkZzx89pcuNZ7q$7Vb+P7e+atufPxw5STpfM7x1djjNG+wprt$oZdysNtUm-d8Meukc+Q0+ZDmttUuky0NVSvpUj5+VgyeNt+wjIqhtukyPzb+ZpJho9qhZ6qJSBkBWjWGJZ1QqAXpOIxyr-tMSVSCpLqjAJlydNTjKFfMt8J4k3uL+gdHANK6ejyLFjUUEzy9TFlbuo+dzHXyBJWcy-b+cToA5su9Z6whrMyJ8OnE4qxQzjCk+Mm7umrOECScPgfIzd5kJVwV6ks-$Uu96Cr9j7g6ihz0Mr6N$jDVwKjQ08eAAZB6dBCO+VtZpuj+jkKj55+WZVVWRwG6jvoybZJfU+cyLZyKuSykul+UVWOxIE4U1NPj+d0ZP$VPyXlASiVCMm10syZVEZ1kwS5yGIcdfzZ83dGt0VMc$NQ+RkmSPfuNTHfim5Q9GIMCVKRV4Zrb3K5kCuecfkSZQw6v73s2SuEnWQJ6ydG+klXdZSQ-FTiJ9MjVDm65coxuu82IcETTcL2dMSUlzr5scxccvBz1PSLa525QixEIU7UX+WBbi88pEXidTwJ26NUg0dZ2XllAHoyO3E0HnO$9jThinlGImjVQytB2z3nZSIFwn0AzdzWncw1TQIxTXJlbELo5Wq8FWt8QbbMIoi3NxTO21GGrSZZKl5B$fTeNJ8ajzNSsfh6llvBNdle-T1Vz3RnnnI2I9DB$EPc$V3oSBH5kvAn2eD3cbq8cgxv8Sl4TX0P3kWlGlG$X1nwlHyagNT6I3dOF8c34a632cnn8AL4l8wnfeJFdLNxccn20lpT7NQv-qI2lRJwnbBaRJxzltIFMnwHbmk78ew4cd8nSl6TzGl9ndncInn8MzlTnwnnn7Fho5$B7T+3483QfljnisNlMTWwQ7nzp4ncTAnsVl34c1kInnNe3gpiJFfeULAbt3SXBanhnlw8TihS-dcI4yigi3nxkknInAEdwKht3gXajTU2ALnDJ4oddHbCwhzu9g-LAlnwWeenns48IKf7T+k8kbdl8nnlQ42n7oaSKu3TLAv$gEhcl1iIT6nh4NEhbwRdqhThq$t$ETI1w73G5SJqc1ZAZpEv1wp4ovIq$GA0-OpSJlsi-OTwE4Thd4Sgnro91qwDrb20HUQd4MtFpDh2IjbRLJBO8Th1C3DCpIgnILs1eDSnSqflTPsR97Mdz8grxfxyETiDjeImuDnnGThd3I4QrFMRXwlTlwAhNnlyiGbVLAnwhAP83ninfEnwZyIN8rQHMq4NfSx+L8zThIV50p7kqNnzbXzSh9fc28k47B3T8TmbF1EIl2pUnreq8I8QE6qW-ysLq8gRFyIfBBSjLFJRFEplrlunbT34nndapM8RSJqPuJL+wNsZCvDcDJySUe0nzBec4F8D2unxsK9Wa4FQal-AOs3cjDNcnrobjwTNQ8hwDuTnoXHJ2bV3TD+tbofvh+TlDQrn4noXh4zayc-te38uTislTALIFThlfOs$In3sii8wlpn6nkQonoHefQonisVVaQnDbQlwnsnI99alTdmgxAKn80pHRhQwetwyT-z34igusTvpl$q8xLzmFvFNrmTicMC1UHHUwNXwE1kwAjl9lUlyHETvwq7nn89X31boHH7rTn5nT4inSLnZrubRnHtX42d8T8wlEnVnmndwITlFlz59QzbR3dZnhljwjnh8dwA8l5lvnDna3a9ln87nNbrTA3gbE28-nmn9TowzGAJnynundngwaL801jnLLun4bzkI4nhbc3vnInapAnIQl3TqwQwghANnTlFIqwSnBTQwSblvnNT4bE3lv8y1aM21fAEsIkSaw5nL31FiWALlBwdn9QRTavH7eP-mT0lp39wQLgpdge8e03pbh4IViSIznN3Xbx2SGd$ItewHnEhGgkdzahnlwsQH5gGdMIXlFnlyx4MjH3n-ntngvvwILn8nwEETayEbIynK3itTKHwl3lsH9nTTE3gTdEnL3VnhA42IJAl8i0jnhnQwEgHclVlCnanq3qbE48gl2a8WHw4d85IS0eLgnowEEiK1sc+h9Uu4rc8VpenpTNTR3IAAcOFyywjAHr6y5T8hnJnDnnTa-ia8cljnAnj5In8zaUnvqnWDrLWtiSQWtqEWBpL0tOodnJnQU05B0m97VlmtF3Rrznnz8gyH27TmnSMS0KoRJKzjsnATGZMdnInXlunaZIzCUypu-WTyvT8iUOI2n+9KFbD0WSEV6sMR+hsDbQoJOg$6RGF9bTAgEiE2a0Jc23d58elPItwfaaW5rljeLt9BrpAjQX13nJnhnPzpnA7GBw13ejTw-jmLob3su9ZTf6+xG$bn4SmjVQs7QQGsPUMi9WF9JNtSEng$E1uF2bdQ+-HRnDjTc4z5r8rOt$JdRoEZ6fT-OKngbgd8st1lTnnnDRLTLIb1NnITgndnITIn3inKR9Qdn8andnJnnn4Mr45lShvAohtStnI$PtnFazn8T8wlhl2awTxJDJh0+dienVZsQsDnpGgPXWj5RfX4QASQwl$Dddp6U55JAPcuwEh3I-In8iyRN1ZfVLWtvl$ddu2EfhEsig+6XquCR0hwptGJJHSMOjefsZtv+PP6uT0ufKsxSUAAt$LSeDm$vp$b1jwQSTw-al38kljw1eFwq5h2VvnaML3ALlE5e0fn1ut3z3zGi4lv1mnGJCnavT5In3snFm6ycTEFCxOmt55QwlENnlanaRU+GdwMQ1JbkdTQSMdZTnxkQeiTvntwlTdnejn33ew7OnhI2Ib1I27T43AcdnMRljwaaQw4llllHT7nylTwalt9znBITehj3nwdE8i03Tzmek2Xh58uTtX+TAgkqhP+TnaMef5azQNF8uTAnul$cnLIzIn3LnEgl3RMvnT5TrntnQ7kLEZIyl+nwTg3ETnalHTLLhT$1$Vl1nfewqzam8zwlvnTejnMwAElbJv8enLL7nEEAaAhl0kXKEabHp$mHCdlenVLSwX$NT5blGbznRH9TIDBzk-tln8a-FmeCw6ENpSZdKhxKCFyJKulGpXyNb+hlqcmnh8oHMT8cl+nkTIJ23nalJnInDUCr2gv8Jc+3u-Urz-05TlwkhupWGLDvv5nG0Wqew3s4LdJIuezK6TdJX1xugLnc5sIUepTAcnJPjwMwggSTELmMBGiLTRnygNFG$OeK7UCwdnAP8rgLuanRnnwXS8c1piIL7epb-5+Jn-nenaToHF2vVl0wsn1LgwshIn3GiTWFBfgxL5yo0K3M9L6hWPSDAKnErh4iMSJ8knMLfEELBaiq+hlFT-I9dp5meeEndTwTgnzGi3ejlNnI3AnAyEuo91UiIUKnzwEpn9oHqUn7agBNb8Vnyjyn4R2hLrmlP$i2$-zZgQJm1ycn8$-1KpMTlmtd3CT883hnsehlenKmWagF9EIRlTaS+L8n2i1G1kLNzIeeqwhFndl2ahwj5AOiHruebE9$UFqhd7Ib1wEETIc6nn4I8nVT0Tg0XwEwT9lXqZIXBXlM-vclstitsAMkx8vlPeKwK-5waXdv1P+ucKK7kQl1IRn6naaP7DhnTyiblnehIb-pl9TD7z4sLl3RFd5lUnhnAL34zbI5ld0aTpccJp2Eu4c16i$$+T88EanQoznWTRno3ISnJnxrFqOeK8D4vMoqi8qpV4l81v-n4nUy4bquoHmGlaTjnggSgEpl5W8wF3m8EeM2lTnLcF3taShIFIQnPTtnn3Sgu5lcnmThngTkcnhnnlVETlDINGklunZTlTo3EgIA6K4vTo38T8VnFnNwhno3dal3nal+njnlTn2n8mEnpT7ntRfbIwlTny3vTj3A3dM5Cn4n5TQwETdOlvegOnTaTRFdoKQlaTznzTqu4o3wljnnTcanuZZFXlFNxb1LghiaIb3BnNTtRBai28fpWnGJTwo6r3ndnM--N03+g+cI4grn5TgnzbA8nSnVnefnwoHUZUFnEnhnlTo555ri0mtZTa3AaEqIWb-nkTihSgA8In1iTGJOnzAnElTlzPewPTf2XSlHesX2LQwib8blanvf5TlTnhAclBkF1Eq4n49IFl7n-nUXUnEHrcnhlnq00kWz2k78ol4TF3qnETd2lHey6H3Py1TdMT3JFnSuKad3n4lACPJInQrGhInIent6Suf5SgAP8ny4nlTond3EP5g3mT3mVTSlMPaLlmtkTaTdQAcnwl8wvnj5IJ83lHejwZThUeTlvnFlaTcTh8dcnuvRGBoH3aZD3-qnCnubvTih4FlLD$VAnaavTd3Eq8knEnOEinzG8cIbJK31ndnSG9JIW0Aa1nhG-lncIXbcn1ngngVsPnFl8LfERnnTdtScnRcjng3dQnxg9Z15lLa-ial0xfesnwJwJdtDMlu08wAbqFdQlnmHeunI3QwavM5IgnyqlT$c88lkndlXP5n72MTdOnCl4T-C8mkcISnav5nqw7analOvDCFFzXf5REI58axIThh$ciQ9580bsn9Q$j63iUxtx5C9PwuwBWzsUvzCjPHu6j9OnSvHCMwAukZLf-loKn6P6uDZ-dDIx1CL6evjSWpDyl3TVTggA3AcIpvj6InlD788-TEnWnT$J2IZLo8SxR32Llnn3nQ8flyH+ndnRFd7lTlgEH3g3dJellrnXvIntwlQEuvol-2OmZ3a5dJlFndnF38N2GAw7el-2+X992TlG$X066xXZ8qX72-hl565T1tOkfblEn-nXLgTvlWvliem4mOOM6BLEs8v1ohOr$ZRWFspvAo7OCn80XcDMxSo1no3S$9O829snsoBO-K9P5LncnNoKiXt96v-x9oTOL$fRDE97xQn3C9$L0sZOzvK3VOG3g0fUDQxmo0NbTntf4-HvKoH6pKst-Z-XCioNTtK6TA5DGxoo6O6KKni-9lxW6aPJqBAsQ9We+n4PGqkbI28RxFCebjq9Ufc8txgXA6kN2jLyDUxzCNTAEia8yx1iaTGmj3iSI-v1nuCvTNy1aAWmGnAwqwdZkx2+vQejnlTIi6TErn6RNnVTlbnaAcImoCPwE3Jnhl3navmTSAxSix5o10xtR9fQ54tfbIyHpnp7lPB9sK570S3xMTwlTiBAElCx8TALl85o3hndT4nSvTaiK7enF1FOBLdali-alS3q4Pj2ifwI6GwnMXWsL5Axxt0TXCuWeBHLbnehinIQnUgz2f4nMoJFM$TefEDB69MDe8pVnkNOT8onwTSg8fht34F8ibvTn3lxFzn8rnQvznldf0GMwaPWEn1LgLlDGVTSh8inVT8-8ggZTzvWpn9aJFI$T1NJxrjkb9OxLmkVoVbIWbgwdPfiG4ndcIWbITAktwn+6TD0LvQuH3lTnzna-8Ch1nA38q4hndcl0v6$bNepl5nETlm9ewRdn8nMwI3dQhtnA3nTTzXbALTTgnnTnbT6xdnnCnhPeTnhahTInlTnAnnwnbnnPUklanInaeWqgX$ieXD9JxexNB9wJ0F8QTJLqbAFbOiCHerngXr3nhntbay8QTbOrvW9GGJHihdn8nSyWGngwEzeEnnFnAWLnHPJdX1T8Cdcn2GTsJFWfn6mn48tnn6rMLznyoOTnfvH3lM0GnBT3wnEngnShIAGgwqyL4nNTitW7nKTn$LwnlnodWdGaaShQULFql8p2v2LdcnhnrKzHhIGan5c3Hv2La-8OkcTlMfATaIOhnyyHbzEny9NzdL8kn5mThlpnMwIniWGdnnLnEl4xTT8enewdcIHyN6+glnaVNU9X$TtbSgW6vaoUIWanmOJl8HGCbEwArnHbI0nDGVOH3lEnXrzeI3ayn$RXAE9ncT8NvvTI2MQTT$Vb8tnlTRElanOwyLlanqwR$TTl9OdxBHTGHaxLSlOhlyfGTVTRV8cnIbiTnanF3SsfXGVT8Tnjvv6Oi8AT5TERaDGnNITIHnNXe9XRnHPJRW7n6XGeIslOA47Tweehdihan554tLlJnTavr$GgCuKXf9nCFNfpvRCVqXr9jC0qWQvgOO0Lg9eO0VMg9WOHXLa9iCTWWgvqOHWWcniOUWLwnoOOWLlv3PGiXevmuUiX1vtnqAWll8POTlRveh8ULVeIFdOWtvHxTjXt90PuOfsvefa5ndneER6WLTuRzEnbnBTjPWHTHbaFlq9xNHLAGT2doHT3eLPFfW7nfoOanFcaalzrfvhTgb8ATb3A3Iynjwcq8QTF34llRbbn$T8-enXbylcnPbSbIgnmlHQlcneuHHWnaWuF3lek+6V6tznhnnb8inKTE3I8naaoUWAGkTRQX1lINVvLzv1ngMLhnKLE3IkGQPuuRcne3NHd9Tmnl7EhnZNu$WEnVTlgLdnAqrQWiTG3nRfrvpJqhlHTI3orzo9HbgArUehCrvfenNTgrLXnHNC6WLa7ndOtGhF3lVnLn3X0Fl7T2Ln2lUnBPHQnqlInAcl1TFqSbWzL6MFiNIeaIT1WT1ZA4gW8liuFkAP3AnRpdonhnA38AvhnSbl8vPFdAf-GxMGhnOH+nvEIRnxa$TEKGMw8-lcn+T4itAGInlAlFnVTinlVeGHglzkve373IWbwsTOftnVLoxXP9yndc8T9rKSglQgRiTCWcnfEoDLxGVTaPlG3Hr+hnqG1iOGeanI9+bl3v5nShnXn8CC6WHy+DHan4njnE1fhlIa788enSAEeEx9aDOb8tnRib-lcnhnaZrxlJm+bnbnq37BE5GgwlTIflIhyGT2waaitLZGTEmhlwn5niQW28QN+hn5HyiHBlJn7E3Zecnu$l9Xbklfog7rwCuF3I$T+6e7XEeXuH3IZ9MoHQngn8Duelwn+TgeIyn4nIJ8eneuM2dGFyEtVnmGoOGgABwxa7bdr1dnoQLlvVL8zr1nlndJrIeQm+lL8vb34wtO-b3nalkckT4ihIvKF$JIZ9TEN0ronVXUTAJ3ZTIIXyndn83IQn70ulAGn933w8t8cUG9f+vInzbI7v8CM7WwnKLE6Wyvj31tXzw+n4MXTef8Ob8EeH6rT8X1cXr3IVG3iOVhNLHOUc8Vnn1r+Am9lL8PLNHdnquRfn8wmrdFeihzzTbn6MrT8ElehqWqkTMwocIehQWdBfG1jnzUdkTKbmh86GRWupLLnVTREnq9NTl1IXTwmuJA0TBuHLnb12FPTI$TehgE8fpPRVbIn3GpnwlBwkbaTify$LtvfuTCmHQnbn9QixXo1nccAALvLc$PQtnyob-IWGF3RFlUnF3Shl-ve5A3nc1a9EUW9kHoTLn9TvTSLdSGGJMwdybvTATnM9DuTa8G1sIbBi41uExqEwniE1Tl51MyqpLhn4JNvWCGkTShILrxa3CLXnhNObl3vw25LlGn+pSlWpn3seTIb3BLi3i8pWFjdlfnsuesXRGWFyC1Un6Et+f+vXPH6fXv96OZfZl16CILOvE6GmfWvj6MmW6vwEnsWovq6HsXBlO6+bIxvX$isLn9+nmPW6eboGIWe1coHW8w9lnoIfa9ef4Mfb9fo0MXh98-uMW7n9ob$ftvRobJp6vPT$n8c92CuqXp9rCFKLIvnTRV8ibfEoonDe83yalgBr4dWrtnv5jWdVn1n888onIT8SE3J9x+h8ATSK0FlJ9KAGhIyazDFoIxGoaIZXSHqw8wEE1a94RW-TuT88lF1sxM9Wv3mueTn210seTI21257tLgvcbI2finTviKMlvgnl7ECem5mbIWbC+EynLncT4Gf99+PMJlHT9Qn28HHSNVHWMvJoTD0fneJN5ern1navTMlundvEPe$X+VlfnSLtALLnJPMGWCvchRVI8yALhuizB9PeTlFnOcNRAzn8ndcnbFb3qtLgnpiVeXbvQ4jeLLvkTiefQTliF1Xe1Qny1LcvjiHEd2vsibBX4vnXVjWlktDi3IwnT25SdM1L2jQf$1t3SSAGnJ25FIK1Wib0fknp2Q+iu1H2h5IN11nq+iO9l2NFIi1gTdmd32qFjmiehKOOmi+4H5csEC1N2taiGnP2$sEreD2hId+4ThQIiQnL4NfflGXiMIi1lHboIdaBVCrMApnQ4$nIn3GiUtLjGPgghljBnLjfnTT7nAxQfnlndUf6GjnIn81nmL5hHVe-uJQeFnKwoHrinGhx6e7neuOGt1k8nSh8Vnq4I2rv3rmbyIQnGJO3IpBIndAWoGomSu8qfjnPxliRI0FUEylIn4$WbvCcj3NynJoexhsa2ah-8knInaNA0lvnlFAtlg3yOtH9WTzEIUBVNHVnJ1tbR-dfnB182dO1D8haUekwa7nUrR-zmheVn7KuxfVGU7nsNV1hTqwFWwco+hIJ57nAPijvTOJnTdnNTzp7QTamRE8HGyTj6XPw2CbVE$9oL5MXtJSndSEFn-u0aEhnQsodnanGJr-ntlQP+3E4n2Lnhnb1jnSW739L5oaOsLGpI2MccAzcDhNlMN0E892b3IJIWb6W04Fdvn6uh811P4ccH01kTa-nanH3nT8x1vTiiQE0Rn7HnCnno+blXBKMuO7fpx8tFlznNTzbn5G021BfVn+pd38PkRnoBWLnP-QWL$vInRyXPGe1zwnxvdnnRlHTKhNHXwRbQzsXJ3hnaqApvHb4LdendoFkQfp36ORXQnef8TIG0kN+h8awnDCHehl0qU38gRHncfNWb2fHcnWG4OHHXuGt3ddHgvtb8vtUnb3q9W8BMwze8IRQ6FULERBE53HFRAE13Oc1gII3U2R$E3wOWb$8cGdJRqctEn5RoXHcdAwo8PwUqhSz5aO20LrtaUVT9TSEAHT5r3bO$1prQbOVRULjbFfRuPObFRy1uUW8IeRr7dAzBpryL8yRZryNlkRcJSWdPGzzypis9OaminxRxaQcTdnTb5ziCG7ndzAanEbjzEpemnizAEn8b5pizeQPOnlX9Am0GUjndo+GwM9EOephwnUIECfSBlLqAfAw36+gI0RCOUOddnwEa5lGnZDCQ7h0I3aynmGMWJTA-FehonnG1SOFlUA0ef8yFqptQhvrtRUPUa8OeHPJZEc3ehatddnL3orE8vEXbAifTCiH9X4eGH4TiL7hTaJd40IniEEE0ZTaxf+4BaQFUzt6UrQWBwi81BW30o83v8onI3qWX00ZV$REJg0bqHI-nbhQjfKGRn8-nanlf4LlvRETRcTiGe-Q7XncdnyHUznnTz2wBbohPkiplTL3vnMe5zggioRLLyQX$VJLQbIKerL5GduefLmXXsbkL$EdT19LhviieZHvvEwtZLNvi6eIoF9AC1uLvuLxea2xdfr1CLx9dQTZ25lAanbEvldUvcEPmWMl5Emuza1pEQeib1BP0F8-G6T$HWWGvTnyWJlxadyLjGjNMyWZG6ibkLgnKNVkWFnXN0kfN4ZPb1qRaVa+bdNvoFh1lVlVTlbdon4VmRartlTPmXvTRTyhihLUTmhEqemTvBQglKTQLiGl8nRLivlga$sX9lDbhdiBv8xOT8elL3QmACTipIGiyn533FARllkxGnbndzjrF2GgzPFA308naci9lR3$TlUlNTlcincZ3yMAZlaan2dgagwabEI1327SAM1635FF5RV7$Sim2H73+EWRv73Tlu1$Q5QL4nuQcqiPaOQjcnmTcTl48tnP3okrAtmTdfLMLKmCuqVniuGEltBgUFGWrnwEqxhdnwEolEb0VTlQniRzhy38gBVNVef33S3dKfATciuBXvBCJxXd$BHpQGlynGT1of5aNUbvMo1PWSQNAFDgQ2KCTWTlT8vyHfyNL2GxXbc1Tvqhcv8ibiElpWan7L7GAqG2F$TnDk1NuxXI99VN4OPl5nq1W2nONrBEu9QNMTlq9liUJULnkfxWWjnMEtkern+2y3nqW6TjcF5vnuEvIanATPpljnfubRfenSQh-8G18nRjW7T3XVwALnWTzbnofHu+VXWb+T8-Ib9$cmg8Al55okTB7kT8lWahiFokT4BGkQWEf1XxuUfkR-Jy2b4aI3Q2fAE-8$VQev7j+DW29nh33lBwLGvJfXaSNuwFqRqAO3nm0BHhwnDeI9efL+evnIGHPlbrj6XF1TNJln9vqwgelBwj3aGUTnVT8GE8nMPHHWVGypyQI8B5Q$PhFn7nITB49g7EDKv1TOGRWHwNUJ9lGnH33fnpBWVjOEwe6UUkFznZQh7rzAtOUVXA9lnAT8Vn7TREIeGCPObIoTVcPnRangRF9E3HIKOTIcla+r3IHtDagVWHTAT7TIbzOz3kL4nip8fO1GH3lT8kn5TiaLARKJ1TI3lSiO1X4vInAPdknfdhvTe07TjOAjgNx0knAvay7-npvkI4oLznhThci0wPThiHGb8TlLn1GQoT2lLnZ4zqEib5nRmEq5cztFnSnfu+ZHWe1ur17Xa4nqhlFnHi0aEqWQFTwlkcwgjIlUndF7GU1GITAandn7Tj$f-Aj20Vl4tb3lwEhnICFxXv1tbave41RycbnblK9PVOklhxb3isWVLqe8ATjsblifTehnMXb3MwEgfinH3lsLgn62aDEakkT88nTTLyg8AORXEzEI8noie4H7TON0FITRtw3h8fpM0bc7FvqchjXKFHJQeXd0rKzWNHn7ln0HiehhAAicnZ4mPlTvKv7viQT1n8qnJekTSRd2leiIPivl7TzjLqpNEIWdyHxJ$xHRlzhj5aZkKcNXfknnTdalnvi9ynXX4SOVBd97v0rTnEnRnE-HWvtNJNAAAhlt2yQGcNC5dLGLRHLnKlkTRFIb3znzUF7W-h0rFdn1e7hcsgzz5qqoRznRWn1T+e$nIkAVCFLcQ12fheWjnXESdWv3uln6nARyMH38uTmNH3IsgKqTvNcyjICyhDFOqCHepnUnzAW-GzaSTl7n3u0ELeyJqMEXMgFngeI1y33aGtrgHUeTnPAtnoRNbk7KGMhHnRBTwM8n-ST2lNg+TnSin3KmucXn3ETzJWEnZSr4uWg7cin81kiaiFXugf8+FTbk-SUcLgnj3nLnUgb7d2ukFrt1MtT91nzHPwk1ttHPtUGtxHy1k1t5xQUU+KJanjUjt1anZUgt5FIZUp3akjwkqtykP4Gwha2Xcgt3d3ITw9QnJEEnOFlkN$TfEdwnanTtc4W1gatyzfBgZMUzW1UfUbFf-GPxVblIHJuHrWdnKqF-QNUVMV2f4yQ4t3n2R6UCbWhnmngvP3GUWQzLzy-qFafdd2u+DTbTnTEwIpy7L7PEkyLnzkIxUOMUTIvgj280EmgP0QG85yynndcIgcquwXpnaKUlPrG4ANUlwjJu0SLzGfnlaPeGRn$nnvvR4hylUnfbgMXAF2NVqeanNKbiEuGNT4UH2nZnghPclcT4alJbwEdOhgnGJH4A6eTaNXfenyiMnILlDGmdXmFvnq4XKwXEquRVT9WUAlAR2XO-yHlAnR5ioApntdW9tOOF-FXGRDCTypGT5cLdakIn4MtJ3InoGeWnXEAWIxlRvPXA0kQPVqThlilyL8znfEI7XgnMw$Z3RyJNJHUUA+$e38O13XC-jWvZTosWHTvvnwIyn5NOyWpnA9QxNJyv0U3lbl7d44jm-5MiTI6dDaianUgWDO3I8ncXuMAbjSMVpLnGi07wLEnoiekQQTyndwn4nhAv1jHghjU1c6UMTSGQynIWm4LIvgNb9INHunqDhLnMaSGhbTCLc5nujOBG9f$lcnn+jpnIy4efXjE8HeiHn$B+GNw9+PVw8Njan8rnbTCNV-Pbn4hIWI4G7MrfcvgK$FBXensIVkhEnQNOpL8GRAxkNdgAW5dy3jTM+hfQycZNAQoUZpV6fCUMwg9y+jMLRejgyaaIGP2gT4jKH2nSKrvcTj3Z7zfMjLSjn8VysWmIP$g$WPIPZH8SyLnxUIan2WCjNqVkeg2poHRjU0it+hIsjx$CMc3jeSmlj9nSSV$cBUUCzhELrIqHOa7ntrlWnEnwhapL7Zan4aEp1GuUn8pZATnananKTdqjUHCnAqWBw8noW8pZKqu-LbZXqFX7FnAngXIhZPRxfP5ZbSNKPcjxTzjtwj7TRVnbTesGTnDnqV5MWLn+T8TNnnzlTv17a8bqXn1dgUqc83nzlMAIHnOlTnnfanAZtoyojHuN2HiZFzQIy6ZJSQMyueuij-dfeTiPyzwm$oT22Lm7OhEnjWrPcCnGmmO8ol9m5Fn1dxEFZMeZgEiPc57nbgbQtHc8MpM$TsVdLIOHI3nhn7nL+bZIjgL+OnnSn5WH-LJTSKJphSnS+F2IakUcdePydXjQbf2gTrjfPdbCqO3lanDjPWQFjwuMKjwGs+jAtwjZT3CH0guW+fa8pOpjNXczp1H9QDaiWbDlr9jnzRnPZsLz2l4nexGT81dKviuzQGrXGTlRF65TFnbdnb8TQcFacS7$cEzl+9KuEc4ghnbdtdEFTCnb3iTlBwbAOblN4KVq8l5dtbnTlSwWJnahph04vcXbnX-EkqHLE1U4TcS+4SwnbdZaR4e2npsC3e2nmIj0nbd8-+mnIwrhG577TxVEgQknhnSwlUyzlHeemnbgRyQ8SpstLXQ3endCyJyXAO1XJnvSPCjlUxIUvjMjhtNhf8ZsMekdfhGUTDbJwzaoLlTn+aah61bRMyhZdSUMvh6dS0MNhkySyGnEhCn3W04hfTq4IVIaEnniB+pPMhzIenPMtXtBhgboFnfTi2AL6lSb$vE6lSwrdEZ2nE$Q2nfTJ$vEkOpT$tD8RSc$xE2mngbdnWvSV$tXNtShIrIt7nXM1aleSunAL6Sph$vhlvS1Mmc2fTR3qc61bZ$$LZTnq$jXTsc8SG$QVwmZcbI$TMLAjhCnNToHMHnpcSbZ4nfQxHMf1cnqhntUynltnkdJ0x5MshaIF-QgkA288IWb3Jq0hSySRTDbhnlKjXR9FCoaz8JHOjUMhTLp3lwlWUUKT28UyJa5Flwnznla8kkwEAMtmVingku5ntSSw8+vunS-6en8TSw8f7XK33n5nhngFWCSI8g8ZgkhnAMNTaLqcxthkp3E38a+Eqv-6eninAaTQcdJnQWTgCtC8Z7nF3lwndnAK3n35nnnz$8njnl760gv-Vwr2++TRnlc+SqvFXNVMqxNQgkJTchQpUwTqly4+8TlpZHnMqcwn5+eeGFX5nMqQwlr+3M7z27nhu1t8kgcuxz60gLtvqQ7+f$T2n5+fEgVk4+iR+Vkf+f$ephV+$q$VkVyMqc3nd+WuvFW7nju1VkkniaiQZ7+55SV2V3suQwnEnhucXNKHcuh1n5+f$G-Xk+q4ofZwk7ucQkk+VuvFfuTFKOV2H+wMFHtgnvutQk1+IcaH60gWTofk0+su5E8t+L+U7ZLnsujUQ$-O2lp2J+cu5HZ4+hnoH6W+-qy82W3T7o8ZJgLq5lnS+ZzGIpnwLqtoN5+9J$5hkdGxn-PgZuhIzqUHCngFX7SiZvMcv0iUUefuTo$+TIsg3Sh4XTj++hxPMjFnRdj3Z3+v5IGnOToRQQTJ3o4R7nPMhtnK8cTSw8XSV+rZNPyVBumhmyGJoiPoyuZGuhxyrsj9c4ZijQwIa9oZyQnK+kT8vPJnS+vbZTZxSv$Q$ggMhFXsn8gysdgnowonLjgF+C+hQHFM1ePC+VMGWrcLRnaEXEn4nd8LegOnzb2TZ3iPNju+AEAjQN+sMC1PpGruF-HUjqEhdXD9C+qH82lgNFki006maBEEbcTo7Eqlqw4DHnyj3iJIKTn$T2861q-qfLATzXukPztommjLUgC6JKAUnkT4lnlgGuJhPQn38q3djLQTaoFeeFzdOWolyn3eXgZ7nIuer03T3S$j113IFnyy9y14VBtnL$6FJRUurwHHGXESXfKG62j4Zcleh8UA1G2FPsHgapnxwEg3mQQEA096ehc7c4gOFBQl1I9b0fuTzEQHftn9LAgffG1iJwL2vtbqaApneOThn3JgUCzWa16UIndL1AwACL7bPySREG06da8AznFDuaikGphxBdylDiFeiI1fa33I$T9a7tiJ31NGHHO9lir-l0liFSlfHvPdh7ToyFNFCWa19l7wf331eTTnTTGH8rIxlZFmgl2mCbnv84mVNCKdJmVTgBZcnOimB67vxi7kQ8mDxHedrm7QSk7QTFOynI7mznqR2Sn-O7-AzmzOQONsbdONTFFnkOyL8fmFho02pg8x+x8QTROh08ft8wyFPEeia8gA$37nIJyTWrOGMNlh63nwIWAGT7NUoGeE03Kf09JH5dtn0PG0c4niNJWijePdQOiI1peQUjwna23BXWbeEbveLvp3dcE918CFTnzvC+dML+0yo$yLwnGoPnRfmmQh5nznfO7kcWGj3zA6X+tbSLyKGnwAtX6mVpQTAzmobneduTDT73nHW3-SPfM0ilxzHz3vf4wWjAukge8ItGXJtOon7n8GX4sGJ0aEbSSNH2Vsvew8TlpnJFdqXxlsuH9WJyCljKUwngngen+1GVyQnWn+n$rh-GmTSUXyAfNFGjq9ALQE8ATp3ngilkjNbP8knGJucloGkNMtfAlh2j2ALGPrtaMyB6-jBZDA94q6tJ9qPGLlXAq2$bPrhIT8KUjnhsrrnFl8X0RQuk07afyM+9tVe2pSIAUpWb4bVS2W7nnZhl2cjdMc$P8gI+O1jpGMAhWtzGjnqbfzAjQNCLARyn4TyuTMPJHHEeO24pHMf+TA38bUwmOvdpGqENVPyn9JFc3TTxNekXRggEhGUhn2FyTE+1vTEw8QTeDVGl-elT3KdGAlzlTIEWZvAcPVGaaa5ibJBziUdxAVL8ZEW0+Gt5LengEtFIWvkxxU2a1ipRFlEwvnqgXOAi6UTlWvNTzw8fpqa5lW7nzaSWdDkc95$fBAgwAhF4nSIOCkLWdnIJIlvNTdx2D+mn87cqstbECZAT$QQCkinqmeCZ4t8TIC2FnvD3xklggi3Bi4gg9$nlOs2dEvAPswgNx25ZID18PosuD7-ICsoPlqU2noDPDkTrZ1jKMnIKTzng$REnXmLXWbKczcXW8n6yUaIUyICUbIdnB5P$TknDUWLIln-pPEI+6JPtBG6xVb8cIHoM3oj1sT3wgsvKns-UJIMwaC6JyPnB+E-IxnK928I3TpagIteDva4OscTKa4Ps-TKxZ2A7TwELVIqDyD2xsyTKb4ZwvTLngdIBT9ng3IWTKn4SljT6s2kITv7T4gI$wcL4GIGnDTgTTiTp3ovIWnK6X9IZnwa82Iw3LwSeIunBdXJIOnpCZusDnZCk8INxuC6Xsz3kaoisFT9VftI5TXuqPsv0uFo6s932DkAIfT-cSxskTX38fInnwhg5a1Tf0LHIS3sngyI-nL2gjaK3Dho5JMTZT4LINTs24TvOTf349IAnZ3glImnpES4IGJrw41Ic3-C65IJwwFoKI73-J4ueV3kJgOsWDjJ4XIrTDJgosrKE54QIOD5FWOICDycgPI3ns5SjI84QhS3IATXn4SIrnf-gbIXwk2gxIuTZ2gEIxw62g9ITw-8gMIb398oeIFwWE45I23K4g-IfDP8g5c8wwhlqIbT2x27IVaXagPskwwbSXIpTL5SVIvapcoOIBaDbgFManX5ojItTw-42M$w674Ptq3LpghIKTZ-gJMo3ZLSFIOa28oII339BQTMLwW8S8M2aXEgwMHD1z4aM4bkFouI2TkrgzMdapV4iIga9V4OIlafcoDsgbWcofMAaD5ocMs3pQSSItbk-obI$aZQ4JMXTX-gsIsbL84lI$bp8SMIxaB4oKsTbs44wMbb64g9Mrw-agaMe2zJSpMd3-dotIGw6xkVMEh2cgQI0wKdoUIjw6VSTIrhLQoRM5nsh4CIfhwpgtMUbB2oxINaDH4nMnwLf4MIqbfy43MnbZ84BIdemfgRIsh-FSaMKh9F4NINh2V4WIOh9dgVIohDroxsybXd4jItawHo0R7h6coMMKwXhoHM4L92oyMGh23gqMD36L4uMKbD3ouMDaBySNMabDE49MkDxGgSMpapk4OM8b9kghMpT--F5nPnRakCjDKVbWw-mI0fj+HkSywWJn9ihGZFjlSQGZeUznEa6Tm2KVLnvnPT8mhwpR$7TL3nFM5MPmsK$epfLjCqTvy5BeAvwnnmli5GZEmAEwrfgkFZmdPkg$ndclqTaaE-tlTy5doj6SEqmcWR3vKuUng+Bs0j8ZgR$TdZSnt$OW8Ewxq1cLoyI3lMtEnynROtjgA$JalgkynAi8FSCnRFiBstxGTljnASeangncW1tnQwynqInagJ9j5yv$U$0jlUguttOtK31nScLbnHKGPt6SI8gelZUITz5LS3ftuaAtwFmVETCnqIVuXbnVLgNplhUSF28weynn281kMKOgQugxF6FWckxF-aIb3ccL-Z1$sB+nMoSguc-2ugT2xFXSUJK3fQuTwTla8h3trAd8OgfnAT8v$f$OSndnxm3-WMZEq5antU2sC5Qpl0$MUlgkHKGqhtgNeGFWwnR$CuEKkj3Ac8KkUcqoHuTOObZnzgbXx$Ph$4MhkNSHoE6blhvj2q2fdg0EDCcu+bt3rWdd5A32nK9hPVknVZanAjP93ytA28-nZTzfMx1DFlrM71IngGIwpV8j5iOHEc4oQP$3hENc5$sA0gkrbH2$bLbnCUr1g-y7X5SycjLD1tlwjmEXG6bnBjbJ2amlZCZSbnUtTZIM+knn2nXUpobwfN1giQGITGunzsSEKtEwxyx$5$T+S$sIAm16eGHu0Vl+lVaUofDsnLynnE5QztvLSn+mOBfsACxGVLlW40yc8BARv4oQtnBzn0y3JfEdcnI1wLhMIRn5oo2d-ev3gBKv1lL1+dEei37-Am0O1mVNyabTj2Apgdndc8rlG2wbl2vNT8ZiPEfuTb8QGUKrgr4y+JbQt+BlnS-P5hkRcUth1ZD0klTnQfnwIan948pAHrGwPjXdtu$EzlOkVtTMF0e9Q8SQOHn$TeLAvN+4Fn0esuFvfElA9xblMWp51aTbFPFIVX-TLg+g0pnfFyQljn-xj3HHvkPetWwnONudOynda8-Iqjqwa-noHuPO6jzmvWUR1Z0SniGQfpZ4l+d39O1y$izwt0VeWqmbVqNdM1kcKzPv9Hur3ljnUCQwA-eKTi9XL7n2t+d-T8oPeXbI6daHL$G5JktW117JK92LnVJwZ4RlBePtXjELmOHXb1p34mEaBo83kieKVaCUdChBfSBA--O8drF2crNHMZoGJXu$Fxvxib1zHjJmTuAls1nSbyOnHuHcnSn8TquaFnw5Z3n+HfuJnLJ19Qih8fpsuO6yfp9wWWIJyNEgT4-vhLjK6X1Die+iGKplAed6vZTA4hHszLvVWznettAEs2I38gAznkTajFFn7dhvTSnHPCQfwKczQ0P2txXQp$-eGubqF91GJFUOotDEy6E6T+oM9EgnDaAgLFcjD01UMbRuJ+PGGlP0B$TfO-ay841Kc3T8WeVibZTceoptFI0K9flsWpnI3dGX4spP$HOdGWp3TIWbsbo-c7AvalaHVq1PhltddoWl2d4nB1nuXcAt3RkIGwkf5lnEv9L4HOhlaydBl23rJ32nAvN2v5ygh7WyxkKWuExBE$zWF$HWnaLOUxLyyqACMfbvrcpcC4s+8vvAand5LjUPG+7wwIiK735vN7UWKU3JqByT5DFRs2fjLORwLj1pQ0wu-knICKWE0k8fpcDMGUfHVaxGrlv4VdGL7s+sGVf1A7TgnGQTfE$3+Cg-5BaOHn4yPxQ2qprBw+w--cNWPgsZPr$iJ3eiI1771wAouRQqF3q4fkWkNuoERlCF+EARtQbdx6uggG11L$RL1P3lwblk13IBr5TAkHzm7O3IW9BXbauSfnuR4FIQn27BXUpnol+W6um7nzaA-0ox0RdMSehzBHuRZPV8lr0ObNVFSKsnldHS9hhdn84ncbi4JplQNVp38jWgyc8lK9DU4hXn-VXuzi$oxO5j+9nNoJwKKL+GbC$khTqRfhkTpXJAWn9fP9XPRXUmf8bexJmc+zEmB10F4niboJpOnDQllRpnF38kNRGO15LnU9xXO+XejUNJIUNZ$pQ2WEev0VEnxWkTyLIOerJ2eMtvPQ0GUwnyENg6fIv-3COg1Vtr88gHGpvJfilxXVGI7Kuu0EI1qHbnDVh0GK0-Oon$hthnIvAoJFXXbAjyzi0GyEQpdWj1D0FnogQmCkrNKwmUcj-erZQs$wRO-4FlDvePTh8ghjnnECMvyxo7GsvHo+-ABuxzjbJCn7QBuofIZ5iWFrtgwzFJ-GvnEyfuTunzmATnq8Ly8d3Lg+CjEAM-tGOuGwzshrb3ZJynn3woXJgSUb-VZ38fKkNVNS$dGkh5Ipq7T$7JMeWTiaIrkgXJLl0sr4iZjFnMry38-Gp3aHfdq0jtz8n9qn5sUmVSeOT8zn5CV5i$TbOT6ltUITALE7sbGavWtmQz7-lLn8-Xenan+iUlG11P05T13N$HjLiLv1WM9IXKxm33l$W40mXoo1ACOqWEnzSM5M$TWLjaS4q4xGAPynsuGIVQTwE8CopRKhxTnFB6oF1W5aH5PyOISTUcTn9A5d2QW11$v$ULg9UvAbE70KocFPxAPit+W17M0Hyfm9en5FTbnTsUOKlWT4jq8neguH4AQqEyCzJdGmTixNQnvfX0UFnzni3QMStnnO6ynfE8N4TThVhc1wbGJJa8h9xLa7G+GI4QVIbeJQjBjMvoX0vL2ZHrOXob3euOC6Mu-Ut48s18S3MAO9SLnblLvHmS2ECnW14C4KAPPPFlpn2FyzEceKlCkeol3bh0lsZ9csbngn4-WaCo19H6aI1sXPewj6AtptRQ97ETiJj$3lLda8PuzhEGh836dl8pZkgNG06lKKk1TdCGhbyc8CvlP+ShscGJHtgVvqt0SGybtbATlfnhEcDfQG8n4s6XqepkQlXHp3oHeZ0o-9OoAGMD+5J-Gow7nJoq$p9eEHmECtZZ5u55S2++k+sJLlZKqmr7P9NdxPeWu1muJllzlMcg9LdnQiHzEANx5pB$ejyubSHGTmP7AGmHaZuuz1joP+ACBs5XTtKhj2ibylaRXxFUXenOAQLPUjwXJl1bvr4ASny9UTRLCdbvndKXb1PFSHGT9kN0hIBGgXuh8CsidkanFU6bauSev0jNPf2Rhc1sWGnHfxdRH96sMZduk9Tp8iE9bGDnIhlEGfvta1v6OhlpXzh3uJ1Gyvom2v0VG6yU2n$gDmZmKU8wtwDlt3zNS+uQ1xzlwn5ncikMS8xT-f1jnV$$JEnP2aDX8n1lc7MGufXuHW+lKkP3zhsBOTOWlsSBGAyiN9DOJcgnbU0ElLnaaEotP8bK3KWTNjgXpG2XyrZFeXHiElmFMbyxoOZfnuHLRXnciH9efBGt2bj+9Nubq0UXnL5zAGKA+POmWqjjH-sUtetN08BOHMH6p8-AqvB9W+XZ7WW+mXoHk5A8XudmWIlNq-wKfknyuTEWjXp3i$GZXMgBmU301i0WtrvWz6skUjmTQugPgpQ9LlCvZGnLnVlJ17nL8vVObI81nFUH-8OlAJwOX6sV5ZLAIvi9mBtbju9pKoKS$tC3f5KZQ3C6K+hAN2$XkewnpAqGQPHEeQ2i2svjeUu9kqScm$A7fFwNp8ckEzB53ve43idWtMoQ1gWxaZ5WqI+2W9UGsysSVSbD5lZiZfX7xcKGdqehW7n6CMnlodDTdhI8iwMhdlan1wTw8tnTeDUlwnZ2G78piAZIampiE8Tbmwf4-4bmzicyadIdvDBc-NI+Ute468pWWJ8InkbSMVlDL96$deIH9IUOtEgGmr3fhkX4Rekys3WMShPHwFt7IR3W4K48N1GExSy-nrLiil6WcnIohDnwEShhjyAjUjtanp4lQNR3eeHqNK3F1Bjh8ZU7lPrTyRTaXNgk4sOghD7ehE8I3K97O38kn3DmuRLednavTfTcbdye938To4kcTKOTaIUknTIZwJ184NuabTbaTJn$ky1soQKk-sHn8qkE1T2Z1TU9PjkAbaiCBduT7JhRXL3un8xWLnC2LvWmeKTzhIo1Krq0lrnbsOmPNJv$rGW6Nm03LlDwU1Xhl4nwnNhnrt6UlChCn55qG6G0MiU2e4nwIM-l4nn8pr82qHboxO$TZAoHTbTp4mLPgBzkfwlgGpn738s1W38f8Jn1JhGI4dmIOTnHsWUO3tOiP3hvr7eRvApy5akwpkAH9Hb4Lllitxvpl6t2B2otPjLqIVl4ngwia3PG0f2blGBPptMhfygUMnlGnefEcj6w8nEuA7noa7fF+X19sMEiqrl32ELndUn6Z4ngbnL8CA8b$J8JnUOGLlMvaaSyMWbdnEw8T9HlFLienH3iCQ$B8bysEEnowagOf5B0MnIAUznzKI87QS59IkF73tL$rvBWekdHl8-SXLdnJKOanXnwFPnlhn7TE5vrvznSgny3ONbgLdnEK3bnJ1v0x-$vZ$ngkWZvhaddUrnABjAgJnowATl6jop3w8s$x6PaINGVL4L8plZJ78lhnoUTSoztdtPpH0b2+3LnyvtniVmznGJVbApnbN0tLC3C4yrLAXgbo3WkcaMI4cKKgBjjU9UcTa5$VeqFPnIcqVQv8gv$dtve8QTlngeIWbNtsdLznxat3gbGId02v4A8LvtHLGaIFLiQnfIcXhmuHKdQ8W3znn1IaBgDFblhnPtGElkNC4t2xUnjZQGlISq+hVltFEwg08onupSjg2wn8quqWXNbzGW2nQjInnanqg6intrwTi38uTCBkalgkCfXREWGs0q5iRn4ngnWzntnIBXXT783bnXn55lalgBSqOhTSwmn4AJTTTUG8nIq+Tv-ELnwElzUBwKluuas5tbIVlBwoacTljitW0+fKTOFozCn3WT4alan-2Nhl9sEQLxhSn+T83Ib36+$Vnokgb4hcaf4HfElD8I07r81n55nZnX3v5P3hqUulElhFnc3E3lanwTnRIFNcTzj4LuloOE8rW8nI2ffpHsG0E8naan28CWvhhpmanhTgell31n8T8fPZAn28gub3qrNRnZbiinAtBmMurCW7T4XcCZFF1eJ9AL3zkjfHj1-LIhIO$rrHuToWkgeznVTaUS3N0z7p0Gn-2lfCIk7TiUXOefER2xwLcVPGMAG-IGhnvuj3d5f8BqwE9X1lQr7DhNdfSUT8onJU3uHsGowd6um2UwhLygu8wIbjhnH38rnv+oea5IekefI-8onlTzJMNIQAwT8ibhTiUko1GJU14ibS34x$enAqetW7iXqqMiXFfEnTne0RaRFnfTcNUHJbT5nSJ40eoPG$Jp$QbmTPHnHr-6Nh9hVZnOUG7eaN4fTnT8TlIwkT1pm7jwToT21GwaH+7I10OJVvROzni5UanuRWJBhnsvQJLEngb8pdmAj8semBw9fA3lSe-5kt3QOfQcbI7jK6PCE8nhrvenLnqzuzjRPgCyGFgnKrPrfWeownALR9-NCHM9Gowjcn+104QwlsgWTIJ8lv63RVndnzaa5FvZkwQHfTrrf1iNI1gbiPtPvq$Oi8jiqmJRAFnqwIVlOGbwhvMbzoJ3wlznIKT$kWGlTqWftnhZDFntlza8zzm2iuVoLbT55825qAjnnLlhnb3avM7s1UJzvfpj2uhnzX3-4anQcL8rnnJOEri-mcy+p4XP9ian8BNMwDFSGhyyAn86tijanSbfq48mfsRwnvFR-f06jBdmvt6W7lnU4nKTfOvyy3TdEGXjUtGnOHGWToWIc$HKnT8vPZ4f2MWvyFq0NQHG0TQtfH10rQtHHDHWQQlhMwo8BUnnT8txbn5V0PwXz9EEHJvOfnIhvEgK0wMQcAxF2SoOnefgGAUkfn4hy+H1WGhlEAbi+HLInxXt0engC1ianumziGdL+Hi93axtlLekQWGno1ZohWi5sb45gn3BB3nbTypcfXBKnZnZnFbHz1dlbGHbiin2uE$8rl6A2UbHWgTCVITlXXNT4an1ETyQGnfTMwlujHw4nc6qzwWNJqJ3UpFQpETTdsOs2QstDM-3UvzndaOAifgwwgonC0Zf3WblnnLIWbPSZ$trnVL4RLAve97rncGWNHa8gB08Igf2AGJUZ6gn3tXNRLnhTIpAaAQNGEI86mnnhlBW+ibqA4nK+uhUbl4ndQa+vj3RxWLwA+sRW4nKSlaM$TKT8R6QwqNCxt+OQAWinM9wToVH1wMD0FIBdKToeIWbnTd5W9E3bP3IK1B5m7JClq19O4znFW6PSrnmnialmaRaUK6+TQ45LnDntFLhQkvF3djLbn$nSmW4nW5-tUKqDI9PGtP5TnaIb3d9i080bGSs728nmMLHXb372QQOynmwNpLfTI3ApFSl7bqgWrRL8nTIQ1VLaVltjL34jNnT3y25OJshwve8OlxOnbn1Bs3APleSpob5Ib3nTI-nzG734LnfnxCN3JDnuu+tAkPfNrk2EniKJLOWb55nbbeOUglRt7nMoP4GDe8WL9iRtkurrlkT1Qv5ffp$+0jIGjDGQqin3q$uJXmTt43V5nygaU-FFnQKX0f8BvadnlAKVTacn+gr5$ivRB$XVlQHnGKe-XK3guhEeTaynjU6ZyAZu7tRZuj0ut6yOjeztjwc0rrlzHh0C89Ug$mH5f-dlmVINfOcTlINXVIClwIgnO1WO3bnySOAnrEOKmwrHctzUonATkTDRhP+$9T52hn1K$KKHL0KmuN6+AKhzlPSSKQoP6SKmF-2CSvtv-2SnOKNAIxSZ3q-k1nDKjPln+aqPInw+52AMN3+Eq3TXw+ETarZsgpqQr6Ly+TlrZh+iu5LejnvqxIT5neq57kF+j4GVsU+mqt6n4+VuPf9knXqQVktiTMNcLbnCqxp60gTuQV68+f$VzZeC-ZGf2p+suhOnz+$+GfZB+tuxQZQ+VuNHsf+5NfQkd+IKCElg+f$eyZV+Zu7c5jCIu$H9UCE$zf2B+f$efZv+5WGfZ9+FNmhh2kvucbne+2sFd21+$qjd2+CIKOd60g-KcdZjC5Sr5Nt+HNPg94+gN7HZW+JvLy6k5WRzy6c+WNyz6j+JvXy6S+INytSZ+qNmMt++m-lk6eC6N1mSs+dDS5uGjdqpuN8CeKNkunzPWsQrNddDzb8Qq-KJ79DjyVjcIGjpZCseGh9QAs8Ew7LShIAyv4dI5aPwGDxN5a5nE-X71KssFxsiXs245IcH3iGPG6$nnE+Gn48WBGDu+85PAfZJatke7cn1j7nd21Bwp4Wae3dWr2WGUrfhabtqb-9gn+FK-Ivizalkf-5MLgqtJdk7ovNVtd+QOvubkk8QH06SO+fnbTDipqhDnjE6$SXyFt$rGhl5jfOxWb$n2exZ6h+rTXRiMcS1SXBiR6iIlTRT83MG2MLzE5hd9OkjQplvwV9+6SBTEH5kxUju423zUcC4LfTtwjilAv+82QMnLlTaGTrw99QqNfp8SJ$6b3Wr2+J7AwToGUzn9Q4alfnVi62mKH-seDvIi7sezHxB1BsFr4ggwdaIjEEj6kWrPITzLcmlO-iPhbaKTzobfvVD7b+anB72bG8IDULyeMoCZP3-XOGQfGlaclzcb839V$FnrJIbE8$ribEacgh$K3OG1LbRVE8Hl4N0z5ZA9GVEE5Htv$j9ZfQOARqklmaBurAeMkeuU7d6khwceUXkETjaEEvJTxaAv39ToqnGsrFE7AllpJd9ngTumHFjERKMU5UFl0voiAmWVNTiM4vIThkhq+5TJ8v-PfnSinKwFnEzso+sRGDb6+y+HphakJ9Nkj1wrtM5LgnE1OWI9WE1GenrkwElEtUgRt1X8Ew7tbmgAnrjr7e9nwnRyhf3X$a9I9n7lHLIxk7nzFWG6E1Th8mkFcy5djkvPcblfTeJ2RLiSEa33rZg-B9BBZj-53$6Rnln4MdW-CQhynznWWH2hwe4ndFA4Ehnn3lf6EpGwr-lf7QO5LHvRu$9hnX3Fc1BoZISSMppi3rN9rhA1EN9rCK8eA7EH6M0kW+zJTnX-cNSvaXKEHOza6nvDiRG2Ktpana7tONK6CxLGD3xZ6PATCnE6RhvPbqaIKoUUC05GDMC9X9BDGJCisanrxkXDgDCnRXs9DiC2OstDanAi9X93La7t4nsAprnEsdx2XsWDHxKXsvDDCKODvDjx-ODtD9x6P9WDzxkO-GDCC26DtDoxw6sUDJF0P9+D+xXisBweR1oTlDTDBP-TTbxw2IlDExwis+DJxfHTajza4J8V2sLR7IcTzZtHtnnn"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25608\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"5037e3d1d2bf62315c665321cb84f526\"\r\nlast-modified: Thu, 06 Oct 2022 13:24:41 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 182E53470D3D4685\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 7132\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wQEc5raLK0I4giEYDBj9MkBrDp9%2FBl6f7jGijdH6sLSiH9OIe4XXPiReAfAmsmk7Pi5FcOXQJQKyTMVMFAG%2Byin66shUQb6SZlk868PtRIosJFCzerKEX1%2B7cPTAgztlaA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 923b1bdf2f1556be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=819\u0026min_rtt=444\u0026rtt_var=230\u0026sent=686\u0026recv=178\u0026lost=0\u0026retrans=2\u0026sent_bytes=917440\u0026recv_bytes=4594\u0026delivery_rate=70564507\u0026cwnd=284\u0026unsent_bytes=0\u0026cid=874feb8d33a12a41\u0026ts=168\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25608,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 287x192, components 3","md5":"5037e3d1d2bf62315c665321cb84f526","sha1":"84c9d95c167887d177e5cc4ac85eb9531c2a997a","sha256":"db395bb37169b6b8e5ffec0ff2136732eb92c66de279970e354156c3a216b7fc","sha512":"7b5ee1b2d8cab6453db6524849d47a6d883f273b96771423491daeb868cb202d2cee96df76d247fccf4ad71f50917b226b80cc8c8fce008f40f6a509e4f7c1f6","ssdeep":"768:Rzd+KdUYN1l3QvrS6TmO8W7S5vO5Bki7qQ1lfEQ7+y+5x:RzU+33USO38W00Br7DlfoyMx","tlshash":"afb2e1157b6826d1f482e02932f7ae44734241e4df06fbd1b9641b98ae933ce374923d","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-05-25T23:32:58.985052Z","times_seen":12,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":114,"dns":10,"connect":6,"send":0,"wait":15,"receive":1,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/index.BK0rjlWK.css","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:31.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/index.BK0rjlWK.css HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=2BFtV41K05TOVH6y; __ddg10_=1742535569; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=4pMjNymdpj2UFdL8; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg10_=1742535571; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\ncontent-length: 8932\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-39eb\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14827,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14826)","md5":"4bd52db32aceb5941c2fc7ca1f38c9a8","sha1":"ff25e300c044e9b2dea32558caefa8a4f18fd0fe","sha256":"f6c37364c63744db8dc7b320b3ec9232ba6b60cce1559419147a6d7518914b42","sha512":"69cc5ee6872d72816ffd8ff6bc2c108fa8dc9592c8831bb2bf1c662256abbedbc1d376ab65f07ff92600e3de6c78fab6544d5d167c0b4f7ca70d735236763080","ssdeep":"192:uAAxUre5EAxL2ihp/KTxJ9uUlvmpJK0yWJ1z25U1Q4NHfVnG85UmJj8Q1OFXl:wxUre6A92epCTX9lvmp73nz25MQAvkV","tlshash":"86626c2c3e0e262df0f78679a1e8531921319317c40beeb8d625b84a45cb6cfd67f185","first_seen":"2024-12-10T17:19:34.473603Z","last_seen":"2025-03-29T11:19:57.92279Z","times_seen":10,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/home/home-aviatrix.webp","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/home/home-aviatrix.webp HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=jRU7wOYNjvAPtHvS; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":1106,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":757,\"startTime\":1742535557564,\"versions\":{\"fl\":\"2025.1.0\",\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"1d9071a6-3c54-4fa6-a784-04323cb2fbf6\",\"location\":\"https://landingpages.kaizengaming.com/betano-splash-screen-bz/index.html\",\"nt\":\"navigate\",\"serverTimings\":[],\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":763,\"domContentLoadedEventStart\":768,\"domContentLoadedEventEnd\":771,\"domComplete\":1200,\"loadEventStart\":1200,\"loadEventEnd\":1201,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":0,\"domainLookupStart\":0,\"domainLookupEnd\":0,\"connectStart\":0,\"connectEnd\":0,\"secureConnectionStart\":0,\"requestStart\":0,\"responseStart\":0,\"responseEnd\":134,\"transferSize\":0,\"encodedBodySize\":0,\"decodedBodySize\":0,\"name\":\"https://landingpages.kaizengaming.com/betano-splash-screen-bz/index.html\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":1201},\"siteToken\":\"042e1bd503e64dc0aaee9cabbc9b1f4d\",\"st\":2}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=2SuvaHPNgdSuNklE; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:48:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 33056\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"67dc31ab-8120\"\r\nage: 3066\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33056,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"437639e8c02e50971e9da874f1ca62bd","sha1":"a63a01976ef90019df22eeef107dfd5d51e06095","sha256":"e18a32dee710f4796041ff29e322a38adabcdb54380ccb3da2851dce6cdb6964","sha512":"f77f6ffe56792947b7e655824e1e46261da0a5dab142cbe69a79111687adfd0cb8614f77ac0aa6c1fabfb4ae3425ca16493afdf7ab52216fbcd8c3592acbd2fa","ssdeep":"768:1Sw5F62yT4VXRBRt6ikEu/J8kDLZ8XSm5QQOM5/ZIJn/g:ReWFOnx8kPZizRZO/g","tlshash":"9be2f1e151b46589c674cafcf38eee43ffb0121c4c818345c0d87fa64886b5eae62693","first_seen":"2025-03-21T05:40:08.91227Z","last_seen":"2025-03-29T11:19:57.913536Z","times_seen":8,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":64,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/home/100hp-crash.webp","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/home/100hp-crash.webp HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=jRU7wOYNjvAPtHvS; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":36,"data":"{\"data\":{\"attributes\":{\"email\":\"\"}}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=dtimeBbhPj7SoKho; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42628\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"67dc31ab-a684\"\r\nage: 2901\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42628,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dfbb6f5609214b935ea3abbd7b2332f1","sha1":"05280b29565b920f9fdd39804ad8a61541ec8d01","sha256":"9f29f9749caec97892f1ccbf7de218841c6714690f3ecc98fa092625c80b4e6a","sha512":"9583d7f65eb895907a83acff1feca0a0ceb872106d1eda3b5957424a07920886c35e134a3d98f35bd4337d67a233beb391a01244154981b58505138e1c8176b6","ssdeep":"768:86Zr+JYWYtbCZfPf/nmvvBuC+QGCUkKlImCoTbdGXTOOq+ftCYOHLWsO7G4CgO:8il2QM/v1GXTBM0C/","tlshash":"0413aec5827197dfccdb4af13f972b9212a085d2258da1d40d1a3ad9d27b173e3a09f2","first_seen":"2025-03-21T05:40:08.912868Z","last_seen":"2025-03-29T11:19:57.904752Z","times_seen":8,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":57,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/notfound.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/notfound.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/Home.BaH26edq.css\r\nCookie: __ddg8_=hixM8UQWJnhyJBkc; __ddg10_=1742535566; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=UD4ltV7LMyOaT4fT; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:49:16 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"67dc31ab-4f4\"\r\nage: 3010\r\ncontent-length: 660\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1268,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2fd87aa13e812fa62212b5744f8d204e","sha1":"dfc08c806ee30b6ee8f31387f3226e579b2cfcb3","sha256":"ed5d1ce81bb322df8c24b919b1f8d1eaf4f5fab348af382d7e868adc4cad63eb","sha512":"a3f13103e7ddf9d0d7cd589dbe8a09620271806a2d44a7cf1af247b310114391ee976d5d3e42536b1ac85e7eccce983834ab006ff141592b212988193b796aa5","ssdeep":"","tlshash":"162175fc8330f068dc0667ebdf6718d6596375fd1ee1418a53b89165321488dd002baa","first_seen":"2023-05-21T16:42:19Z","last_seen":"2025-03-29T11:19:57.806662Z","times_seen":12,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/home/gamzix-flower-fiesta-part3.webp","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/home/gamzix-flower-fiesta-part3.webp HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=p6jbeaWUrL6qwblm; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1g1t5j0Kj0EKo7Wt; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:48:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 92172\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"67dc31ab-1680c\"\r\nage: 3066\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":92172,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"77a1907f328fd782ef76eda41c4a8f2c","sha1":"2b5ee6044288fe2ea1192c592e6a9c21c46acf5c","sha256":"cf75a16b37588770639d26e55f4ea6799e2d837b473d37f12ab620275fe97981","sha512":"c2601c49fe38a480c80da84fcd30b87796cc0eece883ecf8ec153edc02e08e5675a7723438ac57361addbc42d395ab351f522f9570e2da655aeaa1f6196c3ce4","ssdeep":"1536:6r1iMKfXP9ECGZ9Byl0wfbFxoqbTF2lBMRaCWjPaktA2lQiw8o3jw8/fKX:ozCiCGZ6zToqglBMkzjCktAUw7T3/CX","tlshash":"fb9302ee30e25e9d9766e8fc152d56a1c8340c8a9578eac0cad00d62f0fb3a140e317f","first_seen":"2025-03-21T05:40:08.914432Z","last_seen":"2025-03-27T04:39:04.479157Z","times_seen":4,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gwfg84x.space/games/casino/v2/search","fqdn":"api.gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Mar 2025 15:13:14 GMT","end":"Mon, 16 Jun 2025 15:13:13 GMT"},"fingerprint":{"sha1":"BF:F6:26:CD:19:DC:7A:9C:43:5D:6C:E2:14:15:6C:4A:04:14:44:99","sha256":"BA:E2:88:D9:EB:25:85:70:88:7D:30:E4:9C:EB:DE:65:CB:CC:3E:F0:3E:AE:33:E2:5D:87:13:51:8A:CA:D4:E9"}}},"request":{"raw":"OPTIONS /games/casino/v2/search HTTP/1.1\r\nHost: api.gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,region\r\nReferer: https://gwfg84x.space/\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=VqFf3Uz5PmzEJksU; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg1_=90rhSw0kuwZqohyaC420; Domain=.gwfg84x.space; HttpOnly; Path=/; Expires=Sat, 21-Mar-2026 05:39:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Fri, 21 Mar 2025 05:39:26 GMT\r\naccess-control-allow-origin: https://gwfg84x.space\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type,region\r\naccess-control-max-age: 86400\r\nx-request-id: 69d4eef2-4264-4400-a6ab-4698608443b7\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/D5gOYdM7.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/D5gOYdM7.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=hR8641O7of70Crwg; __ddg10_=1742535566; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=c3WPrTTPOzhip9kI; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:27 GMT\n__ddg10_=1742535567; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nddg-cache-status: HIT,HIT\r\netag: \"67dc31ab-1658\"\r\nage: 6\r\ncontent-length: 2358\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5720,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5792), with no line terminators","md5":"c73120ee4cdf51cf1c71d6b47ea7d49f","sha1":"d69a6449728246b5488f0f10d2b3ecd3bb7a6ac6","sha256":"c213a510c389dba4291c4d7c150c89ae0c1fe8b9cb9c7a7522995b27aea53999","sha512":"008d134b8ef085e313d9cc386f3519de033cb5f0cdd26aab4a7d71fa94039e1c64f94c5626a1442f7547aa49ab2bc5605785bb5653b7a77096248840f2d6568d","ssdeep":"96:RhLrpGpaImvmCp0PsTVReJCs+0HNwC8o4PR2fT8W6ctvRqAWZzsqS4:RhLr8vmeCp6s/eMrVo4p2Fqjsq7","tlshash":"70c186ccfbd5f97683a3e671f13f990be13b668088195064a109e8e07c76615c23bf69","first_seen":"2024-12-02T09:06:39.192998Z","last_seen":"2025-03-29T11:19:57.912312Z","times_seen":13,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/ThreeOaks/11496fee3b36431ba2f1650cdbb50082.png","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/ThreeOaks/11496fee3b36431ba2f1650cdbb50082.png HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":701,"data":"{\"profile_id\":\"4e777dfc-cd7a-4902-a4b3-c8accc3953be\",\"metrics\":[{\"context\":{\"page\":{\"path\":\"/\",\"referrer\":\"\",\"title\":\"Puzzle - Modern Accounting Software For Startups \u0026 Tax Preparation\",\"url\":\"https://puzzle.io/?irclickid=\u0026sharedid=https://qovolta.com/\u0026irpid=2334778\u0026irgwc=1\",\"host\":\"puzzle.io\"},\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"platform\":{\"name\":\"Linux x86_64\",\"deviceType\":\"desktop\"},\"library\":{\"name\":\"koala\"},\"session\":{\"id\":\"1742535544931\",\"lastTouched\":1742535544931},\"locale\":\"en-US\",\"timezone\":\"UTC\"},\"id\":\"8e8bfb12-a3ed-481e-9eba-d791de42a424\",\"name\":\"sdk.loaded\",\"properties\":{\"page\":\"/\"},\"sent_at\":\"2025-03-21T05:39:04.933Z\"}]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 34040\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"a287a3d78c1b9bc8e2feff9e8ed7f26d\"\r\nlast-modified: Thu, 11 Jul 2024 10:21:45 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 182C28FDF487BBD6\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 740\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UtZ4PvmkMqfnLRHZ5ZKd4DK4XgGsszJlieDjvZNfvfYD5XXpbp0A9aB4NNZ1FiIBMnFy93iFrcA2Z5a%2BF5LxPjwsPgsZAZdrAuCnG55Xn8F%2BiidYtKMFpfmrefS94AljYw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 923b1bdebec856be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=725\u0026min_rtt=444\u0026rtt_var=298\u0026sent=92\u0026recv=35\u0026lost=0\u0026retrans=1\u0026sent_bytes=104801\u0026recv_bytes=3011\u0026delivery_rate=20435483\u0026cwnd=256\u0026unsent_bytes=5616\u0026cid=874feb8d33a12a41\u0026ts=99\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34040,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"a287a3d78c1b9bc8e2feff9e8ed7f26d","sha1":"df5276083070152a37f4e1fcc2b3970352b927c6","sha256":"98afc3a6958155d149386d0cebbad8a29ceffc072146ebb68c09957d7d0cf4c5","sha512":"fa3cfd41c525c17c4832ab25906c7c0aacdd5ed79fdd70961185523f4081b1adc34d397119e41f4ff6c03585db28c3311bd5bf9540367b0a9abca2603333ed54","ssdeep":"768:2JCLPGLvkVqFyNDUYE3YSUCbzG+OPSFpqdFuRn1j:cCLPGLcQFW4bpn9ywj","tlshash":"a4e2f1d8e197fbded70a426191edd7bfec4e40bc45a5b18ecab1174eb4e288c016001e","first_seen":"2025-03-21T05:40:08.916214Z","last_seen":"2026-03-01T21:47:53.270168Z","times_seen":79,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":32,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/OZv6iJsG.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:21.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/OZv6iJsG.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DNNdIs2A.js\r\nCookie: __ddg8_=RbNrh8y3wkGBGL31; __ddg10_=1742535561; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":94650,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5cf0ce803f3fb65f1a297f632d6eaf50","sha1":"6daa65c0ac95842a55c271a1f25603ba99b4fd40","sha256":"e2bbc7ea980ef4de4ddafbd48f72dd615a759f8fc0fe81022af43c10b513862e","sha512":"db1c95d35cff981d16186da3274dbd2bc158bb97dada4e4904fb93f9b567e8ac4b95d1b401f005fb43379d727891a32538ee2639b1c5b3206ceeeed05b29dbcb","ssdeep":"1536:+7WUcvXJnXfZsUdMJqyiWNP3IDXRC216866jJBlxvHV+yThDkUXiA6wyb5gzbdmI:+aUcvtfCUYNP4D02fjpTaZyzbN","tlshash":"45931989b224b57742f75ada83b58201b2a04984f409d4e8b0fd9d7b457e95c03aeffc","first_seen":"2025-03-21T05:40:08.916931Z","last_seen":"2025-03-21T05:40:08.916931Z","times_seen":1,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/logo.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:23.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/logo.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=oacW7vdrnwr3oeCf; __ddg10_=1742535563; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":201,"data":"data=eyJ0b2tlbiI6InBoY19TTjRqMzFxTGFsU29DOHY4MlAxWjRPMjl1eW5xWU5sV2JtVTN2eUVuNjBsIiwiZGlzdGluY3RfaWQiOiIwMTk1YjczNi00ZDQ5LTdmMWYtYmRjNC03Yjc0NzE4MWM5MGYiLCJncm91cHMiOnt9LCJwZXJzb25fcHJvcGVydGllcyI6e319"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=YIs2MZrPB333rmJ4; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg10_=1742535563; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nddg-cache-status: HIT,HIT\r\netag: \"67dc31ab-5f5\"\r\nage: 2\r\ncontent-length: 728\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1525,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"edd92783d68be32359307c77607e7b08","sha1":"26aa09f77fcf9deedc8940f6495c54c7ba1ba42e","sha256":"a162d44115dc8a3bbc7277fae9f9d27ff1c6163f9e050af6df5071630376558b","sha512":"c82ed112a594e4612880056e5059de439941372bc71bd4ee67248616128f54bd047afceb109a523bf7aec7939601bc15d91a57d69fae6d9242acd2469c5249ce","ssdeep":"","tlshash":"6c3150b1f359f35059098b078b1da961133e31fdfb60918c8ad79bba752512f846e8f0","first_seen":"2025-03-21T05:40:08.917639Z","last_seen":"2025-03-29T11:19:57.740387Z","times_seen":9,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/home/en/slide-1.webp","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/home/en/slide-1.webp HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=p6jbeaWUrL6qwblm; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=H95PDFvYeEfkuRKF; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1927520\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\netag: \"67dc31ab-1d6960\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1927520,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"16b5b9ce66516c986029f765882ad269","sha1":"238c6adc3c58a91e5317bb3322b71ed737844c67","sha256":"6a26bdc542f3bf28347f26f5bfacca3a2a9c9abe3a55f778f7280ac66a7d6d60","sha512":"b2fa0966fadfbe39d034567031a890473aa3db4b54a753f5f36d63d9f3dc1ff572e7c3c3e6d46c6cbab273ae03eefa5972192a8cbbdb3d4395c626135c33a93f","ssdeep":"49152:5wsh9UBjjMwXNtg4ibd8+KL+r2UO8c7JWwkq1RwVwJ2qY:CjXd3VL+aUO8sZkmRw7qY","tlshash":"3d9533ace65d7ec64d083ad006bfe1172e9a9d7b27e01eb9a7dc2cff00c055994249c6","first_seen":"2023-10-14T12:47:40Z","last_seen":"2025-03-29T11:19:57.748818Z","times_seen":15,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":446,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/locales/en.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /locales/en.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=PS7WWjCFtFHAvhYR; __ddg10_=1742535566; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=5DKIH0Ki2zKvAsX3; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 488\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-4d6\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1238,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cb3c014efb2777abdfab596863c216f7","sha1":"c576fcb9b518a109cd007896d657daefd34b7eb6","sha256":"4ab7eaa17b62f4c17f0c04d62f05f06b7ea7c9cce58e1684e1a625324db06e19","sha512":"3ac892498cd51e5f16c22347ed03274dc4579647296fdfa4f6c8484f7c2f741a36fd94d28aa98b05214f677819fed27228a3c9c78a248b971fee37c248ef5e30","ssdeep":"","tlshash":"3b21ed255518faa9aa0b23f75fef08e3053170fe724a45d5a0adc238372516ff5c29a8","first_seen":"2023-05-21T11:43:23Z","last_seen":"2025-03-29T11:19:57.810742Z","times_seen":13,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.fra1.digitaloceanspaces.com/casino/games/625ce8668474bc89a763e91cd37f5939.png/tn5O3ljpteJ5lQY6xyDyiEwlmbxvhNCVJQhpYkHW.png","fqdn":"getxavatars1.fra1.digitaloceanspaces.com","domain":"getxavatars1.fra1.digitaloceanspaces.com","tld":"fra1.digitaloceanspaces.com"},"ip":{"addr":"5.101.109.44","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fra1.digitaloceanspaces.com","organization":"DigitalOcean, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sat, 13 Apr 2024 00:00:00 GMT","end":"Tue, 29 Apr 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3B:96:40:D5:27:23:13:D0:01:19:6F:20:E8:9A:88:B8:93:61:8F:08","sha256":"BB:BD:48:FD:42:23:8E:58:BD:11:C9:CD:7C:CC:5B:A4:69:1E:BC:AB:A9:5D:16:A4:95:F2:DE:20:7D:F8:63:A4"}}},"request":{"raw":"GET /casino/games/625ce8668474bc89a763e91cd37f5939.png/tn5O3ljpteJ5lQY6xyDyiEwlmbxvhNCVJQhpYkHW.png HTTP/1.1\r\nHost: getxavatars1.fra1.digitaloceanspaces.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 405917\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Aug 2024 11:34:36 GMT\r\nx-rgw-object-type: Normal\r\netag: \"3c041de97eb67e3be1fc96a2233a324c\"\r\nx-amz-request-id: tx0000063af2a2c7338a4db-0067dcfb8f-13d1e5f5d-fra1b\r\ncontent-type: image/png\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":405917,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGBA, non-interlaced","md5":"3c041de97eb67e3be1fc96a2233a324c","sha1":"a03039a59c0b082d221b673d7240f63395bd9bb3","sha256":"30b02384d15b98b08f440acfede9e82c3701a03cc097310fd5b157fc56bff70e","sha512":"64818a6a819bd9c7fa0680b577cab3c54c0c2e4a60bc82c0d3272dca5512eaa643ceffc8808a3902db307dcfaf04549f4febb4bdd50df7904a627f0e640d256e","ssdeep":"6144:AsAXHqV7Lfz+BoP+hz5DUB4t9rHHlUyxTdNfF/BhDZbXswPFVkThd0zkL7Jo7:xOqVvL2hz79rHZxTdNnh1PFiT0Qo7","tlshash":"7d8423d73bf47998cd4b90e56495495d8cfaba211d06ab3b11e88bec09dd48b3362cc3","first_seen":"2025-03-21T05:40:08.919815Z","last_seen":"2025-03-21T05:40:08.919815Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1831,"timings":{"blocked":804,"dns":0,"connect":31,"send":0,"wait":66,"receive":119,"ssl":796},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/analytics/events?event_name=slider_banner_view\u0026pgi=GTM-KN757LMM","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:28.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"POST /analytics/events?event_name=slider_banner_view\u0026pgi=GTM-KN757LMM HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 526\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=RNJZ6cIRxfBAqrvS; __ddg10_=1742535567; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":526,"data":"{\"client_event_time\":\"2025-03-21T05:39:27.702\",\"client_event_time_utc\":\"2025-03-21T05:39:27.702\",\"client_time_zone\":\"UTC\",\"event_properties\":[{\"page_url\":\"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\",\"referrer\":\"https://gwfg84x.space/\",\"page_path\":\"/\",\"query_string\":\"?stag=819_67d75bad718f91aca41894cd\",\"domain\":\"gwfg84x.space\",\"gtm_container_version\":\"11\",\"geo\":\"\",\"banner_name\":\"Gamzix\",\"position_index\":\"0\",\"section_name\":\"main_page\"}],\"event_type\":\"slider_banner_view\",\"uuid\":\"\",\"session_id\":\"\",\"user_id\":\"\"}"}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=vwblfBUUBFwDVGhJ; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:28 GMT\n__ddg10_=1742535568; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:28 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:28 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/CTURe_1d.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:23.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/CTURe_1d.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=t44G9X48ms9HCwMK; __ddg10_=1742535563; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=wrxWaFLjFja5RYNn; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg10_=1742535563; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nddg-cache-status: HIT,HIT\r\netag: \"67dc31ab-6ecd7\"\r\nage: 2\r\ncontent-length: 162455\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":453847,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":21,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/eurostile-regular.i2b9H2-b.woff","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:23.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/eurostile-regular.i2b9H2-b.woff HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=r1ryIKEwRgebQf7Z; __ddg10_=1742535563; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=iYjgVZDtNDAlGWEr; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg10_=1742535563; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: font/woff\r\ncontent-length: 97680\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\netag: \"67dc31ab-17d90\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":97680,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 97680, version 1.0","md5":"535b1e86232aafcca96b143529c8226d","sha1":"9408a42efc92ea6972f4d0f50560c22ca84d8a08","sha256":"c5a7a7d506426bb073f4f866f0ea9f3c57c8e856444e5403494d9db263e85671","sha512":"b54f1a43cd21271056f02d0626c573357b3ad962969d24a7c03914513d6644155108d5fb0608d47c734e650e1141de70cb9cc13e1ee1f08830c33ecd7dbb8abf","ssdeep":"1536:mndVS5OB0M0Lfxv9JKgzmzwv25WCnEx2pW594UIi/m3KYdu+WLSkNQ:mv3BbuX0gswcIb4UIi/m3K4u+B1","tlshash":"95a312039a03b7246d764afa2eaf4b39f5d4ef988d0d63c147e1a410194d52f2f6126f","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-04-25T06:32:47.453739Z","times_seen":81,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/ping","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"35.171.122.12","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:24.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sat, 14 Dec 2024 00:00:00 GMT","end":"Sun, 11 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"40:E3:24:32:5B:DE:76:F0:A4:43:7F:C2:84:CD:98:D0:50:48:25:7E","sha256":"B0:C5:D5:8B:41:34:A0:3C:41:21:0F:E0:A4:E1:C3:F7:66:24:A3:25:E9:E6:67:D5:40:EA:68:FB:D3:70:73:74"}}},"request":{"raw":"POST /messenger/web/ping HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 673\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":673,"data":"app_id=knfz4177\u0026v=3\u0026g=ae80665eb160d162b82c677e684627d84181169c\u0026s=abae8775-8aa5-4e0a-9af2-ff662ffe6ea0\u0026r=https%3A%2F%2Fgwfg84x.space%2F\u0026platform=web\u0026installation_type=js-snippet\u0026Idempotency-Key=7aec834997d2833c\u0026internal=%7B%22marketo_tracking_cookie%22%3Anull%2C%22hubspot_tracking_cookie%22%3Anull%7D\u0026is_intersection_booted=false\u0026page_title=\u0026user_active_company_id=undefined\u0026user_data=%7B%22auto_boot%22%3Atrue%2C%22debug%22%3Afalse%2C%22config%22%3A%7B%7D%2C%22script_id%22%3A%22intercom-script%22%2C%22script_defer%22%3Afalse%2C%22update_on_page_route%22%3Atrue%7D\u0026source=apiBoot\u0026sampling=false\u0026referer=https%3A%2F%2Fgwfg84x.space%2F%3Fstag%3D819_67d75bad718f91aca41894cd"}},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Fri, 21 Mar 2025 05:39:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 403 Forbidden\r\ncache-control: no-cache\r\naccess-control-allow-origin: https://gwfg84x.space\r\nvary: Accept,Accept-Encoding\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\naccess-control-expose-headers: x-request-id\r\nx-intercom-version: ea2242999c7cf22f8c4282f697a050e58473f1ee\r\ncontent-encoding: gzip\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\nx-request-queueing: 0\r\nx-request-id: 000dc3ieeh54kbbafbrg\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nx-runtime: 0.026952\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":113,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"f7c217e4312e25a13a9c295cd1961798","sha1":"5e91d802ed5d63b8d870462b130a6595bea73698","sha256":"1a31b1279768924e3c19f5baed04e7c6251a08325031cae1b04d015a111f1c30","sha512":"8971b853d16bdbd3a531c040843288eb60f68c62d19d8a555b2b51e435b534548cc5004fe70996be1be6fbdd480e505f46c8b91239b3449223c6a20304b7d92a","ssdeep":"","tlshash":"6bc02b8b40c8d18bd1c809c83d321e3280c2c060048430da1a0cd41e4604030c287a95","first_seen":"2025-03-21T05:40:08.921346Z","last_seen":"2025-03-21T05:40:08.921346Z","times_seen":1,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/DByjYhl_.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/DByjYhl_.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DmT_aqZN.js\r\nCookie: __ddg8_=OUfJMXjsch1vBlTq; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Fjon5jIMV8Nc7V1j; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67dc31ab-4b81\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19329,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19328)","md5":"d3ef5bc63c62e36483e18ba729aed86c","sha1":"2be187bc91a8a3e9468229fb4fa5093809f8cb50","sha256":"c407adb3621bb45b3a0173cd1a8614b670c5ee7f2bbeb3111928929ed9ac9391","sha512":"0b955c2aadb0de1e3bff9e4884ef94c9cfb859a5615f05c31cc637f4a5ebe9f647cf95eb65a86594710997fc2c013af21f2fe5c5c81ff3f557aa6428c341a992","ssdeep":"384:LybLmDw0G3HVVxVeR6o1Shl449OsLV5jbU6NhWWYZ9BqDXRoO5m4Zes:LyPmDw04HVVxV4X1NdshJQ63WlT4h","tlshash":"d59285c832c7f5968793197681bf140bb23e6d85a40d8892d53ad0d87c748688a7bfed","first_seen":"2025-03-21T05:40:08.922034Z","last_seen":"2025-03-21T05:40:08.922034Z","times_seen":1,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?en=page_view\u0026dr=gwfg84x.space\u0026dl=https%3A%2F%2Fgwfg84x.space%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=1458403052.1742535565\u0026auid=202055893.1742535563\u0026navt=n\u0026npa=1\u0026gtm=45He53j1v9186219929za200\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=102482433~102788824~102803279~102813109\u0026tft=1742535564966\u0026tfd=2044\u0026apve=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Mar 2025 08:35:59 GMT","end":"Mon, 02 Jun 2025 08:35:58 GMT"},"fingerprint":{"sha1":"B5:4D:C5:27:B4:49:22:F3:21:DF:88:3D:E6:05:D6:A1:02:98:C7:E2","sha256":"8F:EA:F9:63:27:3E:6E:CE:76:4C:58:EF:4D:BB:FE:5E:7A:BF:6C:0F:07:23:54:44:71:C7:91:88:14:F4:42:6D"}}},"request":{"raw":"POST /ccm/collect?en=page_view\u0026dr=gwfg84x.space\u0026dl=https%3A%2F%2Fgwfg84x.space%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=1458403052.1742535565\u0026auid=202055893.1742535563\u0026navt=n\u0026npa=1\u0026gtm=45He53j1v9186219929za200\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=102482433~102788824~102803279~102813109\u0026tft=1742535564966\u0026tfd=2044\u0026apve=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:25 GMT\r\npragma: no-cache\r\ncontent-type: text/plain\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://gwfg84x.space\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/67d4858e5826a7e0e19175155fdbe9b30e15a50c.png","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/67d4858e5826a7e0e19175155fdbe9b30e15a50c.png HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 33944\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"00000000000000000000000000000000-1\"\r\nlast-modified: Thu, 15 Sep 2022 12:02:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 18273D0AB652D965\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 7133\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1EVx02shxzsx88RgM9r3gAIayKj9iE5IbyYMTvR8Ir35%2FFhr5GFb9W39aNd0eRx8%2F1h6dp14ovkt23bbgPKoj7jT3qNqeN22W%2BgKxaG7Vyt%2F%2B8Kj%2FYaVLOWVXHkE9Ih%2Bng%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 923b1bdf2f1656be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=911\u0026min_rtt=444\u0026rtt_var=403\u0026sent=658\u0026recv=169\u0026lost=0\u0026retrans=2\u0026sent_bytes=882783\u0026recv_bytes=4259\u0026delivery_rate=70564507\u0026cwnd=284\u0026unsent_bytes=0\u0026cid=874feb8d33a12a41\u0026ts=162\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33944,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"0072e017fdc6c69139621c8f43656880","sha1":"51f41591e40b271f17c87a461bfcb3cb9d12d897","sha256":"53c134ab1daca2c4552c399830eff05ae04180a9d77dc35cf2853f7bdce49538","sha512":"d6a72540e7e009b0ce9209fe19249111ee520fbd1fbccbf9dda34049c023dfc768cbf35f8bf9830a0d17ea60f6b452bb9ae90d65a354f8856d5c741312c9bee5","ssdeep":"768:8YSGhAIDumI1r1HLay1oBLVKyTAh6OC6S8Vfdrkpxc49t7F:KNID3CHLaoo/KvtrdrUco","tlshash":"e1e2e1ba5b103399ddde85711034e5aad60234c89619f760b7c7c2e7329e823ba8d71b","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-07-16T21:51:53.239985Z","times_seen":40,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":117,"dns":9,"connect":6,"send":0,"wait":8,"receive":2,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/providers/espressogames.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:29.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/providers/espressogames.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=dMvsRdKK57O6FfEZ; __ddg10_=1742535568; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=LDxhB9xs0V0xfsdb; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg10_=1742535569; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 57215\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-13336\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":78646,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f51530da007b3a69dbd8491f5af146cc","sha1":"46e214e088686979f0e30d9896e7d028ed44e285","sha256":"634f53636137b25d5fea59444c72a0b4079749f33e5da9e653cb0b83bd0fa728","sha512":"4c4c0d6f19b035c6d19eb6abc7a5f0da4d048fc68c77661a616fc11c43b17a2f09a6a7b5ca27afc9b6ff7f58f2a5a0adb5e965ab881065af33f257c624335f95","ssdeep":"1536:LC/q6v9+Mv0DcQAe4BawAGyvukywwkuw2lrIhIepJtITAkzoHxF:uC6v9+vcQAfBjYDuvw2lrIDj09zC","tlshash":"6a73127d3b0295a93b4ae184b3e40d017cd7852edff9ce7af2481648813f5591ca8b63","first_seen":"2023-05-21T11:43:23Z","last_seen":"2025-03-29T11:19:57.799121Z","times_seen":17,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/bonuses.Dn_RtInB.css","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:31.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/bonuses.Dn_RtInB.css HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=8EENvKVInibx7yp1; __ddg10_=1742535571; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=E69FyvqG4mM1BhWX; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg10_=1742535571; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\ncontent-length: 3793\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-5d62\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23906,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (23905)","md5":"8b19d98b736f6e138d4307501c9b2fa2","sha1":"89cf984883955a21eb35d371f2a800f8ee6edfea","sha256":"ada6f0d1c02e8a3ebdf9ae8719557a9568e1b9502c232050398a09a24faca693","sha512":"ac0620a1125b20f5e31f16864bb6924faf02fb74169594491652d28f4752b77fd918d61e51891f8b6b3c7e731bed7c24c6b92dd811dff056767037434447e905","ssdeep":"384:NrHUq+JItL7BJ0Rmtl5Bkc3cTRByP45MZnMipaI6:F0qg+7m2yyP4GnMip/6","tlshash":"18b24231742d6468f037dad674e46a9c351c760796434fbbda296c79c9cb0e73632348","first_seen":"2025-03-21T05:40:08.924314Z","last_seen":"2025-03-26T02:25:21.301073Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gwfg84x.space/games/casino/lastBets","fqdn":"api.gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Mar 2025 15:13:14 GMT","end":"Mon, 16 Jun 2025 15:13:13 GMT"},"fingerprint":{"sha1":"BF:F6:26:CD:19:DC:7A:9C:43:5D:6C:E2:14:15:6C:4A:04:14:44:99","sha256":"BA:E2:88:D9:EB:25:85:70:88:7D:30:E4:9C:EB:DE:65:CB:CC:3E:F0:3E:AE:33:E2:5D:87:13:51:8A:CA:D4:E9"}}},"request":{"raw":"GET /games/casino/lastBets HTTP/1.1\r\nHost: api.gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=uR6zvrxYy3N5eiHo; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg1_=AvKtJ5XCBk9Gu5Gd9i5y; Domain=.gwfg84x.space; HttpOnly; Path=/; Expires=Sat, 21-Mar-2026 05:39:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 21 Mar 2025 05:39:26 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 85\r\naccess-control-allow-origin: https://gwfg84x.space\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 9d69474b-68ae-4bd7-a064-c37d6bfd1ad4\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1494,"size_decoded":0,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with very long lines (1681), with no line terminators","md5":"3512a03761c479b7b916dbba1339e866","sha1":"56a8c3d7c62d25a292245ae0d0e4c158e443db9c","sha256":"ba6e02b7caf63b64aec2540e120f5bea9a88d0a115b23faa2f3304b6c946e9d3","sha512":"2bf875a8fbe7720e9e9d810858f018b95b2aaf3ec2ffb8f02bfc49344de06105b601992b43276958fe15d75a3e1b8554805588072ff9bee3a475b1997dc6b6d4","ssdeep":"","tlshash":"2531c098ac3dcce4e090495c1e3f6fb6360da10b15cf12d4e9ebbe1543a04b2d1b4ca5","first_seen":"2025-03-21T05:40:08.925169Z","last_seen":"2025-03-21T05:40:08.925169Z","times_seen":1,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/bafa5a9b796d27d66b3a841747acaf5bfe847646.png","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/bafa5a9b796d27d66b3a841747acaf5bfe847646.png HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 40791\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"00000000000000000000000000000000-1\"\r\nlast-modified: Thu, 15 Sep 2022 12:02:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 17EB481A8498AF34\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 7133\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3sQKAWOU0i1UPR4Q8VCBeH30f05nm1HI64lhQDZFLLJvNUV8i6NhA8nBZ%2FwHz4nO5Gjlhc5KXUP%2F3xGZD1aoOIsucwvHIK%2Bl7fm%2BSsS2iLIzTHhM4%2FbTCeYkDD0v2YIUTA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 923b1bdebec456be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=725\u0026min_rtt=444\u0026rtt_var=298\u0026sent=92\u0026recv=35\u0026lost=0\u0026retrans=1\u0026sent_bytes=104801\u0026recv_bytes=3011\u0026delivery_rate=20435483\u0026cwnd=256\u0026unsent_bytes=5616\u0026cid=874feb8d33a12a41\u0026ts=99\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40791,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"77f59b45be963b4ca2bda9222fa70ff0","sha1":"afb00906a80468331d69af40ebaa17cc775a34cc","sha256":"00ca2a9d646426dcf62e70bfc4e9239b8676001328541b3f76831988b02b0612","sha512":"5bd5fc205c1899a076643e69b0a4801e1307ff6e3c442abaadefb6d68a4a0c1b9020d6bbe3a5d76aab53fa87ddb4c3f716227db6204b7f118d730324a003b61e","ssdeep":"768:0GLlGJ2u6ngOfhP9PB1ueYoT0nbm5SXogYkzc380L7apgZT813Kd1u3CVzZ18GVw:NGJX6PP9PB1tYoT0bmkX5xAS4YZE1nJs","tlshash":"0303f158d7f98321458e2d5af3bf15d5a4548ee82664f3f60cb036bb425e4c2c8b4d27","first_seen":"2023-09-23T12:39:05Z","last_seen":"2025-03-29T11:19:57.837908Z","times_seen":20,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":33,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/J79K9xgfxwT6Syzx-UyWdD89/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:24.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Mar 2025 08:37:01 GMT","end":"Mon, 02 Jun 2025 08:37:00 GMT"},"fingerprint":{"sha1":"63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B","sha256":"E5:08:EF:15:62:0C:70:BF:82:8A:23:7E:52:A0:03:CC:BF:47:9D:AB:89:97:C0:F6:BD:0C:85:14:3C:09:7F:AA"}}},"request":{"raw":"GET /recaptcha/releases/J79K9xgfxwT6Syzx-UyWdD89/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha\"\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 220830\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 21 Mar 2025 04:28:18 GMT\r\nexpires: Sat, 21 Mar 2026 04:28:18 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 10 Mar 2025 16:03:14 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 4266\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":558604,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":63,"dns":1,"connect":8,"send":0,"wait":8,"receive":31,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/7e4352eb49dad04b797ce6b1c6a2e99dcd378f74.png","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/7e4352eb49dad04b797ce6b1c6a2e99dcd378f74.png HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 34333\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"00000000000000000000000000000000-1\"\r\nlast-modified: Thu, 15 Sep 2022 12:02:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 1812C4A0CF132684\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 155\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hVo8IuT0PZ9WuGln%2B35yqw03qV0QrMNYl5CFxSd5g1EUqACLTvSowYOlG22Ak4yE7Fv2pOfTRiyN16%2BhxqtG%2FtYUqxqxijiVbQxFKkS5BdRQMiALR78nXQ62QNoiDkLdZA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 923b1bdededa56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1480\u0026min_rtt=444\u0026rtt_var=1781\u0026sent=282\u0026recv=60\u0026lost=0\u0026retrans=2\u0026sent_bytes=371340\u0026recv_bytes=3345\u0026delivery_rate=24348375\u0026cwnd=282\u0026unsent_bytes=23048\u0026cid=874feb8d33a12a41\u0026ts=114\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34333,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"3a08bf816dbe5d58df213c6f4fd77177","sha1":"cf2600b0891b717f47bdbc2d53523e17cc7065c9","sha256":"d912d5fa092dc49b9fc1e27afc82f40a6ae1ee0dc16736eef37ddcb6b6fc5fcd","sha512":"0f2db5c4f8d978104fa7faeef9b30b6860166c128c32303f98046da3bf6232efe6cab366f7db93264713819ebc0ca2716f4992c60b0e486b8f1e6c2fcc632d20","ssdeep":"768:MjR1nsLnaKILL30CAgSUsDL6qrEbn9uxJHxHPI:s1sbSXRHmJ2","tlshash":"a1f2f1fd133917ca5c5fbc4062e11274edef0b748380d9c3a9b6c5b970ae9589683e68","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-03-01T21:47:53.39896Z","times_seen":65,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":27,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/default.DJkcUsIk.css","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/default.DJkcUsIk.css HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=dM6hkqZOUZ8VbEXN; __ddg10_=1742535564; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=mWTlSWJpwMpyP98o; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\ncontent-length: 22549\r\nddg-cache-status: HIT,HIT\r\netag: \"67dc31ab-1f401\"\r\nage: 2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":128001,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/PragmaticPlay/517d2e03971d41f6875781c9d5bd4443.png","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/PragmaticPlay/517d2e03971d41f6875781c9d5bd4443.png HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 28436\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"292c32f96313eb629c6048365b9cfd30\"\r\nlast-modified: Mon, 06 Jan 2025 19:16:14 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 181831D56D9FD578\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 7133\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vxij3br5xnE30%2F%2B%2B3T5CxMV1rhPPwKFFYDapFIibX96gTh%2BdOKvSYcX6%2BnvB8CpUoPYYgSI%2BaHXmkXvD9e1tqMl0JYGGHhjy2FNDBu%2BHoZdgEuOg60ddxxY0sl00eo4h6w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 923b1bdebec756be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=775\u0026min_rtt=444\u0026rtt_var=325\u0026sent=96\u0026recv=36\u0026lost=0\u0026retrans=1\u0026sent_bytes=110049\u0026recv_bytes=3011\u0026delivery_rate=20985507\u0026cwnd=256\u0026unsent_bytes=26608\u0026cid=874feb8d33a12a41\u0026ts=101\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28436,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"292c32f96313eb629c6048365b9cfd30","sha1":"6a4d8d3da115b58939986073e0f1e6e9a169ff75","sha256":"31082483e8edfda486e628f211c772c0638b940f0838dc7bccc910fbf23d8d09","sha512":"078c6bef153f7f4958a768a44ad93ed5f3c80c46ebcc36af22bbf63af8afc009609495d28562cf4e344218b5a91d7b90923d98094b3153b71f70bcecfa065684","ssdeep":"768:UELWwDo/GftPDWMePOGaMfMtRY3vBmG7NsMIZySnx8A06c:rWlGfRDX0CtS3AGJ5I5xO6c","tlshash":"55d2f1a75637eb3d2f64a1b9588bcc7fd1899acd417e44d18389994c124f6db8372c0c","first_seen":"2025-03-21T05:40:08.927157Z","last_seen":"2026-07-12T17:41:43.58519Z","times_seen":35,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":34,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/SlotsListPage.CEnp1OGr.css","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:31.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/SlotsListPage.CEnp1OGr.css HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=2BFtV41K05TOVH6y; __ddg10_=1742535569; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=6KnFj8JbgJlRFSL0; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg10_=1742535571; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\ncontent-length: 2359\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-2e1c\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11804,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11803)","md5":"121a58aae929c804fbf96897cfe30d76","sha1":"e12f1fbb93779f846cfb40b3899ac77f3787647e","sha256":"31b45bc29dede137e96b106ca94c0824a161100e67673fe10c14b3fa5e6e53ac","sha512":"910c4c2b9db8426ae82093452060c7fe9883d2f3aefd60742be604f1bcb094f249ac0771c43552f1574b2bf5bfd235cdf92c5f337e6bb4bf00ee82f74511269f","ssdeep":"192:qF75HTpr8y5ROBPVU2bTJhVbEGDkDCaDTWDqqdtL7lBh0GoS+az9:qfHqyoD16Cw4q+zaGoS+m","tlshash":"45328621b98f2d1d3077e154f1d29e8e303cd713c42707aeba48a516cd8799b6f720a9","first_seen":"2025-03-21T05:40:08.927812Z","last_seen":"2025-03-29T11:19:57.763408Z","times_seen":8,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/D8RhbWKa.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:31.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/D8RhbWKa.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/B_c0Fhba.js\r\nCookie: __ddg8_=HoQ1GuZP8P6g54xL; __ddg10_=1742535571; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=FMCvWDBMaIkRSvgL; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg10_=1742535571; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-929\"\r\nage: 2906\r\ncontent-length: 1025\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2345,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2448), with no line terminators","md5":"503120d0e7e530fff20fc6ad071b9b5d","sha1":"0d3d30047bca677386552276aaab20bcc2bb4335","sha256":"ba4173c52acc628cfdfd85bc4a1899205388f31b3ad558bf4d927abe5ea0904c","sha512":"bfa062cee85e13dc5aea217daee794c36a5965184feb2af9e235e995a59295d8abde4adb3790e2e4ffc3edfb60a87f6d6e5030b945ecf89faff369387ed889eb","ssdeep":"","tlshash":"97514063b251a931e263cbdb5d948838b085f2bf2ee589d0949ddf7e54282b0670fb40","first_seen":"2025-03-21T05:40:08.928464Z","last_seen":"2025-03-21T05:40:08.928464Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/Loading.Bk2PI8_1.css","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:21.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/Loading.Bk2PI8_1.css HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=s6a1IZLaTAntwD2B; __ddg10_=1742535560; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=DwzEH88yZAwqkLNA; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg10_=1742535561; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-ee\"\r\nage: 0\r\ncontent-length: 144\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":238,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"9cb0ebaa6bbb2e2c53fc0a4c01db8426","sha1":"1e8221adcd8bc188a7eef58438272e790703b45c","sha256":"23db996a156ddaf2b44b9b68bbf0992bdb544a6e94f45656ad7cd30ae8a4ec43","sha512":"215868f7ef7260a00114c539d8f0a19dd52c5ccdd330068fa3def7b4676087ed4e99c5e1d59216de13784dde1d3a0b91a667bc2ceb45c07d2951530fc5b73b21","ssdeep":"","tlshash":"ecd0a7d5864444530f670a3311cc5d59c8b02ec2c8be1c1eb399d1aa03492a933b7a69","first_seen":"2024-08-19T21:28:00.794175Z","last_seen":"2025-03-29T11:19:57.789559Z","times_seen":10,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recaptcha.net/recaptcha/api.js?render=explicit","fqdn":"recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:23.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Mar 2025 08:36:15 GMT","end":"Mon, 02 Jun 2025 08:36:14 GMT"},"fingerprint":{"sha1":"66:66:17:8A:0A:82:CB:9F:B3:66:1F:CE:88:E4:BD:CC:BE:E5:F3:8E","sha256":"06:74:30:59:11:23:B6:46:46:B5:D5:82:0F:0E:70:B1:BE:77:32:A7:85:C4:0D:C8:6B:83:B5:4D:9D:4C:D3:B9"}}},"request":{"raw":"GET /recaptcha/api.js?render=explicit HTTP/1.1\r\nHost: recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Fri, 21 Mar 2025 05:39:24 GMT\r\ndate: Fri, 21 Mar 2025 05:39:24 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":912,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (912), with no line terminators","md5":"d13357d73f29c6e9f349fcb7b8654b07","sha1":"1be0e9d4cbd57d0b9a001e37296186bb339f5b97","sha256":"275d749e4e72e0bcabdb5ba02db9f36aa9a4dad8daf89ca45d39f1a6bf188779","sha512":"98e0d9fcdfe657bac1355af5ad2b2823eb18754cdfdb832a63975e30451262fab730c21fd01bd4792a70bbbd224f74a54f0c58bb7f848612e32654527599c73a","ssdeep":"","tlshash":"211140b50515b0384f3208f5e0ebcbb6f081202cf11889e8e105eac8af2d8dbce15988","first_seen":"2025-03-13T17:33:25.512321Z","last_seen":"2025-03-21T05:40:08.92993Z","times_seen":6,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":97,"dns":31,"connect":8,"send":0,"wait":19,"receive":0,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/CgVp1Teu.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/CgVp1Teu.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DmT_aqZN.js\r\nCookie: __ddg8_=OUfJMXjsch1vBlTq; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":710,"data":"{\"profile_id\":\"4e777dfc-cd7a-4902-a4b3-c8accc3953be\",\"page_views\":[{\"context\":{\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"platform\":{\"name\":\"Linux x86_64\",\"deviceType\":\"desktop\"},\"library\":{\"name\":\"koala\",\"version\":\"1.27.0\"},\"session\":{\"id\":\"1742535544931\",\"lastTouched\":1742535544940},\"locale\":\"en-US\",\"timezone\":\"UTC\"},\"message_id\":\"8bfb12a3-ede8-4e1e-bad7-91de42a424a5\",\"page\":{\"path\":\"/\",\"referrer\":\"\",\"title\":\"Puzzle - Modern Accounting Software For Startups \u0026 Tax Preparation\",\"url\":\"https://puzzle.io/?irclickid=\u0026sharedid=https://qovolta.com/\u0026irpid=2334778\u0026irgwc=1\",\"host\":\"puzzle.io\"},\"visit_start\":\"2025-03-21T05:39:04.941Z\",\"focus_intervals\":[]}]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=44uZKOB5UTBYd45p; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-17fb\"\r\nage: 2905\r\ncontent-length: 1916\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6139,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6204), with no line terminators","md5":"5e8ccbd0277da72f847e4349edbc962c","sha1":"4f0da54c9b8e1306907c1b75d8e921f215f88d4b","sha256":"5bcb9b11bed6241ff0d82847cd105379d96452d5fa7ee44b92898b73fc2b276c","sha512":"e34ff43f83c9bad9a873f564cfd64a91a54bb529516e23050099c08825183dfe145be9154322ee151e3966ea17a0662b53b5addcfae8e11de5a2debc722334f1","ssdeep":"96:35vQk7yW+mtAD5YkqPt/mnrORT95EnRtjbkXJcBHjw/2V9r04xzfiKO:35vQKCwPsa/GwX2Njw/2VGefin","tlshash":"f0d195ea534a007a3c26e245a8d398709f215b95b0fb905d7c7eddc6f24aa42fd74b30","first_seen":"2025-03-21T05:40:08.930526Z","last_seen":"2025-03-21T05:40:08.930526Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/GrfQ5YPu.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/GrfQ5YPu.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DmT_aqZN.js\r\nCookie: __ddg8_=OUfJMXjsch1vBlTq; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=j4HVEyE7oKtekFGk; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"67dc31ab-22f\"\r\nage: 2905\r\ncontent-length: 333\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":559,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (562), with no line terminators","md5":"b5079da41aa4c7a4f50474648dd7e546","sha1":"918b213032e8819bc8f0eb4cb8916aba84a1bc98","sha256":"e371ed695b77fdffaf0e8a73fe62bc612cd01d4c3ec3097cecc53c0b93e510b5","sha512":"03223f9ffc8ac1bd704a2162065baf61df1ce87ecbc9a82b645d2127b65fa2f8e4bd9a348be0d7492cfe1d90ec2f7c7065bc97b9e563496395958cc69b89d870","ssdeep":"","tlshash":"96f0c0de9106169bf91dd59fdf14fa2d94101aacef8b5202b1a593245330996111c4b4","first_seen":"2024-08-19T19:57:21.668567Z","last_seen":"2025-03-29T11:19:57.776229Z","times_seen":9,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/053725efd44e5da7adb844b11bda9bf4/No%20Limit%20City/ddc8f77cc0bb4f0e82d79f2727bce84f.png","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/053725efd44e5da7adb844b11bda9bf4/No%20Limit%20City/ddc8f77cc0bb4f0e82d79f2727bce84f.png HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 110392\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"0bbbaa5b761aa5df26b02e97a4998401\"\r\nlast-modified: Thu, 15 Sep 2022 14:46:17 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 17E6F635B0E3460C\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 7132\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=HpACL%2Fyf5nZprKOdOc3N0ABA8R3JAm7eH7cc1znM8xRPyTFxQ0UJ0Efp1KAlUAHgWBiJYASmZ%2BXS%2F08GEjAhMcAfx6Ic5cxla0aDTocypkWvAJNvNVTMdWCh8S%2FSykeOwQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 923b1bdebec556be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=783\u0026min_rtt=444\u0026rtt_var=353\u0026sent=86\u0026recv=33\u0026lost=0\u0026retrans=1\u0026sent_bytes=96609\u0026recv_bytes=3011\u0026delivery_rate=18897226\u0026cwnd=256\u0026unsent_bytes=13808\u0026cid=874feb8d33a12a41\u0026ts=99\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":110392,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit/color RGB, non-interlaced","md5":"0bbbaa5b761aa5df26b02e97a4998401","sha1":"cbd3b1b2ad4f0d8c6fa3bbaff8fe9801f8142cfc","sha256":"7cc96f13e52306fceb53f17f3534ea4b1d4ba25cf8903cf07b89a4ce37292189","sha512":"5fe6ebcb33e8c0c144ae007073cc5ea93744b7317851b5fcf03ff87b3e6760394ea61a40abfab87aa4ff36823b0ad3d512325c9e201bdd95233d8016bf7de108","ssdeep":"3072:38cdLYB4vCQ9USb6cP8Ye7gkAHIYNQPcjjxjCVbS:38chYB4d9U8f0GkAjWcoV2","tlshash":"c9b312aafeb077b84139ea98887346f491d533bcf5d97bb4f30515c8594f05048cab92","first_seen":"2023-05-21T11:43:22Z","last_seen":"2025-03-29T11:19:57.746616Z","times_seen":13,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":32,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BTxe0m-E.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:31.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/BTxe0m-E.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/B_c0Fhba.js\r\nCookie: __ddg8_=HoQ1GuZP8P6g54xL; __ddg10_=1742535571; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=V6mkuBwq2Fvs8gFQ; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg10_=1742535571; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"67dc31ab-c9\"\r\nage: 2905\r\ncontent-length: 145\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":201,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"4bde625bc3ab1fc06f5958e7cb535a24","sha1":"ed4a954bc4740e0ec547e2e0014206bbd0d5f420","sha256":"c2bdf9011f11a81fb3a459e84000a8e3704c288b1b6430f7dbf3a3842cc1a30b","sha512":"14c3be608e81524f2a8f724d2e915c3e3cddde2e3a7e2e09f4c21f6b2a5fcc7ec276fef2ecb282de3785799569fed8954590d9b6f1672a6ee79c1ed617a01045","ssdeep":"","tlshash":"6bd0c443fd1114cf53471753f3310331553404c431551331557434c7440f41d4c11f55","first_seen":"2024-08-19T21:28:00.771255Z","last_seen":"2025-03-29T11:19:57.781052Z","times_seen":9,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/analytics/events?event_name=slider_banner_view\u0026pgi=GTM-KN757LMM","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:37.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"POST /analytics/events?event_name=slider_banner_view\u0026pgi=GTM-KN757LMM HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 527\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=o1ae4wqUTCT8xuSs; __ddg10_=1742535572; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535577.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":527,"data":"{\"client_event_time\":\"2025-03-21T05:39:37.642\",\"client_event_time_utc\":\"2025-03-21T05:39:37.642\",\"client_time_zone\":\"UTC\",\"event_properties\":[{\"page_url\":\"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\",\"referrer\":\"https://gwfg84x.space/\",\"page_path\":\"/\",\"query_string\":\"?stag=819_67d75bad718f91aca41894cd\",\"domain\":\"gwfg84x.space\",\"gtm_container_version\":\"11\",\"geo\":\"\",\"banner_name\":\"bonuses\",\"position_index\":\"4\",\"section_name\":\"main_page\"}],\"event_type\":\"slider_banner_view\",\"uuid\":\"\",\"session_id\":\"\",\"user_id\":\"\"}"}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=fn2RhDtjguF5ASZJ; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:37 GMT\n__ddg10_=1742535577; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:37 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:37 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:37 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":188,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/js/fp2.min.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:23.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /js/fp2.min.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=t44G9X48ms9HCwMK; __ddg10_=1742535563; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=qam8GKmGf76JSWGS; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg10_=1742535563; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nddg-cache-status: HIT,HIT\r\netag: \"67dc31ab-883d\"\r\nage: 2\r\ncontent-length: 11235\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34877,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (34698)","md5":"02087a3f4f46b15bc198570d800bff41","sha1":"e59f5e3521d8c60e5772de1f65c90e5b87d9eb9e","sha256":"e753042decd90a96d0636a7df16df556860af92ca09ac37f0f6ab1d574acd1f1","sha512":"2c733c348e26c0b400befd5ccac6734eb06a0ca0c8c638f8d3a66afd75ea5860c6cfd3a913ba6dd6824bd9c629c2f28d14204efa625b10fa8fd9b366ba82c968","ssdeep":"768:J2N6EbuZaWRhGT8e20R5J++t6cOrVrzib:oxuZaWRhGoF0R5UVra","tlshash":"e6f21b96b2e8373c8143b063394bec15fb799495e784808a5e2d4180f8758e9e77bdf8","first_seen":"2023-07-23T18:22:17Z","last_seen":"2026-06-26T20:23:29.90284Z","times_seen":1217,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/roboto-bold.BeRaP8H0.woff","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/roboto-bold.BeRaP8H0.woff HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=hixM8UQWJnhyJBkc; __ddg10_=1742535566; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":1729,"data":"{\"properties\":{\"path\":\"/\",\"referrer\":\"$direct\",\"referring_domain\":\"\",\"search\":\"?irclickid=\u0026sharedid=https://qovolta.com/\u0026irpid=2334778\u0026irgwc=1\",\"title\":\"Puzzle - Modern Accounting Software For Startups \u0026 Tax Preparation\",\"url\":\"https://puzzle.io/?irclickid=\u0026sharedid=https://qovolta.com/\u0026irpid=2334778\u0026irgwc=1\",\"tab_url\":\"https://puzzle.io/?irclickid=\u0026sharedid=https://qovolta.com/\u0026irpid=2334778\u0026irgwc=1\",\"initial_referrer\":\"$direct\",\"initial_referring_domain\":\"\"},\"type\":\"page\",\"channel\":\"web\",\"context\":{\"traits\":{},\"sessionId\":1742535544334,\"sessionStart\":true,\"app\":{\"name\":\"RudderLabs JavaScript SDK\",\"namespace\":\"com.rudderlabs.javascript\",\"version\":\"3.16.1\",\"installType\":\"cdn\"},\"library\":{\"name\":\"RudderLabs JavaScript SDK\",\"version\":\"3.16.1\",\"snippetVersion\":\"3.0.14\"},\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"os\":{\"name\":\"\",\"version\":\"\"},\"locale\":\"en-US\",\"screen\":{\"width\":1280,\"height\":1024,\"density\":1,\"innerWidth\":1280,\"innerHeight\":1024},\"campaign\":{},\"page\":{\"path\":\"/\",\"referrer\":\"$direct\",\"referring_domain\":\"\",\"search\":\"?irclickid=\u0026sharedid=https://qovolta.com/\u0026irpid=2334778\u0026irgwc=1\",\"title\":\"Puzzle - Modern Accounting Software For Startups \u0026 Tax Preparation\",\"url\":\"https://puzzle.io/?irclickid=\u0026sharedid=https://qovolta.com/\u0026irpid=2334778\u0026irgwc=1\",\"tab_url\":\"https://puzzle.io/?irclickid=\u0026sharedid=https://qovolta.com/\u0026irpid=2334778\u0026irgwc=1\",\"initial_referrer\":\"$direct\",\"initial_referring_domain\":\"\"},\"timezone\":\"GMT+0000\"},\"originalTimestamp\":\"2025-03-21T05:39:04.339Z\",\"messageId\":\"da55cc04-2037-483d-b986-975fc5933bce\",\"userId\":\"\",\"anonymousId\":\"bb16ed34-1c3d-4caa-a6e2-5510c8c31f63\",\"integrations\":{\"All\":true},\"sentAt\":\"2025-03-21T05:39:04.341Z\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=pLRwz1PwePAsQ9RA; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:26 GMT\r\ncontent-type: font/woff\r\ncontent-length: 141532\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\netag: \"67dc31ab-228dc\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":141532,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 141532, version 1.0","md5":"ba3d7f35e4e84772d778ced098c5a40c","sha1":"248262cc71832afb331a103116b8a5f061693cc3","sha256":"7abf45d601fc5dbc8c482c9cf62916b8463b14d4d9a90e0b5888952401f784e5","sha512":"6cc5d27fdd4030a66cde525d52c9cfebc1a2caa3ebe10a49b538694cba096fdc7ea57f2c4a2ea153bd102885cdb9e92d8c5c129dc38251be93bc6426ada89a4b","ssdeep":"3072:4SGRte9oLIED5Zc02YQeQDKyY6s10mehsr4QIaw545V:2GYhX27e0Jl3s7Ii","tlshash":"fbd3229fd04ca4e2c57fb6e1c4e74ef0a5b53cb6d10e358f1292c9118207ab9e8e6649","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-04-25T06:32:47.439749Z","times_seen":64,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gwfg84x.space/games/casino/common","fqdn":"api.gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Mar 2025 15:13:14 GMT","end":"Mon, 16 Jun 2025 15:13:13 GMT"},"fingerprint":{"sha1":"BF:F6:26:CD:19:DC:7A:9C:43:5D:6C:E2:14:15:6C:4A:04:14:44:99","sha256":"BA:E2:88:D9:EB:25:85:70:88:7D:30:E4:9C:EB:DE:65:CB:CC:3E:F0:3E:AE:33:E2:5D:87:13:51:8A:CA:D4:E9"}}},"request":{"raw":"OPTIONS /games/casino/common HTTP/1.1\r\nHost: api.gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwfg84x.space/\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=hIxttl0vvDkcSZmg; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg1_=faroOYvzZOYLSZKSEVuV; Domain=.gwfg84x.space; HttpOnly; Path=/; Expires=Sat, 21-Mar-2026 05:39:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Fri, 21 Mar 2025 05:39:26 GMT\r\naccess-control-allow-origin: https://gwfg84x.space\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: 7ca3b03e-488e-47e5-9f95-fb091cfb035c\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/DxHYAea3.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/DxHYAea3.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=hR8641O7of70Crwg; __ddg10_=1742535566; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=DnXSQ2VYNUWOYx2O; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:27 GMT\n__ddg10_=1742535567; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nddg-cache-status: HIT,MISS\r\netag: \"67dc31ab-ab3\"\r\nage: 6\r\ncontent-length: 1226\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2739,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2790), with no line terminators","md5":"2d66a9835ff045df8f72dfddbcee6364","sha1":"64bfb27658b175ce7a3ef69e9645aca5f34943ef","sha256":"3c5dfd9994172526f0dacee97823d3beb2ae0401ba0ab013d01330096a8ff032","sha512":"ca315e9b2f4ab084fdada1652f88168870e70a7725e64dadc0e3251946bf9ed77b68f92799941f4729ea1868f68d00c86aaf5212cc831f1d12626a2349e94035","ssdeep":"","tlshash":"89517654b8c0c6558f46cd17eef2bb295d080682db2388f9a7c5181576cb1aff99b307","first_seen":"2025-03-21T05:40:08.93528Z","last_seen":"2025-03-21T05:40:08.93528Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/cdee9014e4d2f1811fca73b151d093dddab267bd.png","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/cdee9014e4d2f1811fca73b151d093dddab267bd.png HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 33368\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"00000000000000000000000000000000-1\"\r\nlast-modified: Thu, 15 Sep 2022 12:02:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 181360FB09C553F5\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 7145\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=31K9Kswkrt6Oq3wz6IUie8wJzd%2BZ5hDPxSpQj7IsDp0q8N3Rff58IbbcfAXgIx5LU48FO1%2B4Mcm%2FWknuNkvEHOC7k39IUO%2BSFgGsS966UxkCq%2FbrCoInEB2QUzZIL4OIJQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 923b1bdebec256be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1035\u0026min_rtt=444\u0026rtt_var=694\u0026sent=326\u0026recv=70\u0026lost=0\u0026retrans=2\u0026sent_bytes=429484\u0026recv_bytes=3573\u0026delivery_rate=34070588\u0026cwnd=282\u0026unsent_bytes=26984\u0026cid=874feb8d33a12a41\u0026ts=118\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33368,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"556b860eb17cfa6f8fdc338ece02a958","sha1":"791d2e9a29244c70eba438000f50008eae113932","sha256":"3368734f4cf53acbd15d3680efe367fd3961f0db6c833b11e42647ab13ad2b5b","sha512":"117c294931b7f1ea10fa14125979e75d3dd7cb12703384a92dc486a501369cce6283341b4f707d0098db48deb700c5205d93b0d833ea6dcc969bcd0f3127c7d0","ssdeep":"768:/6KG8tImiBsY+enLcpalasRXNJD5QINWGGcrZ6NMLqolU3:yKG8t+BsXpaYsxlQ+3Xg","tlshash":"e8e2f108acc87f54536785a81210e58f9f29d8ccb5e7968b8b8f1c204879c586c3ebde","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-03-01T21:47:53.332676Z","times_seen":51,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":48,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim2.ru/button.php","fqdn":"gx.webim2.ru","domain":"webim2.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"webim2.ru","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Dec 2024 10:41:08 GMT","end":"Fri, 28 Mar 2025 10:41:07 GMT"},"fingerprint":{"sha1":"39:22:2C:F3:51:C3:18:D9:E0:56:1C:F4:75:2C:8C:7D:D7:C6:50:3F","sha256":"3A:AC:C1:DD:28:20:B3:C8:03:99:4D:E0:23:B0:5B:D4:F5:06:10:9E:06:A7:B3:20:A3:45:F2:29:D5:3E:95:63"}}},"request":{"raw":"GET /button.php HTTP/1.1\r\nHost: gx.webim2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 21 Mar 2025 05:39:26 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nConnection: keep-alive\r\nX-Webim-Version: 10.7.75\r\nEtag: \"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a\"\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"325472601571f31e1bf00674c368d335","sha1":"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a","sha256":"b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b","sha512":"717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc","ssdeep":"","tlshash":"bf900003ea80c002c2a2c0300e0ccb802b88b0308a28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-05T06:29:39Z","last_seen":"2026-08-13T03:09:56.947675Z","times_seen":96634,"resource_available":true,"data":null}},"time_used":464,"timings":{"blocked":201,"dns":1,"connect":39,"send":0,"wait":35,"receive":0,"ssl":184},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/ThreeOaks/7925d4c8b4aa44a1929abd608d1ff874.png","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/ThreeOaks/7925d4c8b4aa44a1929abd608d1ff874.png HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 35878\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"2180cf705991319ff9e63245a169e5f5\"\r\nlast-modified: Fri, 26 Jan 2024 10:04:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 180ACD83C58E968B\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 7133\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8jk5rHPSoMin9Y266F1wCsQyerbb1kW3w2GvADZUxVaY4fO7RC6DVBpppX72Uaa2FaM9eRsCHW7SZZ3P%2FcfQWCiWWV0EVspqUz0UwxpuV6t8HEQksfos1YGbTu2yTtRMGQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 923b1bdebebf56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=783\u0026min_rtt=444\u0026rtt_var=353\u0026sent=79\u0026recv=32\u0026lost=0\u0026retrans=1\u0026sent_bytes=87393\u0026recv_bytes=3011\u0026delivery_rate=18897226\u0026cwnd=256\u0026unsent_bytes=23024\u0026cid=874feb8d33a12a41\u0026ts=99\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35878,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"2180cf705991319ff9e63245a169e5f5","sha1":"09194e582590635e85096164137b7b297e2461fa","sha256":"61ddc27e8108acb7cb5c9f70106dc71b5896b1159944b19130240797caeceb08","sha512":"05098c72c6a1a4be35340f397c6f157f31f0c251b3dae030e58d3b278a959151bf078f74ffc65b8b6ff823ca85184a1e68732b18bd44b9325598970251b1da97","ssdeep":"768:ABRCN6HeNb2yE0FPMU790R8GZvl7eFfoSjuMCfGgSYpQQ:0E0HA2yNFPMU7+KGZkxoSiu7oz","tlshash":"06f202923032a0e40739865975f0b747ec9c10b1b7f74b5b54ab8266ef2c260a7a7c5f","first_seen":"2024-05-07T05:57:00Z","last_seen":"2026-07-16T16:33:15.724566Z","times_seen":51,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":33,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/roboto-regular.BtWrZLw2.woff","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:23.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/roboto-regular.BtWrZLw2.woff HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=r1ryIKEwRgebQf7Z; __ddg10_=1742535563; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=b4XJk55yUS53ZfDg; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg10_=1742535563; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: font/woff\r\ncontent-length: 139160\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\netag: \"67dc31ab-21f98\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":139160,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 139160, version 1.0","md5":"ae91f35c10375f1dab7137a298aba7c9","sha1":"6b9aae9dddb20bdfc56381f0d64bf54433977413","sha256":"264a621481c81a289ac3227cd63cc91902de13789dd9df920f0e2f465fa2bd38","sha512":"b0253e74fe7baf39316ec12622b1ace4899c51f6ce5c193e0ca2dbf713e4e1ce3d5ed4145d46680a91c68baa44bd73a31834e544c0d732f77975e72424151b60","ssdeep":"3072:2isY+Dpc1q2EHUmPsBut5j+mN9s+EIUb0Psp45nE:Tspc1s0osS5rc0Er","tlshash":"60d31255eb38110ff8be77f86dcad33408f471d5c7a322a4955802abae44fd4ea24da1","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-03-01T21:47:53.345572Z","times_seen":69,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gwfg84x.space/collect?r=273018","fqdn":"api.gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:29.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Mar 2025 15:13:14 GMT","end":"Mon, 16 Jun 2025 15:13:13 GMT"},"fingerprint":{"sha1":"BF:F6:26:CD:19:DC:7A:9C:43:5D:6C:E2:14:15:6C:4A:04:14:44:99","sha256":"BA:E2:88:D9:EB:25:85:70:88:7D:30:E4:9C:EB:DE:65:CB:CC:3E:F0:3E:AE:33:E2:5D:87:13:51:8A:CA:D4:E9"}}},"request":{"raw":"POST /collect?r=273018 HTTP/1.1\r\nHost: api.gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nRegion: RU\r\nContent-Length: 56180\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":56180,"data":"{\"ct\":\"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\",\"iv\":\"be4bf68a09d5652e0d31731deb47275c\",\"s\":\"31dc3319e7795435\"}"}},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=iAcbOOXlennGoii0; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg10_=1742535569; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg1_=QvnCnLt9qATqxeejEX4Z; Domain=.gwfg84x.space; HttpOnly; Path=/; Expires=Sat, 21-Mar-2026 05:39:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 21 Mar 2025 05:39:30 GMT\r\naccess-control-allow-origin: https://gwfg84x.space\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 96131fa8-6821-4065-97ca-2b8e6bb06d8e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":null,"data":{"size":30,"size_decoded":0,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"d779ac241d7f95987b93387d86408972","sha1":"4c2c82e4f94f2dd4a18fcdfa39d3fee1c49bd00b","sha256":"9764494f834c6eabe55e76bda0fe731f9290c67a1de3ba9f474c7a7db3bc0354","sha512":"b4657e59324d9356add82c53d4dc899225a547dd1d4fde2b4547a3a460318d0a51d927ed8136082536fce39c38873ae6c7eab3fa672bdfdffa12e59856372e40","ssdeep":"","tlshash":"f2800410f7d05c05d14701577154355103c141005040140315441704c10441540d51c1","first_seen":"2023-04-12T10:08:15Z","last_seen":"2025-04-03T01:40:36.715736Z","times_seen":153,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/logo.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:21.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/logo.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=s6a1IZLaTAntwD2B; __ddg10_=1742535560; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":1224,"data":"{\"profile_id\":\"4e777dfc-cd7a-4902-a4b3-c8accc3953be\",\"traits\":{\"posthog_session_url\":\"https://ph.puzzle.io/project/phc_SN4j31qLalSoC8v82P1Z4O29uynqYNlWbmU3vyEn60l/replay/0195b736-4d47-7704-a725-ff2b8bcba137\",\"posthog_session_id\":\"0195b736-4d47-7704-a725-ff2b8bcba137\",\"posthog_distinct_id\":\"0195b736-4d49-7f1f-bdc4-7b747181c90f\"},\"identifies\":[{\"context\":{\"page\":{\"path\":\"/\",\"referrer\":\"\",\"title\":\"Puzzle - Modern Accounting Software For Startups \u0026 Tax Preparation\",\"url\":\"https://puzzle.io/?irclickid=\u0026sharedid=https://qovolta.com/\u0026irpid=2334778\u0026irgwc=1\",\"host\":\"puzzle.io\"},\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"platform\":{\"name\":\"Linux x86_64\",\"deviceType\":\"desktop\"},\"library\":{\"name\":\"koala\",\"version\":\"1.27.0\"},\"session\":{\"id\":\"1742535544931\",\"lastTouched\":1742535544937},\"locale\":\"en-US\",\"timezone\":\"UTC\",\"source\":\"posthog\"},\"type\":\"identify\",\"traits\":{\"posthog_session_url\":\"https://ph.puzzle.io/project/phc_SN4j31qLalSoC8v82P1Z4O29uynqYNlWbmU3vyEn60l/replay/0195b736-4d47-7704-a725-ff2b8bcba137\",\"posthog_session_id\":\"0195b736-4d47-7704-a725-ff2b8bcba137\",\"posthog_distinct_id\":\"0195b736-4d49-7f1f-bdc4-7b747181c90f\"},\"sent_at\":\"2025-03-21T05:39:04.938Z\"}]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=4IX9OzNaKUBWXXUM; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg10_=1742535561; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-5f5\"\r\nage: 0\r\ncontent-length: 728\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1525,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"edd92783d68be32359307c77607e7b08","sha1":"26aa09f77fcf9deedc8940f6495c54c7ba1ba42e","sha256":"a162d44115dc8a3bbc7277fae9f9d27ff1c6163f9e050af6df5071630376558b","sha512":"c82ed112a594e4612880056e5059de439941372bc71bd4ee67248616128f54bd047afceb109a523bf7aec7939601bc15d91a57d69fae6d9242acd2469c5249ce","ssdeep":"","tlshash":"6c3150b1f359f35059098b078b1da961133e31fdfb60918c8ad79bba752512f846e8f0","first_seen":"2025-03-21T05:40:08.917639Z","last_seen":"2025-03-29T11:19:57.740387Z","times_seen":9,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":76,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/roboto-regular.BtWrZLw2.woff","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:21.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/roboto-regular.BtWrZLw2.woff HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=4IX9OzNaKUBWXXUM; __ddg10_=1742535561; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=XkHll2GRSOaAbBDY; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg10_=1742535561; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: font/woff\r\ncontent-length: 139160\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\netag: \"67dc31ab-21f98\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":139160,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 139160, version 1.0","md5":"ae91f35c10375f1dab7137a298aba7c9","sha1":"6b9aae9dddb20bdfc56381f0d64bf54433977413","sha256":"264a621481c81a289ac3227cd63cc91902de13789dd9df920f0e2f465fa2bd38","sha512":"b0253e74fe7baf39316ec12622b1ace4899c51f6ce5c193e0ca2dbf713e4e1ce3d5ed4145d46680a91c68baa44bd73a31834e544c0d732f77975e72424151b60","ssdeep":"3072:2isY+Dpc1q2EHUmPsBut5j+mN9s+EIUb0Psp45nE:Tspc1s0osS5rc0Er","tlshash":"60d31255eb38110ff8be77f86dcad33408f471d5c7a322a4955802abae44fd4ea24da1","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-03-01T21:47:53.345572Z","times_seen":69,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/ef5aa848cb6234dd6ff6a4610bfb6b8c8ecdcf96.png","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/ef5aa848cb6234dd6ff6a4610bfb6b8c8ecdcf96.png HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 23538\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"00000000000000000000000000000000-1\"\r\nlast-modified: Thu, 15 Sep 2022 12:02:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 1823AD6A859588B1\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 7133\r\ncf-ray: 923b1bdeeee756be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23538,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"21714aced848c5429bdbc1e1975dde05","sha1":"3df268e58050169f784d896ba59ba9364269f9ff","sha256":"63e2aca2d1ea721d14bd2424e9129963c19e7153e93addb1986760898705d611","sha512":"5d0f92ddf152117fe20879d2774ec0036230a8b58df63f284a5711e16cfc85896938238fbe9ba93a8d44e65db9a2195dc8b9f237a9de6211addad34cc5c942b2","ssdeep":"384:TDMXpTYs0PeRjCI91ZFECgOXyX0EqSP8mb6yg7jV0VSQlMrPQTmG41/JDKSAmL:TDopcMRjCI9pEPORSfufj+EQlx6f1BD/","tlshash":"24b2e0b06e40fa1a2e27d547789510f8ffd1fb65cc4ccd1560b9fa8258e156e9873c02","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-03-01T21:47:53.241668Z","times_seen":66,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":19,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/providers/ezugi.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:29.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/providers/ezugi.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=mdnhjFHyFlAtXYOW; __ddg10_=1742535568; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=mEU2OGKVgYuu5anE; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg10_=1742535569; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 111\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-97\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":151,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ad18a61f6c2e1ee07d264e007a1a1b3a","sha1":"1291a3006905a3c3a41c76a6ba51552d4ef81bc4","sha256":"b8cef950ee0418f3ffc0526c5432126b233cdac9aec5e810a10c2f699aab713e","sha512":"e6e1d71e1804103b6de8d935ae44c97f03d37abe2b87011b017208331298540ad2dd67a18a35848519a9243503c05fe68c8aa438530e5df9ecced2e8207f03d9","ssdeep":"","tlshash":"69c08c389186ae04c600c0ab1e700cb23006b6c869c2231ad8f2630971300ff3563678","first_seen":"2024-08-19T21:28:00.741578Z","last_seen":"2025-03-29T11:19:57.840336Z","times_seen":9,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BVxTRXQb.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:24.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/BVxTRXQb.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DNNdIs2A.js\r\nCookie: __ddg8_=ZXEgGxkQn6ZK5OtK; __ddg10_=1742535563; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=XiaJdPJtlzis4FzT; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg10_=1742535564; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-8ba7\"\r\nage: 2903\r\ncontent-length: 9369\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35751,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KN757LMM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:24.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Mar 2025 08:35:59 GMT","end":"Mon, 02 Jun 2025 08:35:58 GMT"},"fingerprint":{"sha1":"16:BA:A3:B5:22:51:BB:87:46:7F:17:3F:9D:14:B3:35:F0:FE:B1:8D","sha256":"EA:A9:16:BF:DF:87:08:5F:BB:3E:9B:05:23:A9:FC:DF:F6:53:A5:BC:1B:A8:45:77:DA:94:41:74:6A:89:71:88"}}},"request":{"raw":"GET /gtm.js?id=GTM-KN757LMM HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 21 Mar 2025 05:39:24 GMT\r\nexpires: Fri, 21 Mar 2025 05:39:24 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 21 Mar 2025 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1262:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1262:0\r\nreport-to: {\"group\":\"ascgcycc:1262:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1262:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 112807\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":332515,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9810)","md5":"dfe08c62d0067b9cd652524254b20d3b","sha1":"e31f216d27c6c67b969b25967fa6d3945b98e9de","sha256":"8b1369d2fc369f8a42430ad6e816f4bbe7f2036e3ed5a290a928c268adf60771","sha512":"647b92b071f69b5ed0f4ff4dbd0caccb9f0526e20ff013c38dabecd4cc36231356a7ff04b28ad36833cbbecdd207ba8165fc5c1e9cead6615578a3b4f38f4aa3","ssdeep":"6144:A/tuMmxh8pMMSHkRzZroNnSmEyRZM1iYDbbP2X:AIMY8pZmEA","tlshash":"1c6417cdb3c6b46683a27879503f004bb17b29a2f84cc894f195c9e42d74aaa4177f7d","first_seen":"2025-03-21T05:40:08.940794Z","last_seen":"2025-03-21T05:40:08.940794Z","times_seen":1,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BW8fah77.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/BW8fah77.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DmT_aqZN.js\r\nCookie: __ddg8_=OUfJMXjsch1vBlTq; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=BVkFZaMjoZ8i1qUJ; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"67dc31ab-25a\"\r\nage: 2905\r\ncontent-length: 351\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":602,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (615), with no line terminators","md5":"eb056bfe640db60809ca590e70d017f7","sha1":"ad3a4a5ea6cd3143876a07d22157e8c6587cfda4","sha256":"d52dd18e689004c528f29ab7e1afe4db981cf85be3f1d8d032c3c46ad1fc791e","sha512":"3699193203941f1b2004e98fe8b853336ca2e515ca8d5bc71c604416e683700c113d6c3f9005477cb2c0c3bb606fc0be244fc77b45e6cb73bc7390f8a95959cb","ssdeep":"","tlshash":"f5f0a22df75ae07134565c9860cdd115651dc60bf42150f0ff549eb9b143a50cf61ed3","first_seen":"2025-03-21T05:40:08.941426Z","last_seen":"2025-03-21T05:40:08.941426Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/locales/ru.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /locales/ru.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=PS7WWjCFtFHAvhYR; __ddg10_=1742535566; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=jHsaKuObjesB48j7; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 183\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-11f\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":287,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"72040c40ed1b6af58cd035b3c50b8a18","sha1":"673250977d88f31b0dca2cacc3b39daea0c5ff27","sha256":"a76a3472a99bccb3d603f8f5994a9aab48d782e2bfe32d3b9b828ff250a8233d","sha512":"acab2b59003bce93a45d66445a66cd2d9f4409437ce816a5580b140e6f76375a50436d0e8622b7ebf08ea0f9ff0efd9072808c3a0d55dcaaab911c0eeed26b94","ssdeep":"","tlshash":"b1e02b5d8c54ef1c4849d3b26f5c21d93a1930cd389940ec949e937172722cfa0c7f62","first_seen":"2024-05-28T20:47:53Z","last_seen":"2025-03-29T11:19:57.776788Z","times_seen":10,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/PragmaticPlay/b3a22c28284e4de69efb358940838cb1.png","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/PragmaticPlay/b3a22c28284e4de69efb358940838cb1.png HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 22629\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"e063043198233d315d572492e46b0516\"\r\nlast-modified: Mon, 06 Jan 2025 19:17:17 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 182391E6D5ADDCD3\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 7133\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=KDesTODd%2FIWhdMk%2Fo2lZY%2BTpBV6FqZz2tBERMrbTOxoNKo5A7rnIKosekEDhWh6saeWe%2BDi9NR1Q2vSOt374ezExZX0RzVsZ4Seu7Oa7mdhgjN%2F%2Bvowi%2BWPIbjWn0kKRAQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 923b1bdeced056be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=775\u0026min_rtt=444\u0026rtt_var=325\u0026sent=96\u0026recv=36\u0026lost=0\u0026retrans=1\u0026sent_bytes=110049\u0026recv_bytes=3011\u0026delivery_rate=20985507\u0026cwnd=256\u0026unsent_bytes=26608\u0026cid=874feb8d33a12a41\u0026ts=104\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22629,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"e063043198233d315d572492e46b0516","sha1":"e719c1b648675987debfc36d652ad543a0104edd","sha256":"3890d4a4521ac5f03aa3f52073bb54ba382fab3d29dbc132a03b21d78041e596","sha512":"2fa66a1b86378d099a1a1dd6195c0859c4db448239089650d325030d3e1d9f40135507058032090002f10c29e8525417f4986e2bc3c52cda0c42115942009600","ssdeep":"384:dR1fjI9hXHBNC87F+rrzecc+93runTssJX+LoIjgyv8XeLJq+CNZBxKIgahpzf:b1fEBNL5CrzLCnYlb8XsJqTZBx1Rzzf","tlshash":"75a2e146cb23bad09ba52d5a6d84fa7b40cd95efcd0b29005125ef502d1e5e13dffa04","first_seen":"2025-03-21T05:40:08.943093Z","last_seen":"2026-02-25T19:06:54.159546Z","times_seen":31,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":28,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/providers/onlyplay.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:29.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/providers/onlyplay.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=ddDZI5aCQKaI4K7k; __ddg10_=1742535568; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=CBarwCAgBOtPwgLm; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg10_=1742535569; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1949\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-133f\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4927,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8f28677cb68d04e1b8af2dca44ced5f8","sha1":"058e2ec5e9b66d0458e1a0c32bbc88869722b765","sha256":"25401b0234b7d888000256119980a41d3d16fcf6a3446a185e7729202bd25f80","sha512":"c1daa716ee9dffdee4b330ccb2fc08acbfdfaadbfc1ed3a69f1f3be668309dfb42d2ac79546f408d0013f5dc4c0223acbe65f806bcb8da44fdba15a3360e84fa","ssdeep":"96:c1FIvEWh5Hy155cIiUHoL0EuMcQThxc0K06lw2KCU:c1OrKGUg09QTYhlw2KCU","tlshash":"a7a174b4b3e4a7d0e204e7e5e726c870304a3a763fddd2a086f56e47951903d46ac9e3","first_seen":"2023-05-21T11:43:23Z","last_seen":"2025-03-29T11:19:57.842652Z","times_seen":11,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gwfg84x.space/collect?r=273018","fqdn":"api.gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:29.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Mar 2025 15:13:14 GMT","end":"Mon, 16 Jun 2025 15:13:13 GMT"},"fingerprint":{"sha1":"BF:F6:26:CD:19:DC:7A:9C:43:5D:6C:E2:14:15:6C:4A:04:14:44:99","sha256":"BA:E2:88:D9:EB:25:85:70:88:7D:30:E4:9C:EB:DE:65:CB:CC:3E:F0:3E:AE:33:E2:5D:87:13:51:8A:CA:D4:E9"}}},"request":{"raw":"OPTIONS /collect?r=273018 HTTP/1.1\r\nHost: api.gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwfg84x.space/\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=xY8klQhwoBdp2oik; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg10_=1742535569; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg1_=Y9p8dTcvcFkdubNHGZON; Domain=.gwfg84x.space; HttpOnly; Path=/; Expires=Sat, 21-Mar-2026 05:39:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Fri, 21 Mar 2025 05:39:29 GMT\r\naccess-control-allow-origin: https://gwfg84x.space\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: 89b662e9-0412-47bd-862a-b7d824997beb\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/cryptojs-aes.min.js?v=1","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:23.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /cryptojs-aes.min.js?v=1 HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=t44G9X48ms9HCwMK; __ddg10_=1742535563; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=pFt2vuzhbmOQNdQM; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg10_=1742535563; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nddg-cache-status: HIT,HIT\r\netag: \"67dc31ab-359a\"\r\nage: 2\r\ncontent-length: 4790\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13722,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (629)","md5":"cd93b7f0987a614bc17698503bcb6af9","sha1":"68a66448326499ff34c75bf31e2769b278584e0c","sha256":"8d4fae1a37a5b5338c889d0897b50024194b4d3ae94940e7e42c1c1423a1183e","sha512":"e3b87dfe10c0e3f3d801a85ae9c654a74eac22c2a93a757568a0d2b13755c36aeb5f9337e94a21db4ef2d1f0f1cfb98fccbbb0151d5cdf8d967730df96bfde98","ssdeep":"192:9BIGDmDm90mP9z8Ui015lN1I5rI2Tru6hMJFmHV+mdpwIfyAaYfKnNVYkUUFJZm3:9yiB0ez8UiIX1SrTegsEHJuI+y8Z7AX","tlshash":"625297c936edb94263963028587f6017b86b28b6945c4824f29cd4ddff9899dc03ae3c","first_seen":"2024-11-30T18:08:34.076577Z","last_seen":"2026-06-26T20:23:29.818692Z","times_seen":1206,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/B9uVR_PM.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:24.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/B9uVR_PM.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DNNdIs2A.js\r\nCookie: __ddg8_=ZXEgGxkQn6ZK5OtK; __ddg10_=1742535563; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=m3zRZMxCzAjuWduW; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg10_=1742535564; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"67dc31ab-56\"\r\nage: 2904\r\ncontent-length: 85\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"5f39fb8b22d67596f9a6169b27f8555d","sha1":"b88d59b42ea97557b34b476756abb59b81d9e40c","sha256":"054b6d192507d7e8fac99379c1ac4e0fd87f2ebd248f806356bf3b4f01262a46","sha512":"bd3155d5cd2c39653695b6eabf5bc6c6602bbab11358c0e632a3c4e3296563acc69e50bc7798a6a32661f31d94f9b7593c87f49dddd766e2f7d20d23a176c29d","ssdeep":"","tlshash":"acb012151d1c407831680df07b06441d4ca00805132129855144e70ac6241c96d1cd00","first_seen":"2025-03-21T05:40:08.944842Z","last_seen":"2025-03-21T05:40:08.944842Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/CZMI8v_-.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:24.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/CZMI8v_-.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DNNdIs2A.js\r\nCookie: __ddg8_=ZXEgGxkQn6ZK5OtK; __ddg10_=1742535563; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=PPNXJ4C3AyUQT8w7; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg10_=1742535564; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"67dc31ab-11d\"\r\nage: 2904\r\ncontent-length: 209\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":285,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"45cba5f74dd5a2d0d28b433033eecab5","sha1":"0b4a1dcee93d58b8367a28f313e8836c651b259a","sha256":"bb6af7249adec7c8059da7920ebc68a619aa027481bd2ab9749f4a0e825b126f","sha512":"72bb91b3d0dd0627bad45bdc8fb1ee112b40955a2fa0a808e8a2110b281029b2f6f76dffa1dd95d818e2569ca947fdf854c2de421b28749142c23da048c06fde","ssdeep":"","tlshash":"a1d02bcdef7061b4bb04456d849bc753c718f90027596bc6e57a65a12f00d92c345fd1","first_seen":"2025-03-21T05:40:08.945496Z","last_seen":"2025-03-21T05:40:08.945496Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/BFGames/e274cbc9303645fe966774eb7339682a.jpg","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/BFGames/e274cbc9303645fe966774eb7339682a.jpg HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27659\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"aca98d90e6fc875faf60ecfe718781cc\"\r\nlast-modified: Wed, 19 Mar 2025 07:10:33 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 182E94F0DA821623\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 7133\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kWJNK%2FykAm5gENQRQ4Yr%2FD6Uspv1G6XYEnbRGboY6Hsz3ACnulennQe%2FLZp0bzf4wpqt1L4zI%2BxPvAaeZZCaBAO9buYigOScI4stHVhpHdLobFh45AlbRhednyHjYGgUVw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 923b1bdf3f2456be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=756\u0026min_rtt=444\u0026rtt_var=163\u0026sent=726\u0026recv=185\u0026lost=0\u0026retrans=2\u0026sent_bytes=970226\u0026recv_bytes=4594\u0026delivery_rate=70564507\u0026cwnd=284\u0026unsent_bytes=0\u0026cid=874feb8d33a12a41\u0026ts=174\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27659,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 287x193, components 3","md5":"aca98d90e6fc875faf60ecfe718781cc","sha1":"89025fa6df9e87bae69fb84371ef7776f6ec1e4f","sha256":"e04a9e3735aae9ced971904762f585c1361aab4ff1fa23a3193ff00b154cb452","sha512":"c71354c47a4ac92e2d8376f654c414552df9d8dfd8c76ae3579b53b3eef08eb15e846e50cde78eda41e66e7e4f71101f64020d2b6cc3489db9741b42eb3555d1","ssdeep":"768:yUYTtSK859jYYZa6UY3+d6HOe9uuwwKH9:yUYJS/9jYSsY3+0q5d","tlshash":"0dc2e1816aae742abfca4b7f5fe41017be7a577b3b076180b40821665c560c009d746e","first_seen":"2025-03-21T05:40:08.946151Z","last_seen":"2025-03-21T05:40:08.946151Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/fp2.min.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:21.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /fp2.min.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=s6a1IZLaTAntwD2B; __ddg10_=1742535560; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Y8OmJC8yODVUhbfE; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg10_=1742535561; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-883d\"\r\nage: 0\r\ncontent-length: 11113\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34877,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (34698)","md5":"02087a3f4f46b15bc198570d800bff41","sha1":"e59f5e3521d8c60e5772de1f65c90e5b87d9eb9e","sha256":"e753042decd90a96d0636a7df16df556860af92ca09ac37f0f6ab1d574acd1f1","sha512":"2c733c348e26c0b400befd5ccac6734eb06a0ca0c8c638f8d3a66afd75ea5860c6cfd3a913ba6dd6824bd9c629c2f28d14204efa625b10fa8fd9b366ba82c968","ssdeep":"768:J2N6EbuZaWRhGT8e20R5J++t6cOrVrzib:oxuZaWRhGoF0R5UVra","tlshash":"e6f21b96b2e8373c8143b063394bec15fb799495e784808a5e2d4180f8758e9e77bdf8","first_seen":"2023-07-23T18:22:17Z","last_seen":"2026-06-26T20:23:29.90284Z","times_seen":1217,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/DYZ6qTze.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:21.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/DYZ6qTze.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DNNdIs2A.js\r\nCookie: __ddg8_=RbNrh8y3wkGBGL31; __ddg10_=1742535561; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":913,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (930), with no line terminators","md5":"900876417de3d8a859c8be7b3131b1de","sha1":"fee831df05a585ff9660ae15f7db303bb277f555","sha256":"5cec41ec4584ac38cf0e9b3091c0fe6b987ff649f95d53c0ef215aaa1a3c07fe","sha512":"c450f36307b499c40c47e81b5f36ff2bd3c7a8461a098553b10c4eb4aae9c041503d448646f543ca87c267fb3c72cbccfdef656503947bd10c111b7c1df06a48","ssdeep":"","tlshash":"b211002be28a473273335cb5867861e74b61078e383554d83d8cdf1b9127c92c52afa0","first_seen":"2025-03-21T05:40:08.946784Z","last_seen":"2025-03-21T05:40:08.946784Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/Djq8TtDs.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:31.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/Djq8TtDs.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/B3Eab3YU.js\r\nCookie: __ddg8_=HoQ1GuZP8P6g54xL; __ddg10_=1742535571; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=98a57GBi1YiUn7Gf; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg10_=1742535571; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"67dc31ab-370\"\r\nage: 2906\r\ncontent-length: 398\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":880,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (905), with no line terminators","md5":"11b324e05b2bc31a0ffe85e52d8d5c3f","sha1":"a2b998cc1b0cfe023a1c9c17082ceed833df3cec","sha256":"e2c6cd9ccb9d6a1f40ddde902e5c6b4875e24db39cdbd811446c559881149f16","sha512":"b22374136408a4ce5321586bc518658673472c2b38ed87af06d1c6e3373b003d73628ffb2cb7442cb8fe8392d2a2f51c23fa6944652bbd839a1589e38f5acdad","ssdeep":"","tlshash":"5611e391b27984513bf686c1a9710424716176351709c2cc7d0e9def672beca3145fbf","first_seen":"2025-03-21T05:40:08.947439Z","last_seen":"2025-03-21T05:40:08.947439Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/home/home-coinflip.webp","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/home/home-coinflip.webp HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=p6jbeaWUrL6qwblm; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=iM9qt6Wa1GDEaXAz; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:48:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42754\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"67dc31ab-a702\"\r\nage: 3065\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42754,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3ab9312c9a334ed05a7bdd23c222043b","sha1":"0f555a7c212a223ce7442280c793b56f4cd08b9f","sha256":"81dbcdc4ee9b7c52c389fa0bf0f5ea46dba0b75445edc10f03cf48efba613e18","sha512":"cfa070e95f7730e9b02138939cad714a1b1eb86d7ab323baa7c0fb703a3772be7c20e9e23fb46604c3416f534a19f8e007b2dd6f9b2dd6d6afebd3abdac78655","ssdeep":"768:lflYfJ+Qfq5RNsLLSlhvpAIKg83PJPnErWMy0pxUGzKeZhOKqIQ3BN6gxNJsPltS:hCfuRaL2DpADg0aJMmAJIQ3BNJo","tlshash":"cb1302be6a16e3445ad02df50d5f4e0c1ec7228699a0ed7eea0a1d230b355db218fd6c","first_seen":"2023-07-23T18:22:18Z","last_seen":"2026-05-03T08:32:41.843114Z","times_seen":23,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/eurostile-bold.CvV91m_H.woff","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/eurostile-bold.CvV91m_H.woff HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=hixM8UQWJnhyJBkc; __ddg10_=1742535566; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=X06k8lX9mAYBWcO8; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:26 GMT\r\ncontent-type: font/woff\r\ncontent-length: 96804\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\netag: \"67dc31ab-17a24\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":96804,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 96804, version 1.0","md5":"2e116fd896b19f31034b0dec4106d2e1","sha1":"530e6e27f2941307b1e26f260c3a4ccf855fbe7a","sha256":"428c1711732ee01fd5bbbf9d3a4a777a83414f1894f5399d77b22dd3bd50c523","sha512":"3eada120506cc1280dbb2e199acd4a386983f855771ca0e71bd2cb810d26ac50436165ff029c8c58e0506471675d5db59e7519781495e763fda70c1ee8fe9061","ssdeep":"1536:sBOXXEUF4boG1Y6VafRnAPwQIF+RqAW3z+57es+v39nzdEvF7y4TGRYhgil:WOHEUabN1YcalOIFMqZgCsI3dREW4Tr1","tlshash":"b4931220d9f1293570275f7e60deb491bb04ad5068e07ece2873cc569fede64b729920","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-03-01T21:47:53.474623Z","times_seen":56,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/providers/redrake.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:29.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/providers/redrake.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=mdnhjFHyFlAtXYOW; __ddg10_=1742535568; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=XCwH94Uw2PKraK3G; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg10_=1742535569; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 591\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-474\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1140,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7a06dbccd0e893d1ef6ed7966a7c9933","sha1":"9a49ea8f711f7723e9af3a470d1cba562df82a67","sha256":"3984b4a28964f7f25893fa92c92a8239103241b4ec994c95eb384121e513ea16","sha512":"4e70226c92de207e9c34332f696a00f225634b196fbdb5d0b9f31087d7533129fe926880073885e153a6dbfdca3c8e06787564c9b44b5c90f6b786e179243cd5","ssdeep":"","tlshash":"442103f6f7cd56feb401e7f1d5069c78732b34b97a22dead06dc2929728604dc8a4412","first_seen":"2023-05-21T11:43:23Z","last_seen":"2025-03-29T11:19:57.845341Z","times_seen":12,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BhpImTfv.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:24.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/BhpImTfv.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/CTURe_1d.js\r\nCookie: __ddg8_=PPNXJ4C3AyUQT8w7; __ddg10_=1742535564; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=93RiXvsslcL6mOk3; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg10_=1742535564; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67dc31ab-1d5b1\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 5\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 26605\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":120241,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/locales/hi.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /locales/hi.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=PS7WWjCFtFHAvhYR; __ddg10_=1742535566; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=2SzmHFFbLOSRCH1c; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1967\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-1b38\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6968,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6ce32ced0de75024af73a5822ffab634","sha1":"79f40cecf83cd7654598e9b3b926c6fd56bf047b","sha256":"1049687a8798c6cebe84fed76621df2afab62aace1691969f31b6d905f7d2506","sha512":"44a12cb0572477b93dfe6ceacabbb4c5ad6084e041a34513def23239c9eeadf216a4cabd661d8639d755ac658eb0ee5d1ca751e04b7fa372cd844f46f41ab635","ssdeep":"192:ZK9SgvvncB7vcNsAu1vehBkWBT6kDfXLD:Hgvvny7deV/","tlshash":"51e1f047631cb679195722f8916912423a13e8c371d8b1dca6f2e922f403971eab4ffd","first_seen":"2023-08-27T18:54:11Z","last_seen":"2025-03-29T11:19:57.871505Z","times_seen":9,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gwfg84x.space/games/casino/currentGames","fqdn":"api.gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Mar 2025 15:13:14 GMT","end":"Mon, 16 Jun 2025 15:13:13 GMT"},"fingerprint":{"sha1":"BF:F6:26:CD:19:DC:7A:9C:43:5D:6C:E2:14:15:6C:4A:04:14:44:99","sha256":"BA:E2:88:D9:EB:25:85:70:88:7D:30:E4:9C:EB:DE:65:CB:CC:3E:F0:3E:AE:33:E2:5D:87:13:51:8A:CA:D4:E9"}}},"request":{"raw":"OPTIONS /games/casino/currentGames HTTP/1.1\r\nHost: api.gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwfg84x.space/\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=rgmOXsCnQRl04Zc6; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg1_=ygfPlsGri5e3Uglag4wx; Domain=.gwfg84x.space; HttpOnly; Path=/; Expires=Sat, 21-Mar-2026 05:39:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Fri, 21 Mar 2025 05:39:26 GMT\r\naccess-control-allow-origin: https://gwfg84x.space\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: b08623f7-0f0a-4273-a497-d9f55937e0c0\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/PragmaticPlay/d8f118e9bfd01ace4f417a8adf3c72845788a658.png","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/PragmaticPlay/d8f118e9bfd01ace4f417a8adf3c72845788a658.png HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 21161\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"4e6f71a1dc12f9edd4678a6908361bda\"\r\nlast-modified: Mon, 06 Jan 2025 19:16:33 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 182E94F0DBC699FA\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 7132\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yHCnPrLRKVAIt0GyBWuunEX%2F9jdRy%2BfB6Ca22Oroffe%2FTe4TtAg39FWoVZuLXEXIdI6SVJR6GLPfxi6zPMMp77zlvMRdUsj7Ydf1yyKDVsMPzIXe0Oe3OzIY0JKVaJnI0A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 923b1bdebebd56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=864\u0026min_rtt=444\u0026rtt_var=859\u0026sent=36\u0026recv=27\u0026lost=0\u0026retrans=1\u0026sent_bytes=33870\u0026recv_bytes=2902\u0026delivery_rate=7729537\u0026cwnd=256\u0026unsent_bytes=0\u0026cid=874feb8d33a12a41\u0026ts=97\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21161,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"4e6f71a1dc12f9edd4678a6908361bda","sha1":"b13e37da6fa29810d5ba2b19480453497ccc3756","sha256":"b57968514a26ecf5aa665e277f0ea32bb174afa50b69f91ba75f9e6c19a64de7","sha512":"4d849dd4a7e17de9d4d86fd17b5d845c07625d0ddb02f2ec837bbae49d5b96cf26e8c724d0a16fa96d45705648f3508542d414f09049c2cd80107586bcf2d2c5","ssdeep":"384:3JDdAl4YanhoJhAn+SLERbPQ1i8o4M+SOVID:3JDel4Yan+jtmihP+36","tlshash":"1692e1778c5ef8b56186312b437ceb404eb8939ebd054e236e17f29e6f159a3035250e","first_seen":"2025-03-21T05:40:08.950924Z","last_seen":"2026-06-26T01:47:52.323076Z","times_seen":43,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim2.ru/v/fonts/Roboto.ttf","fqdn":"gx.webim2.ru","domain":"webim2.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:30.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"webim2.ru","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Dec 2024 10:41:08 GMT","end":"Fri, 28 Mar 2025 10:41:07 GMT"},"fingerprint":{"sha1":"39:22:2C:F3:51:C3:18:D9:E0:56:1C:F4:75:2C:8C:7D:D7:C6:50:3F","sha256":"3A:AC:C1:DD:28:20:B3:C8:03:99:4D:E0:23:B0:5B:D4:F5:06:10:9E:06:A7:B3:20:A3:45:F2:29:D5:3E:95:63"}}},"request":{"raw":"GET /v/fonts/Roboto.ttf HTTP/1.1\r\nHost: gx.webim2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 21 Mar 2025 05:39:30 GMT\r\nContent-Type: text/plain\r\nLast-Modified: Wed, 15 Jan 2025 07:23:25 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6787626d-29144\"\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":168260,"size_decoded":0,"mime_type":"text/plain","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", name offset 0x96000218","md5":"73e5e33319edb8e4c97e37cdfe616cb8","sha1":"7784f765a8fd13fb67bac14cf3c11373538955c8","sha256":"f66c295bf6f985892e07ce64d2df9149416ef950f9b65420b7de2e6f5ba0175a","sha512":"658ae380ebd8cb5a040d69d0bb8ed94421013298913fc46ba9bc010c017a2e72cdf162672a94852f466a1f764aa09e0c88cb19c3e73c1d2c616d08ad0786d318","ssdeep":"3072:RCgWJENpDQoK6jS3I+/l3mRDOTAzM7t2eV2dlNvVWgHkLAHX3lbgva:PCENtQVmNO8u2eV2h3kpva","tlshash":"59245106ebcebb9ec14093f33dabdacc56efe4225d51e513c64b6011ce05468a71f62a","first_seen":"2025-02-09T09:50:26.857461Z","last_seen":"2026-08-11T14:18:48.499332Z","times_seen":273,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":68,"dns":6,"connect":19,"send":0,"wait":46,"receive":39,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/eurostile-regular.i2b9H2-b.woff","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:21.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/eurostile-regular.i2b9H2-b.woff HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=4IX9OzNaKUBWXXUM; __ddg10_=1742535561; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=XokGiLUllCwiJtP1; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg10_=1742535561; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: font/woff\r\ncontent-length: 97680\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\netag: \"67dc31ab-17d90\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":97680,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 97680, version 1.0","md5":"535b1e86232aafcca96b143529c8226d","sha1":"9408a42efc92ea6972f4d0f50560c22ca84d8a08","sha256":"c5a7a7d506426bb073f4f866f0ea9f3c57c8e856444e5403494d9db263e85671","sha512":"b54f1a43cd21271056f02d0626c573357b3ad962969d24a7c03914513d6644155108d5fb0608d47c734e650e1141de70cb9cc13e1ee1f08830c33ecd7dbb8abf","ssdeep":"1536:mndVS5OB0M0Lfxv9JKgzmzwv25WCnEx2pW594UIi/m3KYdu+WLSkNQ:mv3BbuX0gswcIb4UIi/m3K4u+B1","tlshash":"95a312039a03b7246d764afa2eaf4b39f5d4ef988d0d63c147e1a410194d52f2f6126f","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-04-25T06:32:47.453739Z","times_seen":81,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/C1CbtQXp.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:21.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/C1CbtQXp.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DNNdIs2A.js\r\nCookie: __ddg8_=RbNrh8y3wkGBGL31; __ddg10_=1742535561; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1111,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1122), with no line terminators","md5":"3229ef6b58a68752d2a76c92324204e6","sha1":"6fbb491d5abedc283b26d57750f98acecafc834f","sha256":"37920a09877102814d34edc43a0a3656bf893bec1d8958f7f2cb4cd9239aac56","sha512":"e9acd7c773beb8d909479e7bad146d56eafc1f572ef0c4417dd533ca80fa718441e67567fb79f41c5694d070be470915d36697e246b9b44f2cae55c8291a27d5","ssdeep":"","tlshash":"f62138bd4aec2dc8091cbc8039d89d7c7514d2496192cc9639a6fee7f487d59ec48471","first_seen":"2025-03-21T05:40:08.9523Z","last_seen":"2025-03-21T05:40:08.9523Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?en=page_view\u0026dl=https%3A%2F%2Fgwfg84x.space%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=119194497.1742535563\u0026auid=202055893.1742535563\u0026navt=n\u0026npa=1\u0026gtm=45He53j1v9186219929za200\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=102015666~102482433~102788824~102803279~102813109\u0026tft=1742535563418\u0026tfd=2967\u0026apve=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:24.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Mar 2025 08:37:46 GMT","end":"Mon, 02 Jun 2025 08:37:45 GMT"},"fingerprint":{"sha1":"2F:CC:05:C5:14:C4:CD:A4:26:05:31:F9:67:40:7C:D3:39:74:34:0C","sha256":"14:E6:41:E9:F3:EB:7C:F4:BD:F6:B0:BC:36:4B:D8:52:9F:EA:FD:B7:89:04:C4:5A:49:CE:25:D7:DA:EC:C8:24"}}},"request":{"raw":"POST /ccm/collect?en=page_view\u0026dl=https%3A%2F%2Fgwfg84x.space%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=119194497.1742535563\u0026auid=202055893.1742535563\u0026navt=n\u0026npa=1\u0026gtm=45He53j1v9186219929za200\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=102015666~102482433~102788824~102803279~102813109\u0026tft=1742535563418\u0026tfd=2967\u0026apve=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncontent-type: text/plain\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\ndate: Fri, 21 Mar 2025 05:39:24 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://gwfg84x.space\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":748,"timings":{"blocked":345,"dns":0,"connect":20,"send":0,"wait":35,"receive":0,"ssl":341},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/Icons.DLETUd-D.css","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:21.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/Icons.DLETUd-D.css HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=s6a1IZLaTAntwD2B; __ddg10_=1742535560; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=DpMBkmcnWoIBSZMK; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg10_=1742535561; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-2ce\"\r\nage: 0\r\ncontent-length: 167\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":718,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (719), with no line terminators","md5":"f09648d5397898c18deca62590af613e","sha1":"820f4092fcef82848a7254d4e22a9031e7c318e8","sha256":"b4c7e7d8ceac4b9b2602f817f76ba1074cda31ffe7f49cf4c64038a155741481","sha512":"084f9c23cb35c2e1d79cf4655b7d13ee2ac685f70ae879a95282f0fe81869089df094e8980cf07602d5f944949e5b10c3b850ed05be2392d78e1db77c9496b02","ssdeep":"","tlshash":"8701887d3546f903b72bca8ec24480a322e27b67ddd14542698b7d3a75767602a0f173","first_seen":"2025-03-21T05:40:08.952829Z","last_seen":"2025-03-21T05:40:08.952829Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/C6g4D2Vb.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/C6g4D2Vb.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DmT_aqZN.js\r\nCookie: __ddg8_=OUfJMXjsch1vBlTq; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Qj65tCbH3m92T1zU; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"67dc31ab-1fa\"\r\nage: 2905\r\ncontent-length: 302\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":506,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (525), with no line terminators","md5":"ecff3ce1e022a7eb3f8b22f517d38d99","sha1":"d74210a3209b7ea1786e371afe75074ca31098ad","sha256":"fde2ba773e558f1f1512bf8a83621a18bcc9d6f5dfa99acaf6b690f1dd113489","sha512":"926e23b9d0431c8b4fa8f030d4129e84fb9d4119f9185512368181ac04cda312dcc00a8953a78e5c11ca01e10462fe956f7d60a3b3013d6b71e7e75d301d6353","ssdeep":"","tlshash":"4bf0598c3482e2b17771df8ac632ce5259bc1a41294eb591b18ee609320a490d73c769","first_seen":"2025-03-21T05:40:08.953525Z","last_seen":"2025-03-21T05:40:08.953525Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gwfg84x.space/games/casino/common","fqdn":"api.gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Mar 2025 15:13:14 GMT","end":"Mon, 16 Jun 2025 15:13:13 GMT"},"fingerprint":{"sha1":"BF:F6:26:CD:19:DC:7A:9C:43:5D:6C:E2:14:15:6C:4A:04:14:44:99","sha256":"BA:E2:88:D9:EB:25:85:70:88:7D:30:E4:9C:EB:DE:65:CB:CC:3E:F0:3E:AE:33:E2:5D:87:13:51:8A:CA:D4:E9"}}},"request":{"raw":"GET /games/casino/common HTTP/1.1\r\nHost: api.gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=E3BotsLD3MP6jbga; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg1_=5As16Tv1Nu2n37G1ANfv; Domain=.gwfg84x.space; HttpOnly; Path=/; Expires=Sat, 21-Mar-2026 05:39:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 21 Mar 2025 05:39:28 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 83\r\naccess-control-allow-origin: https://gwfg84x.space\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 09e44908-7755-4beb-b363-1d01eca2f7a8\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20325,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ad4cd7c993e37da5a6be239cf26a45a5","sha1":"5666a6d43f8f36d0f5c92079039aa45567a12c56","sha256":"e631e988620d3f5f87650acf3cd51b7ab8d7882527c637e3243df7b4355633f5","sha512":"401745208974e43d0904649d869584d005c1a6903145ccb441bb5b00e26d28911608a410457e26449fabb312e839c6e14ffa3fd943d767e242c3b81a71c04e5c","ssdeep":"384:gwSmt+DtOR1MkXHFZtqe4T4QIhQtlapaPtlvVa88FiigXvVnCp/rI0KgBYIIcELn:0uYlpIIRSmBUjcj","tlshash":"a7928a2bb884e546293b58b0f95bbcbbb1fe8c1fa9806f51d9c44f0c54e237b1246974","first_seen":"2025-03-21T05:40:08.954289Z","last_seen":"2025-03-21T05:40:08.954289Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gwfg84x.space/games/casino/v2/search","fqdn":"api.gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Mar 2025 15:13:14 GMT","end":"Mon, 16 Jun 2025 15:13:13 GMT"},"fingerprint":{"sha1":"BF:F6:26:CD:19:DC:7A:9C:43:5D:6C:E2:14:15:6C:4A:04:14:44:99","sha256":"BA:E2:88:D9:EB:25:85:70:88:7D:30:E4:9C:EB:DE:65:CB:CC:3E:F0:3E:AE:33:E2:5D:87:13:51:8A:CA:D4:E9"}}},"request":{"raw":"POST /games/casino/v2/search HTTP/1.1\r\nHost: api.gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nRegion: RU\r\nContent-Length: 63\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":63,"data":"{\"search\":\"crazy time\",\"category\":0,\"providers\":[],\"live\":true}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=il9TkmCnNIDh1Jmj; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg1_=vZkOuMKLo7KhiFbh59Ix; Domain=.gwfg84x.space; HttpOnly; Path=/; Expires=Sat, 21-Mar-2026 05:39:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 83\r\naccess-control-allow-origin: https://gwfg84x.space\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 9282847a-d9ed-427b-abc5-8564664a1c4e\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":343,"size_decoded":0,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with very long lines (381), with no line terminators","md5":"e3429ce79ce0a156bf549304810f6eec","sha1":"963c3b1770a638090cb2ffed8779d5d5c5f88700","sha256":"e11bd30f365577b61450d09d317192f8323918224b23b65e10ff36b640244c16","sha512":"3389f9c42ce47000e33f1e9998486d865ddc0a1d010e95b75e3304cb98c85403e14f3571d5a82a1c74fb50c4147eb2f45075441c18a81257f46f992b955532e2","ssdeep":"","tlshash":"ffe0f8003a0ae80aa082708c0e3ebe78684c002bc0c85e23c8c8a30082e9577fa342b6","first_seen":"2025-03-21T05:40:08.955127Z","last_seen":"2025-03-21T05:40:08.955127Z","times_seen":1,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/B3Eab3YU.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:31.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/B3Eab3YU.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/CTURe_1d.js\r\nCookie: __ddg8_=6KnFj8JbgJlRFSL0; __ddg10_=1742535571; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=HoQ1GuZP8P6g54xL; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg10_=1742535571; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-7b94\"\r\nage: 2905\r\ncontent-length: 7544\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31636,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (31635)","md5":"62f45e20894ee6c1c4b09e800017bcfa","sha1":"95dd5059bc46c5ee8dfcfef6e224def0e0f93565","sha256":"8e7c0344a70c4dde23032379fbc78f64ee90f1856342e9d37a980429eb745bf6","sha512":"1c4d44f83bb35155b0af2a3b2d4a15fb7f4c84d06115f76eb98aa9d8fd92f03ab63d4c867c6fc5d3979458c96d5fc155daa646b6af9fbed153053f101efa4496","ssdeep":"768:vXvx0TUuVEkt3Jx0lUuNEktfkt2NQZzvmb0J:6Tv/t8lv/t8tqStJ","tlshash":"cbe2c558b36592bcf001e7fc4a13a4713e576fe23a22c494c7ea2c16c96541d4daeceb","first_seen":"2025-03-21T05:40:08.955886Z","last_seen":"2025-03-21T05:40:08.955886Z","times_seen":1,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/Home.BaH26edq.css","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:21.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/Home.BaH26edq.css HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=XkHll2GRSOaAbBDY; __ddg10_=1742535561; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=WbLwNofP8Xwohoyw; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg10_=1742535561; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\ncontent-length: 4309\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-66c1\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26305,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26304)","md5":"9bfee17c77b5efca75d28aa0698a624c","sha1":"2b7c77af7a641ca8ca2dd8bc68346ee0ee9ebb23","sha256":"29e8717c7487c2edcb4c08fd69d56f063793e3120add8c56a7d92bac3c591ef3","sha512":"09221ed51320161515126c35411d307142fb5788411db4c02746da0d4d2cf18a5a512a164381b9919a32c78e621e736c328db0cab773cbf8b32c1683d4210e6a","ssdeep":"384:9WVzWXH6eKEHqxR3uIRBksYCsk7JWGrqxo:9Tq9EKxusYCxrqxo","tlshash":"a0c2b830775d6879b4b7f669b4912a4c2159f307fb120b79ad89b83cc4db5433237a88","first_seen":"2025-03-21T05:40:08.956468Z","last_seen":"2025-03-27T04:39:04.386572Z","times_seen":4,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/c25cf91e087c2212d265f49723cb2ad8324fba08.jpeg","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/c25cf91e087c2212d265f49723cb2ad8324fba08.jpeg HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25696\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"00000000000000000000000000000000-1\"\r\nlast-modified: Thu, 15 Sep 2022 12:02:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 181227A36ACBD2BD\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 7133\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Zsn%2B0TbyUa%2BWDAD7EZ2jK3OOR8bmbHmVCn1y5CrtmzjFQS9AEBeVYzk8h9jJHD5p6Gho1RldvnBIVsc%2BpHCSyddXfTJ8jMY3UZq8EFK7%2FQpGQmwBsuiuenhIqzo5W4%2F6Sg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 923b1bdebec356be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=877\u0026min_rtt=444\u0026rtt_var=512\u0026sent=72\u0026recv=29\u0026lost=0\u0026retrans=1\u0026sent_bytes=78561\u0026recv_bytes=3011\u0026delivery_rate=54789189\u0026cwnd=256\u0026unsent_bytes=31466\u0026cid=874feb8d33a12a41\u0026ts=98\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25696,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 287x193, components 3","md5":"4127d553e6711d3c1da3d529da893f33","sha1":"f4853cc3a7038ae23c94f6f2a6b517df11d4c930","sha256":"0bbbfe88d88023c16d20e20b1746eff1e66d3d8bc43c52485528650dd06df2fe","sha512":"52bdf357860f53e932e88cd91060cc32b93047e936c18e48f9858dc6a6f1a87004521cf2f84ea09c831734125390ef842b613619a00d130c05ecd8965e799d90","ssdeep":"768:pwk3KbRnZU2WmBhlvO6z3+2gifxNaEruN/:ujxW+BvmQ3+5KY/","tlshash":"f3b2f0e1a4011a16c4946cba7d90ff7113969ae132affecdb35a18061b42daa0c93a1d","first_seen":"2024-05-07T05:57:00Z","last_seen":"2026-02-12T21:37:49.695265Z","times_seen":30,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":32,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/Endorphina/3bd9466c3f946b09306ebeda409715d364582cda.png","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/Endorphina/3bd9466c3f946b09306ebeda409715d364582cda.png HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 38462\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"e9e5fc1d59414e8a6f3ba46d9cc316ac\"\r\nlast-modified: Thu, 01 Dec 2022 11:46:43 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 18273D0AB6051E1D\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 7132\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 923b1bdeeee856be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38462,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"e9e5fc1d59414e8a6f3ba46d9cc316ac","sha1":"fd1b2dc050b15bc594776896cadad20d568b3770","sha256":"63fb7cbfac73324e2ec9e159104f4e35b04ecc6f585ee6d5f95e45b33d9695ce","sha512":"079e573aa3a98bab4c83ec1337995b4fea23e940382923a870d281eb67baca848de32886031c9817dcb23fb53840556772904d304679c9299aa53226863fdc3c","ssdeep":"768:2VaAj/v6JaPTJouEdA0QRyufBD4NP5UAJBKhWgyHbhgl03i71FvdT:waAj/v6OTVEdQBD4TNJBkWgsgG3iZFFT","tlshash":"6203f25ad0a7e03765ab598c26dd986d99504fe29e78dbe4e50f0044a9bf4034f0cf62","first_seen":"2023-05-21T11:43:22Z","last_seen":"2025-09-16T07:02:59.108306Z","times_seen":35,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":19,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/providers/macawgaming.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:29.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/providers/macawgaming.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=paon3zTrYjcj2WRp; __ddg10_=1742535568; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=TVNu5zKA8VqLvEy0; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg10_=1742535569; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1599\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-e0d\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3597,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"549698b278db9916efcadb2dce349f13","sha1":"66226c2f28cfd092afe459bd57d02d1c44584092","sha256":"2d54de8aef4c47d19e762c4d3a5e75ed8fa408fa0291cb5a7945c852c0079d5c","sha512":"49db9235b15d04ba3ce99ab511257b55180ca7ca9208e3c80580164be50b7358ed18c5c8e4b25e5cae4e5832a56093648798ffaf408972736353a322449a2551","ssdeep":"","tlshash":"3d7193a5c7f862e0f409f3f58a268cb1364729fe3b13df0947ba5e61920100d85d9c93","first_seen":"2023-05-21T11:43:23Z","last_seen":"2025-03-29T11:19:57.839454Z","times_seen":12,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim2.ru/l/v/init?action=init","fqdn":"gx.webim2.ru","domain":"webim2.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:29.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"webim2.ru","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Dec 2024 10:41:08 GMT","end":"Fri, 28 Mar 2025 10:41:07 GMT"},"fingerprint":{"sha1":"39:22:2C:F3:51:C3:18:D9:E0:56:1C:F4:75:2C:8C:7D:D7:C6:50:3F","sha256":"3A:AC:C1:DD:28:20:B3:C8:03:99:4D:E0:23:B0:5B:D4:F5:06:10:9E:06:A7:B3:20:A3:45:F2:29:D5:3E:95:63"}}},"request":{"raw":"POST /l/v/init?action=init HTTP/1.1\r\nHost: gx.webim2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gwfg84x.space/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 198\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":198,"data":"{\"action\":\"init\",\"url\":\"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\",\"referer\":\"https://gwfg84x.space/\",\"version\":\"10.7.75\",\"since\":0,\"visit-session-id\":\"\",\"visitor-ext\":{},\"n-tries\":0}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 21 Mar 2025 05:39:30 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Webim-Version: 10.7.75\r\nAccess-Control-Allow-Origin: *\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1053,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"troff or preprocessor input, ASCII text, with very long lines (1167), with no line terminators","md5":"fa148559c05a868ad0d708606acda727","sha1":"a8ab43de7e8c32cd22d93feb40b3e4a87db96b48","sha256":"97948eaeb794158651e699dcafa58443fbe235ef1eac95399047c902d382a5fb","sha512":"7a9c6c6eb7c13863582ec0389beb65947ec61c02380919da92551a95b6cbbdcecb203da751fe3eb0cf5ffb0f25ef557528e24916a0f2b2b1676ac554362433d2","ssdeep":"","tlshash":"4d217993d41a4a3b418fa12f5c310aba578de00baec9d799894a8c4c634707eb713a94","first_seen":"2025-03-21T05:40:08.959448Z","last_seen":"2025-03-21T05:40:08.959448Z","times_seen":1,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":76,"dns":2,"connect":19,"send":0,"wait":32,"receive":1,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/DDfSOCvz.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:31.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/DDfSOCvz.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/CNXwvf8W.js\r\nCookie: __ddg8_=HoQ1GuZP8P6g54xL; __ddg10_=1742535571; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=SA6wDRS8m0ZyEWXh; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg10_=1742535571; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"67dc31ab-267\"\r\nage: 2905\r\ncontent-length: 329\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":615,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (642), with no line terminators","md5":"5b7b0f185b21c777bd2e38a4e68f994b","sha1":"1aab540fa18b74c6618f8a45ba8147543c0ac387","sha256":"e32da49a8530c2f1e88923d4a3b58bb997d36ed1d89f765965f6b5d8df31c6a8","sha512":"c8206043b90d61d52b0cbf3896b58ac4f586a08fbc1e0f752bfb017c49ada2f434560eed3ca9c2aa18f2d8a2600376584ef7cc64859ba16bc173789a2b4904ae","ssdeep":"","tlshash":"c8f049c87459df332683698e1067a93596513a0ca9343a709ad3d2b154c702c973d659","first_seen":"2025-03-21T05:40:08.960166Z","last_seen":"2025-03-21T05:40:08.960166Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":37,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim2.ru/l/v/poll?action=poll","fqdn":"gx.webim2.ru","domain":"webim2.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:40.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"webim2.ru","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Dec 2024 10:41:08 GMT","end":"Fri, 28 Mar 2025 10:41:07 GMT"},"fingerprint":{"sha1":"39:22:2C:F3:51:C3:18:D9:E0:56:1C:F4:75:2C:8C:7D:D7:C6:50:3F","sha256":"3A:AC:C1:DD:28:20:B3:C8:03:99:4D:E0:23:B0:5B:D4:F5:06:10:9E:06:A7:B3:20:A3:45:F2:29:D5:3E:95:63"}}},"request":{"raw":"POST /l/v/poll?action=poll HTTP/1.1\r\nHost: gx.webim2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gwfg84x.space/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 217\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":217,"data":"{\"action\":\"poll\",\"visit-session-id\":\"a6b559c89ced4c50a35428d259d3541f\",\"page-id\":\"ec338203418b49659b74c0a44048b273\",\"since\":1,\"auth-token\":\"916b530559a48090df8b2f796550668e\",\"action-params\":{\"del-message-draft\":true}}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 21 Mar 2025 05:39:40 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 2\r\nConnection: keep-alive\r\nX-Webim-Version: 10.7.75\r\nAccess-Control-Allow-Origin: *\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-13T03:50:25.174103Z","times_seen":759689,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwfg84x.space/geo_ip","fqdn":"api.gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:24.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Mar 2025 15:13:14 GMT","end":"Mon, 16 Jun 2025 15:13:13 GMT"},"fingerprint":{"sha1":"BF:F6:26:CD:19:DC:7A:9C:43:5D:6C:E2:14:15:6C:4A:04:14:44:99","sha256":"BA:E2:88:D9:EB:25:85:70:88:7D:30:E4:9C:EB:DE:65:CB:CC:3E:F0:3E:AE:33:E2:5D:87:13:51:8A:CA:D4:E9"}}},"request":{"raw":"GET /geo_ip HTTP/1.1\r\nHost: api.gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=MTQgr0F4JYkGgEW0; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg10_=1742535564; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg1_=D9KAstmaYFQZKL5QdYM6; Domain=.gwfg84x.space; HttpOnly; Path=/; Expires=Sat, 21-Mar-2026 05:39:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 21 Mar 2025 05:39:24 GMT\r\naccess-control-allow-origin: https://gwfg84x.space\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: d48f6c0d-731f-4a23-ab53-e6b2e80482ba\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":230,"size_decoded":0,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"76d6a63a057b8cd721efaf41086688bc","sha1":"12584312ff723a761a433f94e8af9aec7b1b7e03","sha256":"fde20b5f8aaac26db3cbff2470bdbb0d8f8dc8c391ff0b6703a19d2ee5988b0d","sha512":"a16f735d1cc27db9c54abdf35f23c7d4b018c3073b849a7a1a37cf07d27ff392aabcdd436085c99902e57f3290b2f962f577b49a97d5e5bba4c68628c9194045","ssdeep":"","tlshash":"ead05b135471fd26cc7948cd5f3e5eb72540731581ce665c59e98705a048434a7b44c5","first_seen":"2025-03-21T05:40:08.96144Z","last_seen":"2025-03-29T11:19:57.765763Z","times_seen":8,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/PragmaticPlay/5878c98bf96de5c3ecb4fa37ddb45928da161525.png","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/PragmaticPlay/5878c98bf96de5c3ecb4fa37ddb45928da161525.png HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 23925\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"e6531c0c47e53a6a9001584a0194da73\"\r\nlast-modified: Mon, 06 Jan 2025 19:16:47 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 181A8D6D5592D680\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 7145\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ruEFgDOaqfk1HNBHMzZsTRlJuNFj%2BeYaGu7jxudB42%2FnnyKcYrsMCwq4AY1omGakJQKXBfEyFlbz403s5pxu2k6ygQQoFAm%2B4oaUjJD5MSTnMH9QSwytK%2B8V9aHxCj4TlQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 923b1bdf0efc56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=849\u0026min_rtt=444\u0026rtt_var=204\u0026sent=595\u0026recv=140\u0026lost=0\u0026retrans=2\u0026sent_bytes=802384\u0026recv_bytes=3921\u0026delivery_rate=70564507\u0026cwnd=284\u0026unsent_bytes=0\u0026cid=874feb8d33a12a41\u0026ts=143\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23925,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"e6531c0c47e53a6a9001584a0194da73","sha1":"9030997b339b418d7c3b8bf99eca4a7d28330ed1","sha256":"f88d4515fda6c8f1caea76b6ee1adedf6b613a24c8bba1751675fe6ba8625b7f","sha512":"908bd49718f2e979f6d0465d9d17533d1a7d3642e8161281c5968dc52f456cda5a4c188fa5d25b6cf8217fa9f0f530b6558e67415d7083471a4c9528faf3221c","ssdeep":"384:mL/RpeeVLdRQgRMGMIKG53P6qL4opDGjHWV5sBi/SPIxqlKL8/KbAujLRFqR3vmH:mLpgeVLdRQOZ3Sq/YH5BusIUlC8iMuBh","tlshash":"d4b2e1e651544f58c4fe3e774f0da4591cfe81e36e26a09deaad41b7a33ec20968d2c0","first_seen":"2025-03-18T06:51:28.240368Z","last_seen":"2026-03-01T21:47:53.269507Z","times_seen":43,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":173,"dns":35,"connect":2,"send":0,"wait":21,"receive":1,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/84b705dfbd5a8cf21e3ac794e96cc7549a8e8e1a.png","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/84b705dfbd5a8cf21e3ac794e96cc7549a8e8e1a.png HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 29047\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"00000000000000000000000000000000-1\"\r\nlast-modified: Thu, 15 Sep 2022 12:02:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 1818F7573F5CA719\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 155\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ucuwxKexE8PWLQRtaL4SwgeofrLuPbo4usDDuwr4M0cm4USzJ0H6DHSpoqeBQTy4U2afuKQSPIRcTLVbNAsEZaqkw9Q1ye5F%2BH81gaGDC6Yio5xkaA7o8scsATV0KXxlaw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 923b1bdebeb856be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=864\u0026min_rtt=444\u0026rtt_var=859\u0026sent=13\u0026recv=27\u0026lost=0\u0026retrans=1\u0026sent_bytes=3295\u0026recv_bytes=2902\u0026delivery_rate=7729537\u0026cwnd=256\u0026unsent_bytes=0\u0026cid=874feb8d33a12a41\u0026ts=96\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29047,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"72eac6176c1bb11388a5e609856efc7b","sha1":"56e97c552ae949be8679b8587d9539cef049f93f","sha256":"81b2acd9bbfb9f3127342050e4c10e3aa03cb227fd4f2c45e043fdb3bfeaf909","sha512":"71dfebabc3ebe64a1d7f64d189ee37b036a02509e151b5ecb3d9276729db1524e292c4939951a965a4614e441cc1011bd11c82e30b699f10de18abfd4524c3a3","ssdeep":"768:uhFXNLlIdATTUtYK5Nf9Voy/5SGFs4mMxSX:UF9LlIGTUX57Vl/EYigi","tlshash":"69d2e12966e9005ebe55ead0805e6297717718c80709b6c737f8da7c9704e6840ffef8","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-07-12T17:41:43.663287Z","times_seen":67,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":108,"dns":29,"connect":4,"send":0,"wait":11,"receive":2,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim2.ru/api/visitor/v1/configs/default?jsonp=true","fqdn":"gx.webim2.ru","domain":"webim2.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:28.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"webim2.ru","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Dec 2024 10:41:08 GMT","end":"Fri, 28 Mar 2025 10:41:07 GMT"},"fingerprint":{"sha1":"39:22:2C:F3:51:C3:18:D9:E0:56:1C:F4:75:2C:8C:7D:D7:C6:50:3F","sha256":"3A:AC:C1:DD:28:20:B3:C8:03:99:4D:E0:23:B0:5B:D4:F5:06:10:9E:06:A7:B3:20:A3:45:F2:29:D5:3E:95:63"}}},"request":{"raw":"GET /api/visitor/v1/configs/default?jsonp=true HTTP/1.1\r\nHost: gx.webim2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 21 Mar 2025 05:39:27 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 5096\r\nConnection: keep-alive\r\nCache-Control: no-cache, no-store, must-revalidate\r\nSet-Cookie: WEBIM_LOCALE=ru; Domain=webim.ru; HttpOnly; Max-Age=86400000; Path=/; Secure\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5096,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5715), with no line terminators","md5":"2a5e5dea596e7e8774e5a32734369004","sha1":"959760112850ab2fb3c7961ea355959aa029875e","sha256":"1299189ea3400b9501c395805bb7b80963bd7f1e5cab55503b53dc04ac5c053b","sha512":"caf2bd5e6b41c78ea2962817ef2d0f78edb92407d8ea6d04ef8caeb6f1136debc2ff2e02deb4870b59724f48a9c7c214008fa8f11e6fc3953efd3a6859761c71","ssdeep":"96:mo1zGGAq/K7PolxrJvsSJW2r0qNTQTGr9Q3WCw5/ut49hOQyL6IyI3Qs4Si8:P7d7xRdNIFw5/uOhOQyZ5V","tlshash":"eac10f97e85a4b3b51c7254eed3b5a7e936c8086cd80172d8f5b9c6e234b1b45723740","first_seen":"2025-03-21T05:40:08.963545Z","last_seen":"2025-03-29T11:19:57.9298Z","times_seen":8,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/providers/playson_premium.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:29.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/providers/playson_premium.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=paon3zTrYjcj2WRp; __ddg10_=1742535568; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=zxpt830S1ccBoAQp; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg10_=1742535569; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 604\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-4b6\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1206,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e16b6380411829b323cc4bfeef45aba","sha1":"9d3b1a47657f0d2151090ed900a44a55682433d0","sha256":"f9f01f9bfef74f62caa5df2c87041e698341bad95e369d4b4eb2004cc1bef208","sha512":"d89854dcead7c2e64ae430e92655ecfaed10cc618596283c9f61dbaf4f7d5d6a78282dc76d08e9eb1cf1ec2b6e5571bafd4563b08a96c79d3472f5335d2f7cea","ssdeep":"","tlshash":"dc2124fbe39eb7d1dc088320cd2989b450a6757e7f59a39d42d0ed72e52645d1c44c90","first_seen":"2023-05-21T11:43:23Z","last_seen":"2025-03-29T11:19:57.758056Z","times_seen":10,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/v/images/files.svg","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:29.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 21 Jan 2025 21:48:29 GMT","end":"Sun, 22 Feb 2026 21:48:28 GMT"},"fingerprint":{"sha1":"C9:8F:2B:90:8F:AA:A2:41:5B:E2:A2:52:7D:CB:E8:06:B8:A0:74:B2","sha256":"A4:69:EC:34:42:8B:01:37:A2:0E:C6:34:5F:3A:A3:2C:80:A3:01:0A:B8:13:8B:33:B9:87:E0:C2:5A:16:AB:59"}}},"request":{"raw":"GET /v/images/files.svg HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 21 Mar 2025 05:39:30 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 11762\r\nLast-Modified: Wed, 15 Jan 2025 07:23:25 GMT\r\nConnection: keep-alive\r\nETag: \"6787626d-2df2\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11762,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a05b040566ca5377535a07f94adb66ac","sha1":"fd3d544bf14f3c9ad33f6c9d17a861371d7b684d","sha256":"e85418c502fc12e921c30c21ab3c5ab58dd063e19b73fa231bd0d7bec2a605a7","sha512":"346d1a3979f32959851081a764e87950a602560638e9f87594569c395b6347844338faebaf8016982e269134978867497ad4152e6e4cd86ad681e61f09f21730","ssdeep":"192:y3IN8A3nLn/NTLpsCPeweE/c+okq+eRuDUfMYzLnoP+VhwOwyHN2ELrh:wIN8uLFUOom4zLnoPqhwVQhXh","tlshash":"0b321bb23efe2a843ef19e75852073f59cf1bd152485d22688da7202313364c8e9e5f9","first_seen":"2023-11-18T23:23:23Z","last_seen":"2026-08-02T00:07:57.692137Z","times_seen":1797,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":126,"dns":10,"connect":31,"send":0,"wait":32,"receive":1,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/CiSU6wCi.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:31.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/CiSU6wCi.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/CTURe_1d.js\r\nCookie: __ddg8_=4pMjNymdpj2UFdL8; __ddg10_=1742535571; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=zvO3cV45eYuF7HAa; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg10_=1742535571; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-af7\"\r\nage: 2897\r\ncontent-length: 1344\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2807,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2870), with no line terminators","md5":"1f361b52973ca5ce74b162454db31229","sha1":"232a59888ff72d15dc694f1ab96b6b63a108b883","sha256":"684186ac808b966c67087f3e686c061b033272e0b912893103abde27efb6c66d","sha512":"69628b3f1582b7d9037f2f301346dadd3f918a2004858d62a6b84285972951ddcff9677bdfa32554ba890dbab62c3620cd507f133691b8fc8f04d5b47120f4d2","ssdeep":"","tlshash":"1051940cb53a98797238ac96e6bb039a261132837d75c468608eec07fb099d3d6477a0","first_seen":"2025-03-21T05:40:08.965484Z","last_seen":"2025-03-21T05:40:08.965484Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/entry.B0BOi0i9.css","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:21.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/entry.B0BOi0i9.css HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=s6a1IZLaTAntwD2B; __ddg10_=1742535560; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Y5cOcA9Eix1a400q; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg10_=1742535561; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-1080\"\r\nage: 0\r\ncontent-length: 751\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4224,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4225), with no line terminators","md5":"b8a870cb8b264407f5c0d81abd8f6382","sha1":"e7138dbf39857f615184270a24806e425a7b0bcc","sha256":"59b135b33dce37f4d695317fe40277522ac1eff894725ac3d643e9b742af4373","sha512":"86eb3a41a0c8501cf30cfd2f67d27cafe7bcbb90435d74209c67b4b29e878001ca8e56947b7c53f7aa2cd8a62667279abe7e2ba64d047b395fcba28057e2efdb","ssdeep":"48:qBK1KVrwxo7yXr29OKJgbKA7cb2XYKBKJKeKbKaeEaSkeEnS0SSSWS8VSfHeEPee:qxi8yK9RHN4MEBWWXIShv7JRhW4D/qy","tlshash":"6b91ff7fb288f6580127ff02a4a15bddf42b23b0b2522a15f2d5523061b67d1bc29d7c","first_seen":"2025-03-08T20:48:29.195744Z","last_seen":"2025-03-29T11:19:57.794499Z","times_seen":10,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssogtx01.cc/go/auth/code/check?url=aHR0cHM6Ly9nd2ZnODR4LnNwYWNlLz9zdGFnPTgxOV82N2Q3NWJhZDcxOGY5MWFjYTQxODk0Y2Q=","fqdn":"ssogtx01.cc","domain":"ssogtx01.cc","tld":"cc"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-03-21T05:39:22.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ssogtx01.cc","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Mar 2025 21:17:37 GMT","end":"Sat, 14 Jun 2025 21:17:36 GMT"},"fingerprint":{"sha1":"86:1A:7D:E2:F1:D4:0D:4E:A9:41:BC:5D:06:01:AF:F5:17:2E:A2:DA","sha256":"42:D5:FF:3C:14:6A:F1:2C:E4:3D:A2:F5:5D:9E:40:53:7A:32:B6:19:4F:A3:ED:AE:40:EB:47:6C:5D:84:A6:AF"}}},"request":{"raw":"GET /go/auth/code/check?url=aHR0cHM6Ly9nd2ZnODR4LnNwYWNlLz9zdGFnPTgxOV82N2Q3NWJhZDcxOGY5MWFjYTQxODk0Y2Q= HTTP/1.1\r\nHost: ssogtx01.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=a0jHXK1hXy4Bq5XA; Domain=.ssogtx01.cc; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg10_=1742535563; Domain=.ssogtx01.cc; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg9_=91.90.42.154; Domain=.ssogtx01.cc; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg1_=JrTpCEtRphM7LgolnfxK; Domain=.ssogtx01.cc; HttpOnly; Path=/; Expires=Sat, 21-Mar-2026 05:39:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:23 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: private, must-revalidate\r\nlocation: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\npragma: no-cache\r\nexpires: -1\r\nvary: Origin, Accept-Encoding\r\nx-request-id: 76953271-7e4d-4dd5-950b-06c916804608\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":371279,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":747,"timings":{"blocked":316,"dns":41,"connect":22,"send":0,"wait":112,"receive":0,"ssl":251},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"ssogtx01.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/Hacksawgaming/7ff508ea230f4c88b025ef32692dbcd7.png","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/Hacksawgaming/7ff508ea230f4c88b025ef32692dbcd7.png HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 31746\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"237c00d350be36d52956b2870e1dd118\"\r\nlast-modified: Thu, 17 Aug 2023 09:36:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 17EC98BD9D8E0EEB\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 7133\r\ncf-ray: 923b1bdf0f0056be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31746,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"237c00d350be36d52956b2870e1dd118","sha1":"6a30519470a594318fcfc9189851c37d7e3e1da9","sha256":"ff25df0fe6236a03a268ed69367ef6fc79c1e5283d81da2d26e44d3b869af692","sha512":"1018378232cb766b86b5c4aba4aa0557c47aaac0b2a3075184738e875d3faefdeae0ea278fd6ef5c58037c1bf2725c6a49d44dc52b5ad02cd1fa004db180cf36","ssdeep":"768:MMK5EPmyBS7iGhIv+gcA3XoBgIOzLTozciOFmnQ:MMEEPmyBSLhIvX5XlIiViOInQ","tlshash":"37e2f11334c5deb51492ce37a469334208cba9bf8cd82486bb5d85ca44fff51609e827","first_seen":"2023-12-13T17:48:16Z","last_seen":"2026-06-05T18:43:38.64275Z","times_seen":64,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":109,"dns":3,"connect":1,"send":0,"wait":20,"receive":1,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/providers/habanero.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:29.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/providers/habanero.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=mdnhjFHyFlAtXYOW; __ddg10_=1742535568; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=PLoPrf47D1rExOad; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg10_=1742535569; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1425\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-1150\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4432,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e446f91e418d487bbe924fc669c980d8","sha1":"186b12ccebedffd22e45350f3ae7431704aea55d","sha256":"e709bdef98c0f9ad660519126483f75268c52493713f76b3e6280483bcabf3b2","sha512":"999ac82c80ecc86c852e1cc4db64af96fa32ccb8b7e219e0e42804cad3b39049c45f7bc29b14510ae4fdeffadf99e687392ba06c4389cff430b85fdbcccb8e86","ssdeep":"96:3VAtVZKkO7J3+PbBjdAs8YhsliWaDn3RYKohMLnFJ/z:3mtVZCJw6s82stE3RYiLnjL","tlshash":"f79141e7e794c0b1e246d7bdcb0958b471b638ffbf5782e946e42e9e61340ac058c590","first_seen":"2023-05-21T11:43:23Z","last_seen":"2025-03-29T11:19:57.830113Z","times_seen":11,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/crash.BA_g9FKt.css","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:31.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/crash.BA_g9FKt.css HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=2BFtV41K05TOVH6y; __ddg10_=1742535569; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=5jCHZWin5VWKzP6m; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg10_=1742535571; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\ncontent-length: 1862\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-2283\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8835,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8844), with no line terminators","md5":"0651afac019577cf1de8d3ce548ee89d","sha1":"7f3eac95b6154c1ef0ed8a71a9196d4a16b5bab4","sha256":"ac1f70b14ed20813cd0654a147099a365f5d2b29c9f321218ff79635dbfc52b9","sha512":"9c53de0c872db765eaf09baf47361926bd19f2269ef913a2fb36435a00eff285216ba834e42eb66c26cc6262614f8376d9958c3b135b2ad659b7fac553c1bf3e","ssdeep":"96:xqHaLLBqGQpNgkM369E+a9aEaWcrAdEWfKyODWya:bLAGSMcau1rAdGqya","tlshash":"71028232369ca87ab17fe252f960568c076ee90bc223139de2a87435528fbc72577194","first_seen":"2025-03-21T05:40:08.968813Z","last_seen":"2025-03-29T11:19:57.78863Z","times_seen":8,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/js/fp2.min.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:21.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /js/fp2.min.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=s6a1IZLaTAntwD2B; __ddg10_=1742535560; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=GS4c7ftFEIeR2rDo; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg10_=1742535561; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-883d\"\r\nage: 0\r\ncontent-length: 11235\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34877,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (34698)","md5":"02087a3f4f46b15bc198570d800bff41","sha1":"e59f5e3521d8c60e5772de1f65c90e5b87d9eb9e","sha256":"e753042decd90a96d0636a7df16df556860af92ca09ac37f0f6ab1d574acd1f1","sha512":"2c733c348e26c0b400befd5ccac6734eb06a0ca0c8c638f8d3a66afd75ea5860c6cfd3a913ba6dd6824bd9c629c2f28d14204efa625b10fa8fd9b366ba82c968","ssdeep":"768:J2N6EbuZaWRhGT8e20R5J++t6cOrVrzib:oxuZaWRhGoF0R5UVra","tlshash":"e6f21b96b2e8373c8143b063394bec15fb799495e784808a5e2d4180f8758e9e77bdf8","first_seen":"2023-07-23T18:22:17Z","last_seen":"2026-06-26T20:23:29.90284Z","times_seen":1217,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/3MjjOpd1.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:21.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/3MjjOpd1.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DNNdIs2A.js\r\nCookie: __ddg8_=RbNrh8y3wkGBGL31; __ddg10_=1742535561; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=8rRDfyAt6GQDutfK; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg10_=1742535561; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-66c\"\r\nage: 2901\r\ncontent-length: 915\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1644,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1701), with no line terminators","md5":"119ce3103deedcd0a45471fe59b71846","sha1":"8a5ffb64499685c6f095fcec2d691667a1d4c9c2","sha256":"a49edf31f8c547c4f449c36fb72c073aadac9795190fe2890a8c4c591e006466","sha512":"6402322d4813bd7672ad4ce26886fb0a908752b1e1389c4b69ea8c690c8236982ccd2e8b43d47450c7b559c43c9b49588297c040a53f1153148f7e6af2219d03","ssdeep":"","tlshash":"ef3174cef258e573d0a7e7a845324431b8a275fb3e99e7d48684d5351323074664a6c0","first_seen":"2025-03-21T05:40:08.904164Z","last_seen":"2025-03-21T05:40:08.904164Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/Home.BaH26edq.css","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:23.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/Home.BaH26edq.css HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=r1ryIKEwRgebQf7Z; __ddg10_=1742535563; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=uIvn1y36uB8eqkgd; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg10_=1742535563; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\ncontent-length: 4309\r\nddg-cache-status: HIT,HIT\r\netag: \"67dc31ab-66c1\"\r\nage: 2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26305,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26304)","md5":"9bfee17c77b5efca75d28aa0698a624c","sha1":"2b7c77af7a641ca8ca2dd8bc68346ee0ee9ebb23","sha256":"29e8717c7487c2edcb4c08fd69d56f063793e3120add8c56a7d92bac3c591ef3","sha512":"09221ed51320161515126c35411d307142fb5788411db4c02746da0d4d2cf18a5a512a164381b9919a32c78e621e736c328db0cab773cbf8b32c1683d4210e6a","ssdeep":"384:9WVzWXH6eKEHqxR3uIRBksYCsk7JWGrqxo:9Tq9EKxusYCxrqxo","tlshash":"a0c2b830775d6879b4b7f669b4912a4c2159f307fb120b79ad89b83cc4db5433237a88","first_seen":"2025-03-21T05:40:08.956468Z","last_seen":"2025-03-27T04:39:04.386572Z","times_seen":4,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/6e514731d448e9ce4bbec08ee14d054fa5570d54.png","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/6e514731d448e9ce4bbec08ee14d054fa5570d54.png HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 34843\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"00000000000000000000000000000000-1\"\r\nlast-modified: Thu, 15 Sep 2022 12:02:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 18269774E2D8BDE2\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 7132\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=EPx6Tdxxno4pjAXmU%2B0T2Jgxkwe3jY32Ehl1M%2F%2FLWLPq7B4WgH9I59K7uM5nab2Ga3pcZuMpvUkxF6s39HF0CQk3SIQys0O2kT%2Bb6NE8u5eXQsG2NrlSti5zOcOC0%2FsSdQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 923b1bdeced356be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=869\u0026min_rtt=444\u0026rtt_var=428\u0026sent=193\u0026recv=47\u0026lost=0\u0026retrans=2\u0026sent_bytes=245359\u0026recv_bytes=3121\u0026delivery_rate=37287553\u0026cwnd=200\u0026unsent_bytes=65802\u0026cid=874feb8d33a12a41\u0026ts=106\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34843,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"f117aaf99d021bfe3e9d0dcffda4c951","sha1":"f16e5517be14af6acd42e8e785fe79042ef48ef4","sha256":"1d2a69fc0a3ab77d23d7f8562202a6335452bd2a7fed0378a9c9a6cde83da128","sha512":"50793ceb68f77357d9a033a5362de16312edcf52f18d584ca2b7307dd8f5b6e8dc4f8d81b483195b77c2e71614323711e91762ff2a01709c65a104c09945ffc2","ssdeep":"768:ZElR1K7AUNgBLHLPGFtb1vAEwIebo82WgMLew91Qpfx8V:GSjNuLP4HA7jJLew9kfaV","tlshash":"57f20143e0993f7d7ea0b0e9620b1198208e1abdb5494b5cfd7b4c2e49a5cb7c07c2d2","first_seen":"2023-05-21T11:43:22Z","last_seen":"2025-11-17T07:15:25.452965Z","times_seen":47,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":29,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim2.ru/images/cursor.png","fqdn":"gx.webim2.ru","domain":"webim2.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:29.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"webim2.ru","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Dec 2024 10:41:08 GMT","end":"Fri, 28 Mar 2025 10:41:07 GMT"},"fingerprint":{"sha1":"39:22:2C:F3:51:C3:18:D9:E0:56:1C:F4:75:2C:8C:7D:D7:C6:50:3F","sha256":"3A:AC:C1:DD:28:20:B3:C8:03:99:4D:E0:23:B0:5B:D4:F5:06:10:9E:06:A7:B3:20:A3:45:F2:29:D5:3E:95:63"}}},"request":{"raw":"GET /images/cursor.png HTTP/1.1\r\nHost: gx.webim2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 21 Mar 2025 05:39:29 GMT\r\nContent-Type: image/png\r\nContent-Length: 591\r\nLast-Modified: Wed, 15 Jan 2025 07:23:25 GMT\r\nConnection: keep-alive\r\nETag: \"6787626d-24f\"\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":591,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 17 x 27, 8-bit/color RGBA, non-interlaced","md5":"4fa7bdcd138f8aee5178f0d4f926595b","sha1":"6d3a5103766e97395bebbd2ffe811b2e7ad3c7c0","sha256":"a1fb1b429d644ad011e6bd98701d1951138d3f973bda19ce3411e1c1d65ef35e","sha512":"81d75aeb19459f946924b46919bc1c4f447dfc0a0b56915ea19edfca282ea936c4b58a9d417459fa1b41982380200b3a894a8fda09faeab075556defcec883a3","ssdeep":"","tlshash":"fbf047cd4d715339af5e04d190f714a8fc45228a2460a51c4e0fd01a3d85055fe0d34f","first_seen":"2023-05-01T22:32:10Z","last_seen":"2026-08-02T00:07:57.702418Z","times_seen":2296,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/Icons.DLETUd-D.css","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:23.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/Icons.DLETUd-D.css HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=t44G9X48ms9HCwMK; __ddg10_=1742535563; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=y2eMXbco1nocmuU1; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg10_=1742535563; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nddg-cache-status: HIT,HIT\r\netag: \"67dc31ab-2ce\"\r\nage: 2\r\ncontent-length: 167\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":718,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (719), with no line terminators","md5":"f09648d5397898c18deca62590af613e","sha1":"820f4092fcef82848a7254d4e22a9031e7c318e8","sha256":"b4c7e7d8ceac4b9b2602f817f76ba1074cda31ffe7f49cf4c64038a155741481","sha512":"084f9c23cb35c2e1d79cf4655b7d13ee2ac685f70ae879a95282f0fe81869089df094e8980cf07602d5f944949e5b10c3b850ed05be2392d78e1db77c9496b02","ssdeep":"","tlshash":"8701887d3546f903b72bca8ec24480a322e27b67ddd14542698b7d3a75767602a0f173","first_seen":"2025-03-21T05:40:08.952829Z","last_seen":"2025-03-21T05:40:08.952829Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/favicon-16x16.png","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:23.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=ZXEgGxkQn6ZK5OtK; __ddg10_=1742535563; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=yGUXNJOkqMlBWX6T; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg10_=1742535564; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:48:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 1103\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"67dc31ab-44f\"\r\nage: 3067\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1103,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"11f24fdbf91f702bda779fc31cda72b6","sha1":"675c7e4a5d8443b041056cf934a6e2f652914a62","sha256":"22680e0318483689dda6c739ddcada0864dc530300444247c87d8233b347b858","sha512":"56998c6ce69ca75e2c00756450a2c33ed491a5be0499d5003eb3638d643efb5d395705a986df5301f74ffc9c0f10c707b9e7837a491ec7afa55f349240d2087e","ssdeep":"","tlshash":"de1146d1e121e051c26614f169222480ff67407bfeff8b1afd22a4145c5a6b997f76c1","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-06-26T20:23:29.961595Z","times_seen":155,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/home/slide-2.webp","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/home/slide-2.webp HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=p6jbeaWUrL6qwblm; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ZqAK1Fca0Rh3kC1j; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:49:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 215002\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"67dc31ab-347da\"\r\nage: 3009\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":215002,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1720x1301, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"19d54425252b648c6a41458da0e50631","sha1":"0ea250e5449ebf1d1ab4c106524c081d3a9ebf33","sha256":"3868bcacb6b8d1bde6e0fe8026b22bf3466c116c01be07a7bf1be4453bc4aa36","sha512":"26e09d9637eb393b90b05a8c377243573246f75801757821fbc4e79387295da00ed323ceb5892997e864991308180aa5dba6a316007bf5e0ebc7a61f203f7350","ssdeep":"6144:OMROO9CLO5WakLm9wkEBmy2rhjb0ntWp/QX:Hf9h5wm+Bmy2F+EC","tlshash":"8624122af4658820ccdc9d71e9e4d6d20ec6d19c14fded3aec2495a608de3ec05e4bac","first_seen":"2023-07-23T18:22:19Z","last_seen":"2025-03-29T11:19:57.78771Z","times_seen":19,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"licensing.gaming-curacao.com/validator/?lh=511aadd110f565d008810403b6cffb85\u0026template=tseal","fqdn":"licensing.gaming-curacao.com","domain":"gaming-curacao.com","tld":"com"},"ip":{"addr":"104.22.74.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaming-curacao.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jan 2025 18:58:08 GMT","end":"Mon, 28 Apr 2025 19:58:03 GMT"},"fingerprint":{"sha1":"B5:47:15:26:22:58:C8:C2:43:CE:D7:63:36:DB:C9:40:F7:11:B9:26","sha256":"C9:2D:FF:06:7F:12:81:C6:E6:66:5E:ED:99:A2:12:73:08:B7:C1:6C:33:20:76:DF:71:60:0D:C4:ED:1A:B0:F7"}}},"request":{"raw":"GET /validator/?lh=511aadd110f565d008810403b6cffb85\u0026template=tseal HTTP/1.1\r\nHost: licensing.gaming-curacao.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Fri, 21 Mar 2025 05:39:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/5.4.16\r\nset-cookie: PHPSESSID=q4790551jtb8kha732iem8bnm3; path=/; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: private\r\npragma: no-cache\r\nx-robots-tag: noindex\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 923b1bd87d1d9938-ARN\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":602,"timings":{"blocked":60,"dns":7,"connect":13,"send":0,"wait":481,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwfg84x.space/games/casino/highRollers","fqdn":"api.gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Mar 2025 15:13:14 GMT","end":"Mon, 16 Jun 2025 15:13:13 GMT"},"fingerprint":{"sha1":"BF:F6:26:CD:19:DC:7A:9C:43:5D:6C:E2:14:15:6C:4A:04:14:44:99","sha256":"BA:E2:88:D9:EB:25:85:70:88:7D:30:E4:9C:EB:DE:65:CB:CC:3E:F0:3E:AE:33:E2:5D:87:13:51:8A:CA:D4:E9"}}},"request":{"raw":"GET /games/casino/highRollers HTTP/1.1\r\nHost: api.gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=g9pMPNCjfASbLWQk; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg1_=FC1YtqP7DHztlTsfanAL; Domain=.gwfg84x.space; HttpOnly; Path=/; Expires=Sat, 21-Mar-2026 05:39:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 21 Mar 2025 05:39:26 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 86\r\naccess-control-allow-origin: https://gwfg84x.space\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: c9884bcf-e58d-4b08-9f20-172f4686573a\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1506,"size_decoded":0,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with very long lines (1693), with no line terminators","md5":"be6d527a5b7195cb7c851a86bca5bcd9","sha1":"ed6866f20b115c2a3339a57877f06c62238d47e5","sha256":"c1d56425b38c6bbda2c41dfecd6dfa306986f668effbd44bdc403f0548505821","sha512":"436741cfb716dff2799d202ffbcd68752585d504aaa0c1ebf8bee64dc555905e69754b9cdd3c61c69ad28c17cdbced816d223739c3aa9e51ec1b19f15c24eda2","ssdeep":"","tlshash":"5131d18df43adc90e1944c092b3f7eb37149a00e15ce1584eeebe924436417ad2b4cbd","first_seen":"2025-03-21T05:40:08.972813Z","last_seen":"2025-03-21T05:40:08.972813Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/Bw8_SVVm.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/Bw8_SVVm.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=hR8641O7of70Crwg; __ddg10_=1742535566; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=VxFk7v9codUzz8Ek; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:27 GMT\n__ddg10_=1742535567; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nddg-cache-status: HIT,MISS\r\netag: \"67dc31ab-18a\"\r\nage: 6\r\ncontent-length: 296\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":394,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (413), with no line terminators","md5":"778b2d7e636674cab8cb640f91a03c5d","sha1":"4a2202cb9c66092297382b6213178a3a3f07bb23","sha256":"856d58b36b4a580a0feb8ef55e4189c359e727ca271b576e416a2ea369899576","sha512":"5347579b82a3150390428d8345c31213e3641b171cdf428dde20a0498ce0257e96041cc0385e96bdfe7c2e0582c92c83a3d4db585c14fbdf30d46aa32e585a8d","ssdeep":"","tlshash":"9be0f80c3401c67133137bf0e03708768e20bb0a3334b88a02cecaa0b306161b80ef02","first_seen":"2025-03-21T05:40:08.97352Z","last_seen":"2025-03-21T05:40:08.97352Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/Gamzix/0abac1a672976c3b4065c25634dac198f21fc836.jpg","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/Gamzix/0abac1a672976c3b4065c25634dac198f21fc836.jpg HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 53594\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"7289c2b566fd167d54efd41e0187c970\"\r\nlast-modified: Thu, 03 Nov 2022 12:36:27 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 1809AE57E62B3973\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 7133\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ajVdMp7pf4K13BuZ8hRBi69UugWagm0972aYp2BPymlVTp6RY2aRrosU8BupeWiX0jzAYDI%2FU2uiSWEsPzwf84gtUir0nDyDsz9e9k13%2F2EvFh27Bkc1AF%2FeFHC8WN2tIA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 923b1bdeeee456be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1059\u0026min_rtt=444\u0026rtt_var=666\u0026sent=349\u0026recv=73\u0026lost=0\u0026retrans=2\u0026sent_bytes=461052\u0026recv_bytes=3573\u0026delivery_rate=4984509\u0026cwnd=282\u0026unsent_bytes=52792\u0026cid=874feb8d33a12a41\u0026ts=122\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":53594,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 287x193, components 3","md5":"7289c2b566fd167d54efd41e0187c970","sha1":"67ebae52d0754b248799e87cbf50dad7f2e6ae62","sha256":"9475727ffe3f4d12f5cb2dfc3be7dec1e5f70e9f0e3c9db4502865fac08b82dc","sha512":"540314804204c2c3967ed7e7a004d5e818a4f1dbfabef5c36f7a6071b26e23cbed681799c35ded4b20f609cfa33f60b61b37e2ef457aa63a6b6adc58a9478624","ssdeep":"1536:s9/KyKV87K/PvToE8nO8Nz7scvbqJIIkK:sNKtmCT78l73zbtK","tlshash":"8c3302c9d86fc322c09dd39136ba69868a0f17a5eda510ecea0b056bd061069e13d9cf","first_seen":"2024-12-10T17:19:34.395048Z","last_seen":"2025-03-29T11:19:57.80717Z","times_seen":10,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":24,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BVxTRXQb.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:21.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/BVxTRXQb.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DNNdIs2A.js\r\nCookie: __ddg8_=RbNrh8y3wkGBGL31; __ddg10_=1742535561; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=w25wAWrQoTDboe74; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg10_=1742535561; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-8ba7\"\r\nage: 2900\r\ncontent-length: 9369\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35751,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/Chd1ThOZ.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/Chd1ThOZ.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DmT_aqZN.js\r\nCookie: __ddg8_=OUfJMXjsch1vBlTq; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=40RxGqeTSx5rz2LB; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-47f\"\r\nage: 2906\r\ncontent-length: 678\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1151,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (1146), with no line terminators","md5":"c21304912e58a1fd9db28613130be883","sha1":"2d84c349c65c1f2146a75c468c10788aaaa4b5c6","sha256":"eac0c67f8f76b9fa322fd329723dddae055d08e3fd09a3ffcc8fe5674de83036","sha512":"25ce878749ac9c6f9a42f1535671da758cc5869a6bbbd27011b0a2b4025fdcfd206069cb1f3bd13a1bb1991d9e81a39872c18f3429f75399918c7ecd91c50e1a","ssdeep":"","tlshash":"ba2133aebb3a57bc7c145a5f42346f70f0032096ffb8545cb8d22116e3525a155540b4","first_seen":"2025-03-21T05:40:08.975117Z","last_seen":"2025-03-29T11:19:57.900803Z","times_seen":8,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/sounds/click.mp3","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /sounds/click.mp3 HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=2SzmHFFbLOSRCH1c; __ddg10_=1742535566; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=tXy1wHlIyVm43lm6; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:26 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 6731\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-1a4b\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6731,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"b497ee5b7f24d5540859a2fe9a2f94a8","sha1":"402f32b8a0c59a6655cee008020948c8b0dc3878","sha256":"627e28dd820dbe208a2d764c086b4eca2c54330b9741073bec9da852aa592962","sha512":"1f0e4fd80c187354ac665cf7e3dc52b8834ef35022c6fe922db3aae0f89f8530c5e97aa2d4860f2351c8fbf05ea2252593d626d12b8f90865b7eca6b6a476ee9","ssdeep":"192:79qf6EhSf0IotHNKWliJRgFn0DsEZM8+h/wgMgl:79qf6ASfCtHtliJ2F6sEZMph/w1gl","tlshash":"cad16d6a6d478951e40c5570d8ce1b4c737824b5afb0b3daa267f79e00e536c12ceb29","first_seen":"2023-04-10T18:19:05Z","last_seen":"2026-06-26T20:23:29.963181Z","times_seen":1246,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gwfg84x.space/games/casino/statsGames?limit=4","fqdn":"api.gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Mar 2025 15:13:14 GMT","end":"Mon, 16 Jun 2025 15:13:13 GMT"},"fingerprint":{"sha1":"BF:F6:26:CD:19:DC:7A:9C:43:5D:6C:E2:14:15:6C:4A:04:14:44:99","sha256":"BA:E2:88:D9:EB:25:85:70:88:7D:30:E4:9C:EB:DE:65:CB:CC:3E:F0:3E:AE:33:E2:5D:87:13:51:8A:CA:D4:E9"}}},"request":{"raw":"OPTIONS /games/casino/statsGames?limit=4 HTTP/1.1\r\nHost: api.gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwfg84x.space/\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=GxJmp0U5oySIVUD2; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg1_=bm2nJfkdMFLJ8fmHJ1qJ; Domain=.gwfg84x.space; HttpOnly; Path=/; Expires=Sat, 21-Mar-2026 05:39:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Fri, 21 Mar 2025 05:39:26 GMT\r\naccess-control-allow-origin: https://gwfg84x.space\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: b84a2fea-c347-4be8-bc77-f1f04b8868f4\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/PragmaticPlay/7cf4cb224da44bf7a5a76b057dc75794.png","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/PragmaticPlay/7cf4cb224da44bf7a5a76b057dc75794.png HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 26850\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"9c386aecf371a82630f51cd520e2044b\"\r\nlast-modified: Mon, 06 Jan 2025 19:17:08 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 181835269C0F38FE\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 7133\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jnLNRhBwqRpz9hyPm%2F0uPPPLk2KG3Ri2kkCMceZJG4LY2MoSx93Z3mBEXLvboVK%2FWk%2FJXTTWM8SHQcLcD%2BmUXyR%2FKTp1sB6xg%2Bkx5fRiipS%2BmxQNErhdQkUmyWIxBOHd%2Bg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 923b1bdececa56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=725\u0026min_rtt=444\u0026rtt_var=298\u0026sent=92\u0026recv=35\u0026lost=0\u0026retrans=1\u0026sent_bytes=104801\u0026recv_bytes=3011\u0026delivery_rate=20435483\u0026cwnd=256\u0026unsent_bytes=5616\u0026cid=874feb8d33a12a41\u0026ts=99\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26850,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"9c386aecf371a82630f51cd520e2044b","sha1":"11bebc861ad66991c50291778db895b5e5eaa9ef","sha256":"7603444fa5ff104be0085fe35b4fc0d3725fa3c692642b55c969fb1a46f8db49","sha512":"2d1249c48f7a3ab5eb82fe5357cbded33f258cdb10b10137309676f90322ce66a6d25fd7eddb6498e4aa4ff7fdf47279949377f438f821df654b13649fed1f18","ssdeep":"768:vHz7sbFexlk+p+pcQddei4KN2Jsg9Lj5ZChY:vHsRexlgpcQdd54wgZWY","tlshash":"cac2d0550234edce3cade5c98f44b82a9f3dcd285a87f31445a5cad38985395c760bbc","first_seen":"2025-03-21T05:40:08.976225Z","last_seen":"2026-06-04T00:08:03.785877Z","times_seen":18,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":33,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/providers/mascot.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:29.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/providers/mascot.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=SNY2ngnQoiEB1X8F; __ddg10_=1742535568; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=KdiAPkHoKgokvA1g; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg10_=1742535569; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3896\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-2297\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8855,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1b40580d02999bb4328fb4aa0209b5fc","sha1":"35454d2c6f08be44c11d25525d9342d576fb0d6b","sha256":"ce45afa903aec84e116aae30e31a1f89b3597a806781e2922286fae974101dcd","sha512":"fe50cfa2894f380314a94f3616f8634ddb6b87b01c009caad7877766f1741e0659a1c690495a389f205e7219306facb5479292b84d51c96c54d24389d551fa1f","ssdeep":"192:XzwoU6e9m3S4h/AdzlibfpbZlcOyGh7RljU1:jwp6g4hYfibpFlcOx7rm","tlshash":"5d02969893a8e3f8f642b7e8ca27c830767628f97f10ed99c7e96955e50002d45d8cd3","first_seen":"2023-05-21T11:43:23Z","last_seen":"2025-03-29T11:19:57.916558Z","times_seen":11,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/loading.gif","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:23.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/loading.gif HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=oacW7vdrnwr3oeCf; __ddg10_=1742535563; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=r1ryIKEwRgebQf7Z; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg10_=1742535563; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: image/gif\r\ncontent-length: 11144\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nddg-cache-status: HIT,HIT\r\netag: \"67dc31ab-2b88\"\r\nage: 2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11144,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 64 x 64","md5":"e4d96bb51227829e536412e5392bdf74","sha1":"8bf350e63f7bc86615cdccc6d16e0c8abb00584a","sha256":"d2911698581f2b0f538c0d770d1b677ecad7b9e61e99d89d1f218f9dae6c31cd","sha512":"a580b7ee3f1a213a523cc8ac69662809cd21bf0952aa2767ea1c3a8ddf934a3a34c4c578d34525d54ab027915aa9097894545713f135126bb8cf7f280b8ab0e6","ssdeep":"192:Yx1zq53A3H8YLSfEdDNsS+4tygrQFFpslGsTg1z4cWl:MH38WdDNk4Ygkrmwj5Wl","tlshash":"5a326d2c1ca447e6e927463165dba2cb8811df2d226c18d39eac347fb95b23ee0dcd10","first_seen":"2024-12-10T17:19:34.10667Z","last_seen":"2026-01-21T08:18:56.850207Z","times_seen":57,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/frame.512ab2ca.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.98","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:24.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 31 Oct 2024 00:00:00 GMT","end":"Fri, 28 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:4F:FB:78:56:DC:20:7E:66:CC:9B:57:7F:92:C2:FA:50:69:C1:5B","sha256":"09:35:37:9C:E9:C9:26:27:7B:F2:E2:42:CA:82:EF:F1:2C:B2:B4:97:04:61:0B:FD:77:9A:15:4D:57:F4:76:D6"}}},"request":{"raw":"GET /frame.512ab2ca.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 199433\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Thu, 20 Mar 2025 16:04:12 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: jhOCGrG2nMacbgc_ISUUZPlEkRjtReUc\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 21 Mar 2025 04:06:54 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"03464921efd9cc87d6cbb306bc406369\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nage: 5550\r\nx-amz-cf-id: NEN3OKkXopqfhNkWuCL3B8BmyQOJul6ynWJKkOrBgi19MX2p3Btiog==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":926320,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65464)","md5":"ce51876983cb2506bcecd23b0188b2ab","sha1":"e21c344640d3fd5ee571bff85e1cf46088834ae3","sha256":"d0d4050fe3234edbe514a2747c7644e4e2b536b7fd359e4a95af99ef11d6c0c4","sha512":"f10664ebd46602c2d8e6f2876e3c18daa163eaf8be2e446948790ebb1bed05fbfa2d76e7434ba22dbdafcca98786712ad343d486a7d0b6b8275759dd1913cde5","ssdeep":"12288:kSCjr4MV+RRx63adIVYQbsJ7GuShiIPuuMb9X:0xC63adIVbYJ7Jb9X","tlshash":"3e15b4ccb2d6f06a03976175813f200bf33ea999b54d8054e669e8d1bcb858d9237f78","first_seen":"2025-03-20T17:52:29.483613Z","last_seen":"2025-03-21T09:41:23.678999Z","times_seen":27,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":4,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/home/en/slide-betting.webp","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/home/en/slide-betting.webp HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=p6jbeaWUrL6qwblm; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=9bOrHwOL8xAyKnU1; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1893614\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\netag: \"67dc31ab-1ce4ee\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1893614,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"05b064312a28012f1b26704a7b1e0e38","sha1":"32e1abc38f3dfb24eddffb8cc692889260287574","sha256":"983f0c39ed548ef2140a5d37eee58b6e8a8edae4828e706a5e0c1b05c8f84dbe","sha512":"944c89badfc9e84ea2b24b4b143cd922d1d307410d214ec3a1b563efd129fcd3bb2eb1b52167d45f2b8afd7d8942117d2d2d36ba04bdd49245ef0fef72eeaa7e","ssdeep":"49152:g1Lz1wN+Cw4maFyU2aFlu5TGZBrORBGy/3TkZnAJ:g1f1O/me2slu5SZBrOv/os","tlshash":"c3953310e3cea3eb6fce77e99e60478c431183b936969508548f39e351a7e2de46d1e0","first_seen":"2023-10-28T21:30:08Z","last_seen":"2025-03-29T11:19:57.820181Z","times_seen":15,"resource_available":false,"data":null}},"time_used":632,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":461,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/providers/netgame.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:29.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/providers/netgame.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=ddDZI5aCQKaI4K7k; __ddg10_=1742535568; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=VKnAZ6dPWmuUWhvM; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg10_=1742535569; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 891\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-b73\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2931,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"35b5d5e2fcd8cc703f335ee5bc7df5a0","sha1":"1f40703f1449df41b24320fd8b2d54531533fe4f","sha256":"eb9cc81eca5754d8b015ac325efd45ca2279c9d601dc43259f6f75227dab063a","sha512":"8148150685f02870c09014e5664694b2612d9006afe5d548ec3b744027099f707dbc8fc81e2a68fa0080fff527f9c6a17cc72abd2e7afd7acda560ca6b14b658","ssdeep":"","tlshash":"435112b9a34ce7b17d81e3638b5fb835207231fc779740504b67436a789902f5d4a9b2","first_seen":"2023-05-21T11:43:23Z","last_seen":"2025-03-29T11:19:57.911231Z","times_seen":12,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/v/images/default-department-logo.png","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:29.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 21 Jan 2025 21:48:29 GMT","end":"Sun, 22 Feb 2026 21:48:28 GMT"},"fingerprint":{"sha1":"C9:8F:2B:90:8F:AA:A2:41:5B:E2:A2:52:7D:CB:E8:06:B8:A0:74:B2","sha256":"A4:69:EC:34:42:8B:01:37:A2:0E:C6:34:5F:3A:A3:2C:80:A3:01:0A:B8:13:8B:33:B9:87:E0:C2:5A:16:AB:59"}}},"request":{"raw":"GET /v/images/default-department-logo.png HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 21 Mar 2025 05:39:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 15479\r\nLast-Modified: Wed, 15 Jan 2025 07:23:25 GMT\r\nConnection: keep-alive\r\nETag: \"6787626d-3c77\"\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15479,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"53a142e29b647ceba5a2adf6cc69b919","sha1":"37fc7f6523e5f4d9e01157c70acc74069bfff416","sha256":"a5b367cc08f01ae61da2109c04047ee7e218df860be597c35d4ca7e064fea63a","sha512":"898a79097ada980f99bc1fe495cf55aa54050d286e108e9fec3f1e53e75b0a88e650a53bbae8a5b0c708f227367b3b193c45103c482e71066a9c0a8988aca61e","ssdeep":"384:Vk8Swa5Qg42uLHe77h+CnqUMfgFvywxTcFOid/BQkrO9okl:ONwa5QgRuW7UecFOi8krO9oU","tlshash":"7e62c0eddc7f24cfbcfa527e1d9d0c1e4d989e240170a8f64ef3d49a4821a66d5029e8","first_seen":"2023-05-01T22:32:10Z","last_seen":"2026-08-02T00:07:57.723413Z","times_seen":2299,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":132,"dns":14,"connect":37,"send":0,"wait":66,"receive":1,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/loading.gif","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:23.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/loading.gif HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/default.DJkcUsIk.css\r\nCookie: __ddg8_=t44G9X48ms9HCwMK; __ddg10_=1742535563; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=qhZNlPJZu3l9qdQu; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg10_=1742535563; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: image/gif\r\ncontent-length: 11144\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nddg-cache-status: HIT,HIT\r\netag: \"67dc31ab-2b88\"\r\nage: 2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11144,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 64 x 64","md5":"e4d96bb51227829e536412e5392bdf74","sha1":"8bf350e63f7bc86615cdccc6d16e0c8abb00584a","sha256":"d2911698581f2b0f538c0d770d1b677ecad7b9e61e99d89d1f218f9dae6c31cd","sha512":"a580b7ee3f1a213a523cc8ac69662809cd21bf0952aa2767ea1c3a8ddf934a3a34c4c578d34525d54ab027915aa9097894545713f135126bb8cf7f280b8ab0e6","ssdeep":"192:Yx1zq53A3H8YLSfEdDNsS+4tygrQFFpslGsTg1z4cWl:MH38WdDNk4Ygkrmwj5Wl","tlshash":"5a326d2c1ca447e6e927463165dba2cb8811df2d226c18d39eac347fb95b23ee0dcd10","first_seen":"2024-12-10T17:19:34.10667Z","last_seen":"2026-01-21T08:18:56.850207Z","times_seen":57,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gwfg84x.space/middleware/mirror","fqdn":"api.gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Mar 2025 15:13:14 GMT","end":"Mon, 16 Jun 2025 15:13:13 GMT"},"fingerprint":{"sha1":"BF:F6:26:CD:19:DC:7A:9C:43:5D:6C:E2:14:15:6C:4A:04:14:44:99","sha256":"BA:E2:88:D9:EB:25:85:70:88:7D:30:E4:9C:EB:DE:65:CB:CC:3E:F0:3E:AE:33:E2:5D:87:13:51:8A:CA:D4:E9"}}},"request":{"raw":"POST /middleware/mirror HTTP/1.1\r\nHost: api.gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nRegion: RU\r\nContent-Length: 26\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":26,"data":"{\"domain\":\"gwfg84x.space\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=7P9d2WiNsoqqWxfU; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg1_=az217ziwd6RbGQuzKVhO; Domain=.gwfg84x.space; HttpOnly; Path=/; Expires=Sat, 21-Mar-2026 05:39:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 21 Mar 2025 05:39:25 GMT\r\naccess-control-allow-origin: https://gwfg84x.space\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 863598ef-8e96-4c1a-972e-b98afe4013bb\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"0c94331995eb82a8d741bd881c12fe52","sha1":"7b35092dbe8c7f967dd083a81db2e41dc50839f4","sha256":"d56b8f4dfff7c76ad79345922be3f3f8c378732df1031398b58a2b77398560e3","sha512":"22ccbf7a254794358554525be4cd198451c0678ede850b9a8173b3b6e7b145ce65baab865ba4a9052f82d77ac4da4f31e535db033869240988d0910475284894","ssdeep":"","tlshash":"9d600002000200a2e883008002002a3088000822000a0800000c2020c0280808008002","first_seen":"2023-04-13T18:39:08Z","last_seen":"2025-04-06T12:53:45.923438Z","times_seen":605,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/J79K9xgfxwT6Syzx-UyWdD89/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfDHPoqAAAAAJ5uqpAtCwZEtyusk-ogkGIqCj1t\u0026co=aHR0cHM6Ly9nd2ZnODR4LnNwYWNlOjQ0Mw..\u0026hl=en\u0026v=J79K9xgfxwT6Syzx-UyWdD89\u0026size=invisible\u0026cb=g1pafpbu6va3","date":"2025-03-21T05:39:25.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Mar 2025 08:37:01 GMT","end":"Mon, 02 Jun 2025 08:37:00 GMT"},"fingerprint":{"sha1":"63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B","sha256":"E5:08:EF:15:62:0C:70:BF:82:8A:23:7E:52:A0:03:CC:BF:47:9D:AB:89:97:C0:F6:BD:0C:85:14:3C:09:7F:AA"}}},"request":{"raw":"GET /recaptcha/releases/J79K9xgfxwT6Syzx-UyWdD89/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recaptcha.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha\"\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 220830\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 21 Mar 2025 04:28:18 GMT\r\nexpires: Sat, 21 Mar 2026 04:28:18 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 10 Mar 2025 16:03:14 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 4267\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":558604,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/home/100hp-plinko.webp","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/home/100hp-plinko.webp HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=jRU7wOYNjvAPtHvS; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1aFtmRrGkcnns3m6; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:48:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 58430\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"67dc31ab-e43e\"\r\nage: 3066\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":58430,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e7935feec2a6be556b915213265ad3d4","sha1":"bc69a12a800569af3ffff022bdb393038480e391","sha256":"3cf9843edd4c2eec991fb0cde93b4301816ff35c22589fd086250cf01664e423","sha512":"663fcf1b2b89896f7a59bca64871a05571ed11c42126b16364bdc1b895dfdabfe2df3e680d1bf4f969324a63b0bf48d9d0588018ed2545f175d36081a6faca98","ssdeep":"1536:2JNef7/XTRwkqHkLH8lTWv4qN6L+x866z1:P7jekLHu+4qMLL6e","tlshash":"7443f1e912895f3fce0d71ba73ed6174025aa128950718308563dc63fb33b728a9d4bd","first_seen":"2025-03-21T05:40:08.981463Z","last_seen":"2025-03-29T11:19:57.91863Z","times_seen":8,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":61,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/analytics/events?event_name=slider_banner_view\u0026pgi=GTM-KN757LMM","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:32.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"POST /analytics/events?event_name=slider_banner_view\u0026pgi=GTM-KN757LMM HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 531\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=tfPF9GNpo5uwrnjG; __ddg10_=1742535571; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535572.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":531,"data":"{\"client_event_time\":\"2025-03-21T05:39:32.359\",\"client_event_time_utc\":\"2025-03-21T05:39:32.359\",\"client_time_zone\":\"UTC\",\"event_properties\":[{\"page_url\":\"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\",\"referrer\":\"https://gwfg84x.space/\",\"page_path\":\"/\",\"query_string\":\"?stag=819_67d75bad718f91aca41894cd\",\"domain\":\"gwfg84x.space\",\"gtm_container_version\":\"11\",\"geo\":\"\",\"banner_name\":\"cashback_50\",\"position_index\":\"3\",\"section_name\":\"main_page\"}],\"event_type\":\"slider_banner_view\",\"uuid\":\"\",\"session_id\":\"\",\"user_id\":\"\"}"}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=o1ae4wqUTCT8xuSs; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:32 GMT\n__ddg10_=1742535572; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:32 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:32 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/PragmaticPlay/70b4d615e17f49a78986cb07b284b3ed.png","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/PragmaticPlay/70b4d615e17f49a78986cb07b284b3ed.png HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 22910\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"b9bd2d1ff566fd463d4c87f8f140930c\"\r\nlast-modified: Mon, 06 Jan 2025 19:17:21 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 181847F29DC6B5AB\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 7133\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xWcvj9vNjpzXrZaKKlfrg4Yn6SsgZPINZR72vYHs0SaLobHpHVhpfGwgTUIEH7Vt5o03KFsPW1pavH5sOp2oOwjZLgSo85T4E0XsPTmRNhNJI%2FVnbv6qfx%2BDd6Qrqh9Q2A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 923b1bdf2f1156be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1438\u0026min_rtt=444\u0026rtt_var=594\u0026sent=640\u0026recv=160\u0026lost=0\u0026retrans=2\u0026sent_bytes=859171\u0026recv_bytes=4259\u0026delivery_rate=70564507\u0026cwnd=284\u0026unsent_bytes=0\u0026cid=874feb8d33a12a41\u0026ts=160\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"b9bd2d1ff566fd463d4c87f8f140930c","sha1":"28af5131059f3c75475e368b281b978a73281175","sha256":"2d16e968465f29ffc48e707234d4cf45bf39690464f5d9eb796fef0be078712e","sha512":"cb5a87bf2fa1bd6b2b7cfb7bec6ad673303e112805432c78c88ad70236534fc716e3aaf6f600e7782ed4a6f1b87b465721137f5704479c8a6c57a457057a5b5a","ssdeep":"384:UfVo/eI0ortNeYU9vN8Y3qEQB1zC0OQk+35/Si6Hl64lrZyAQqD2op5:Uf29CdNN3BQ4t0i/lrZyXqD2op5","tlshash":"aea2e1147acb0644b9455d73d857ca343e1e6481a2ede31618b016e396a32eb9872f3f","first_seen":"2025-03-21T05:40:08.982643Z","last_seen":"2026-07-16T07:27:39.997936Z","times_seen":27,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":119,"dns":11,"connect":5,"send":0,"wait":9,"receive":1,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/DNNdIs2A.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:21.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/DNNdIs2A.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/CTURe_1d.js\r\nCookie: __ddg8_=WbLwNofP8Xwohoyw; __ddg10_=1742535561; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=RbNrh8y3wkGBGL31; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg10_=1742535561; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"67dc31ab-25c\"\r\nage: 2900\r\ncontent-length: 356\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":604,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (637), with no line terminators","md5":"3be18a861a89ca333a598e9d61d84483","sha1":"6515c076439bf250c2ba50d588ce52259f65aa0b","sha256":"dc2a589282b418a4e19e840da96399de5a8947b5fce227310c7ab2e8ff6b1562","sha512":"b03b6bbf0327e074f05e8bf62b5ea1978825cb2e354d57e8c45e38863dd8283a27c37e7041e0791aee4d18ad5f86d8da5b32c51c5ea15d4d0427ea28a5622646","ssdeep":"","tlshash":"abf0a61f5a92c0b87008c3bce53b3c77ba7684882b7c248093cf8fb143c0080a96ee52","first_seen":"2025-03-21T05:40:08.983432Z","last_seen":"2025-03-21T05:40:08.983432Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/CNXwvf8W.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:31.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/CNXwvf8W.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/CTURe_1d.js\r\nCookie: __ddg8_=6KnFj8JbgJlRFSL0; __ddg10_=1742535571; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=tZXjw4jYO2HkRgIJ; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg10_=1742535571; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"67dc31ab-19e\"\r\nage: 2905\r\ncontent-length: 244\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":414,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (437), with no line terminators","md5":"93cbea94da40db724a51227b354a3263","sha1":"a1e150b1856554872d5f1813f03375900fd3f7a3","sha256":"96b6c3492519acd545b81625c2bcb586a03ca1d083478b3d0a7729374550f51e","sha512":"a0371c4b0f7dc85806ba86ef0aa40bc85196ab9f58d0cc2730fe3cafaf9efe3861b798f149bba13e68008ffd8d3fbfd4aadb751bec321bf8b0c090c32138833d","ssdeep":"","tlshash":"42e0680b494192be7018db78f03b783258722598af1954c083ef8fb8630105078e9ff3","first_seen":"2025-03-21T05:40:08.984156Z","last_seen":"2025-03-21T05:40:08.984156Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-03-21T05:39:23.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /?stag=819_67d75bad718f91aca41894cd HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gwfg84x.space/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=D0ERIbhOqqF5sG8C; __ddg10_=1742535562; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=EUzsOtPoB6r2oJyG; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg10_=1742535563; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:23 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-powered-by: Nuxt\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":371279,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gwfg84x.space/mirror","fqdn":"api.gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:24.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Mar 2025 15:13:14 GMT","end":"Mon, 16 Jun 2025 15:13:13 GMT"},"fingerprint":{"sha1":"BF:F6:26:CD:19:DC:7A:9C:43:5D:6C:E2:14:15:6C:4A:04:14:44:99","sha256":"BA:E2:88:D9:EB:25:85:70:88:7D:30:E4:9C:EB:DE:65:CB:CC:3E:F0:3E:AE:33:E2:5D:87:13:51:8A:CA:D4:E9"}}},"request":{"raw":"GET /mirror HTTP/1.1\r\nHost: api.gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=64xQ4fJkqvLgfcag; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg10_=1742535564; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg1_=wCdqNadJGRrcjU9X5h3s; Domain=.gwfg84x.space; HttpOnly; Path=/; Expires=Sat, 21-Mar-2026 05:39:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 21 Mar 2025 05:39:24 GMT\r\naccess-control-allow-origin: https://gwfg84x.space\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 770543eb-8ea6-47df-9558-debce7448321\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":456,"size_decoded":0,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with very long lines (524), with no line terminators","md5":"79520c2df09e98f4b07de192af979dbe","sha1":"5bb49293252c4bd200796fb7b68fed06e0e37beb","sha256":"697a883e4ddc6c7f2098e0ccb03a2277f9a71a321bca1631eefe2712e6712158","sha512":"81984c2e6d0f64edaff6063252baf7cf4b107cdb281264906ad0e90c30987b6019be9b5ca6298c7020c686d17873d140caccc7c83c0e603f1c9f54cb445e5164","ssdeep":"","tlshash":"f0f09ad2eb06cd0840c8989f6b283c29618e518fd8954e2ec8c48f4003c00bebf3b08d","first_seen":"2025-03-21T05:40:08.98492Z","last_seen":"2025-03-21T05:40:08.98492Z","times_seen":1,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VRDLWS0SHC\u0026l=dataLayer\u0026cx=c\u0026gtm=45He53j1v9186219929za200\u0026tag_exp=102482433~102788824~102803279~102813109","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:24.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Mar 2025 08:35:59 GMT","end":"Mon, 02 Jun 2025 08:35:58 GMT"},"fingerprint":{"sha1":"16:BA:A3:B5:22:51:BB:87:46:7F:17:3F:9D:14:B3:35:F0:FE:B1:8D","sha256":"EA:A9:16:BF:DF:87:08:5F:BB:3E:9B:05:23:A9:FC:DF:F6:53:A5:BC:1B:A8:45:77:DA:94:41:74:6A:89:71:88"}}},"request":{"raw":"GET /gtag/js?id=G-VRDLWS0SHC\u0026l=dataLayer\u0026cx=c\u0026gtm=45He53j1v9186219929za200\u0026tag_exp=102482433~102788824~102803279~102813109 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 21 Mar 2025 05:39:25 GMT\r\nexpires: Fri, 21 Mar 2025 05:39:25 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1020:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1020:0\r\nreport-to: {\"group\":\"ascgcycc:1020:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1020:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 110147\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":315114,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6055)","md5":"995344cf5ac24126e80857189ec1a2f3","sha1":"71682c38088daf358ab72c0616cd9722dfb1aec2","sha256":"4971bdb83f1c25ef2f90738d363c13264e9ea6ceba55cf311b06937ca7049725","sha512":"21115daed91a4a38515e22bc97e4951ccb7d920136cb795620c66cc19299ee0889176710feb1adbb680b539f6fe7d287719a5db9ccd58d0f29dec6fb16cdaa82","ssdeep":"6144:j3atu1mxx5yp3MSHkRB8r4nsmEZM1iYDn80S2EizeG:zB1c5yp7mEUEK","tlshash":"b06429dd73c674668392b479503f014bb17b28a2f84cc894f19ac9e42d74aaa4277f7c","first_seen":"2025-03-21T05:40:08.985674Z","last_seen":"2025-03-21T05:40:08.985674Z","times_seen":1,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recaptcha.net/recaptcha/api2/webworker.js?hl=en\u0026v=J79K9xgfxwT6Syzx-UyWdD89","fqdn":"recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfDHPoqAAAAAJ5uqpAtCwZEtyusk-ogkGIqCj1t\u0026co=aHR0cHM6Ly9nd2ZnODR4LnNwYWNlOjQ0Mw..\u0026hl=en\u0026v=J79K9xgfxwT6Syzx-UyWdD89\u0026size=invisible\u0026cb=g1pafpbu6va3","date":"2025-03-21T05:39:26.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Mar 2025 08:36:15 GMT","end":"Mon, 02 Jun 2025 08:36:14 GMT"},"fingerprint":{"sha1":"66:66:17:8A:0A:82:CB:9F:B3:66:1F:CE:88:E4:BD:CC:BE:E5:F3:8E","sha256":"06:74:30:59:11:23:B6:46:46:B5:D5:82:0F:0E:70:B1:BE:77:32:A7:85:C4:0D:C8:6B:83:B5:4D:9D:4C:D3:B9"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=J79K9xgfxwT6Syzx-UyWdD89 HTTP/1.1\r\nHost: recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfDHPoqAAAAAJ5uqpAtCwZEtyusk-ogkGIqCj1t\u0026co=aHR0cHM6Ly9nd2ZnODR4LnNwYWNlOjQ0Mw..\u0026hl=en\u0026v=J79K9xgfxwT6Syzx-UyWdD89\u0026size=invisible\u0026cb=g1pafpbu6va3\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Fri, 21 Mar 2025 05:39:26 GMT\r\ndate: Fri, 21 Mar 2025 05:39:26 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"85cf33a7525444b6ca922f12fdb45e9c","sha1":"5bc107045cce930f2e2ff8a134a52afcb7edb55b","sha256":"223a644c50bb4e93aee4c2c96ae68188d4bc0b1ba5a10f32293eb32066857a47","sha512":"d17244b9e8467549693502eeda6a94ac5c24dc4817e9526689322149f1dca9b4e47aaf385c84d52e10e890bf0512dd941f0382c247c3054f1a7a51dc72132340","ssdeep":"","tlshash":"9bb012230564c4282c040532d42fd3fce0024034fb50c5fa402c7fe4e3581778121858","first_seen":"2025-03-11T03:43:12.210977Z","last_seen":"2025-04-17T14:55:56.275174Z","times_seen":3148,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim2.ru/l/v/poll?action=poll","fqdn":"gx.webim2.ru","domain":"webim2.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:40.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"webim2.ru","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Dec 2024 10:41:08 GMT","end":"Fri, 28 Mar 2025 10:41:07 GMT"},"fingerprint":{"sha1":"39:22:2C:F3:51:C3:18:D9:E0:56:1C:F4:75:2C:8C:7D:D7:C6:50:3F","sha256":"3A:AC:C1:DD:28:20:B3:C8:03:99:4D:E0:23:B0:5B:D4:F5:06:10:9E:06:A7:B3:20:A3:45:F2:29:D5:3E:95:63"}}},"request":{"raw":"POST /l/v/poll?action=poll HTTP/1.1\r\nHost: gx.webim2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gwfg84x.space/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 174\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":174,"data":"{\"action\":\"poll\",\"visit-session-id\":\"a6b559c89ced4c50a35428d259d3541f\",\"page-id\":\"ec338203418b49659b74c0a44048b273\",\"since\":1,\"auth-token\":\"916b530559a48090df8b2f796550668e\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 21 Mar 2025 05:39:40 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 2\r\nConnection: keep-alive\r\nX-Webim-Version: 10.7.75\r\nAccess-Control-Allow-Origin: *\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-13T03:50:25.174103Z","times_seen":759689,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/home/home-crash.webp","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/home/home-crash.webp HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=p6jbeaWUrL6qwblm; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=wEbX8xgkaf3H8iNn; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:48:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40400\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"67dc31ab-9dd0\"\r\nage: 3065\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40400,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 868x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"97641a0437e6e915607884bb498e3fa6","sha1":"f26d7a158729c1bfd517ae17e7257656168a916b","sha256":"c06040e1963d73afad952401978866d2983eb165c0844e49a90381301b95a958","sha512":"5613ca0054bb0575ca34c9cc558acf0e5c1f9c9c6787549e8318e35aa4bbe7cc341c10f481ecf82841c686444d2a18e35ef8ca2a7cf75e225cbedc99f4e79fe2","ssdeep":"768:CReTZYGsWDyppd2SSsQyBA8QbD29DQmI35DuITQV9i:NeISXQCnQbD0xI35uIp","tlshash":"4d03f2c55abf068c4944acec40e071d0261478ef9a8d893dc47a3f91639dcaaf5daf32","first_seen":"2023-07-23T18:22:19Z","last_seen":"2026-06-03T11:08:15.104202Z","times_seen":42,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/js/pwa-load-event.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:21.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /js/pwa-load-event.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=s6a1IZLaTAntwD2B; __ddg10_=1742535560; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=qhUunUXLeQLyVrMH; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg10_=1742535561; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-177\"\r\nage: 0\r\ncontent-length: 164\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":375,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (387), with no line terminators","md5":"e4e7f99d26e91849e128a8ad5701f1b5","sha1":"d19e7cc0931b010516bb00bb9ff09a9f8c7c5a6c","sha256":"b7080b849d2a0f65b812996de4556aaf8adfe9b6f776ce44b1affd3c86863e23","sha512":"701947dea99b21fea7bd04d885d97a661cad6be5ce235316ec1026493138e1d7b4d3df99bbc48f194876a5c795446d26027b974388212ec0624f6749494f3cc9","ssdeep":"","tlshash":"b9e0222d639c59b80dc08bb79baabb4620a331a7707489908a472d46f0d144780a2fd3","first_seen":"2025-03-21T05:40:08.987656Z","last_seen":"2025-03-29T11:19:57.768057Z","times_seen":9,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BtCQzjHd.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/BtCQzjHd.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DmT_aqZN.js\r\nCookie: __ddg8_=OUfJMXjsch1vBlTq; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=UzkSkIweDtclyil3; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-1324\"\r\nage: 2905\r\ncontent-length: 2152\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4900,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5108), with no line terminators","md5":"2b31ce4eeb425ef5f7e8e2c886519807","sha1":"e6026cc25448cd7a08b3cc7ec3a2d7ab5ba3782f","sha256":"67e70a3adea10d008bd4bd82acd30f9f2d3454b027b30b981a91178e0ebc5ff2","sha512":"64e6ad6f6c8965da3eb9c86afa6252e426bf0f7b81231bdecbd2b150dbe3ae2327c0dea694b11a081bc26ecb437f04aa5791939a7a6e46cec6bca76cbc206ecd","ssdeep":"96:ETPJ5XIbqYS83J3qE+6MAOnOP9w/OnONF9wzOeW/iJlcy5omiZuK/sqCSliwYZUj:EvIbqFg9E9izS/ibhoJ0M2SliwYZUkT2","tlshash":"ecb1c7447490f9910fa208e1a0d60826e798431cdc29fdf1d2edca765bdad68b39b738","first_seen":"2025-03-21T05:40:08.988416Z","last_seen":"2025-03-21T05:40:08.988416Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/home/en/slide-cb.webp","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/home/en/slide-cb.webp HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=p6jbeaWUrL6qwblm; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=i83DJza2PP1DQLis; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 87410\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\netag: \"67dc31ab-15572\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":87410,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"adb421084243ce93eab66896b69a2b8d","sha1":"98a060e0f27d9b6deaa7054ebbaf9607e3e19ee3","sha256":"27d318099d71cc4a3057396114b807775a3ab58762f72143325580713ba90b83","sha512":"5d1da0f1119dc7b02ea8c50da5e4481d6b562661472a4a0c9b13df8f32a2cd0d59d311f3791f8c56eff058ac49f10573ba483448d624d01b3af3a1360e07c77c","ssdeep":"1536:CGpCrbtzCeDC3UuS8Hx9Hi2n7TfO1blb0TRwcBSnj927OJhky74hOV1cCcDynC:CG2ZzCEyLn7TW1blbKRwzQy57gC1ndC","tlshash":"8c8312d3888964bb91553dcb14ca44b915f128bc3108a386d3c771b62bf4d33e6e47a7","first_seen":"2024-05-28T20:47:53Z","last_seen":"2025-03-29T10:06:33.862976Z","times_seen":14,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/v/images/file.svg","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:29.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 21 Jan 2025 21:48:29 GMT","end":"Sun, 22 Feb 2026 21:48:28 GMT"},"fingerprint":{"sha1":"C9:8F:2B:90:8F:AA:A2:41:5B:E2:A2:52:7D:CB:E8:06:B8:A0:74:B2","sha256":"A4:69:EC:34:42:8B:01:37:A2:0E:C6:34:5F:3A:A3:2C:80:A3:01:0A:B8:13:8B:33:B9:87:E0:C2:5A:16:AB:59"}}},"request":{"raw":"GET /v/images/file.svg HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 21 Mar 2025 05:39:30 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 9286\r\nLast-Modified: Wed, 15 Jan 2025 07:23:25 GMT\r\nConnection: keep-alive\r\nETag: \"6787626d-2446\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9286,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4908c83c195f30626bc90351b6d3dcfe","sha1":"8c401122c1a9a72614f7bf74ecf535f6e1cc64ea","sha256":"c80dbaacb91db35659e6d79de470a37e9703c203f397cd85a662545ad83a6819","sha512":"94e7639f27c7458e958a86cd1ca9332bb77bd24e528295913ac46283af0e2eaa1bd3e5af81b65cf091c5a28ec0ed1455487e74b93654da423e92d47100f8b978","ssdeep":"192:Z+3ISknUnObdnWlZohOWCXQuSSnnnnnnnnnnzmEfPWsLL:ZsISkUxlgmZSKmL4","tlshash":"ba121979b716aa4a0b718f25e04191327c282c2bb77b57d0b48d5fc3a326c007d8adf6","first_seen":"2023-12-31T11:24:24Z","last_seen":"2025-04-06T02:33:43.077143Z","times_seen":186,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":119,"dns":12,"connect":21,"send":0,"wait":18,"receive":1,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/validations.DEwh75vO.css","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:23.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/validations.DEwh75vO.css HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=t44G9X48ms9HCwMK; __ddg10_=1742535563; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=HhvOVp2IbPRzQmun; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg10_=1742535563; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nddg-cache-status: HIT,HIT\r\netag: \"67dc31ab-510\"\r\nage: 2\r\ncontent-length: 488\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1296,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1297), with no line terminators","md5":"44ab1ae0922c5a8fe221dc66487ce47c","sha1":"daa81457ed144951bc5c52a646f3db36798cbc11","sha256":"d48ffe40bfdda710e710b1ff469e28072e373d0214836ac7f34d4c582d587437","sha512":"f4312db023d512362fb03d62057efcf63f235dfc4cb3f2f3f9b5d9735e000219aa7eee080164a620fba7f1903b173b9fd4ed361cde6e4695a7892e870f5bbfa3","ssdeep":"","tlshash":"d82178307a09601678f7d8f1dd60de1b6309621be803cd2cd79e783a9d8b2476862679","first_seen":"2025-03-21T05:40:08.990676Z","last_seen":"2025-03-29T11:19:57.747174Z","times_seen":9,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/tp/header-tp-en.png","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/tp/header-tp-en.png HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=iVyLbSE0ymbJzbi2; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=IKuJlcMY0uHocFwh; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 4100\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\netag: \"67dc31ab-1004\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4100,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 80, 8-bit colormap, non-interlaced","md5":"9984919a7ae4558c9b93a3e95e4d9e4d","sha1":"e511b73c533f649ce720ec8ea97c3a18ec58a29d","sha256":"77bf06a496064b8cfb7fd716c2abf4afaedee4c17e6c28d446a2ee6ab515cb16","sha512":"1c4ef457055489ecdc7832d0894adf6409492b59131d96f0b17ff3d1a799f22fbf23147054d64ac8cc55244d45b0be99f7691792ffad58897932818138ca75e8","ssdeep":"96:oEg9OzjOTFQiWpgoREKWT1uXWKqkD2EAvBJGagMf9CXq+V:3jOFQiSnRZM1+WKqCl6Gag+cXNV","tlshash":"44815ded0f971dddb730ad58526c00f1a52c2082b9b8fcf534a8f1ba7d2b22815d519b","first_seen":"2023-05-21T11:43:22Z","last_seen":"2025-10-14T04:24:50.196148Z","times_seen":37,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/fdc4364a3eae2f06260e2f95ce9571ed/Belatra%20Games/a35ba034d66e0acfd1046961fa1b5242f219a347.png","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/fdc4364a3eae2f06260e2f95ce9571ed/Belatra%20Games/a35ba034d66e0acfd1046961fa1b5242f219a347.png HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 29434\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"3fa0e8d16b0bc9d147481719efa1f335\"\r\nlast-modified: Wed, 01 Mar 2023 08:18:51 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 180AD4C2D6DE879F\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 7133\r\ncf-ray: 923b1bdebebb56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29434,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"3fa0e8d16b0bc9d147481719efa1f335","sha1":"7fdbc1a775f4acffa18aa472925f383d8555f564","sha256":"426bbeb8740cb4e18c8b4086e81e5c4fc8a02247906ae5b904d71406e1dd9ac3","sha512":"affb32d8f59ce551c284df2c1c8e0da154517660e6d7a7956b37a60a62d15c552d2cf63eb7f2b9e3cb9f7826ddc44c3f26cd74de23d291cae7bb1000d13d1687","ssdeep":"768:U+iUGZjbBE6RJxNHQeIavACk61YR9xGRKoQ2l:ULZjm6HvfYPxGbfl","tlshash":"5fd2f017bda4760a87da93aa2c0df91d66ad300032d8fd3796f603cea65088ef817750","first_seen":"2023-10-16T21:45:28Z","last_seen":"2026-07-30T09:53:28.000753Z","times_seen":81,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":40,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/CyhBU3gD.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:31.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/CyhBU3gD.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/CTURe_1d.js\r\nCookie: __ddg8_=E69FyvqG4mM1BhWX; __ddg10_=1742535571; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=tfPF9GNpo5uwrnjG; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg10_=1742535571; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-c4fe\"\r\nage: 2905\r\ncontent-length: 16195\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50430,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/launcher_settings","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"35.171.122.12","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:24.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sat, 14 Dec 2024 00:00:00 GMT","end":"Sun, 11 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"40:E3:24:32:5B:DE:76:F0:A4:43:7F:C2:84:CD:98:D0:50:48:25:7E","sha256":"B0:C5:D5:8B:41:34:A0:3C:41:21:0F:E0:A4:E1:C3:F7:66:24:A3:25:E9:E6:67:D5:40:EA:68:FB:D3:70:73:74"}}},"request":{"raw":"POST /messenger/web/launcher_settings HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 387\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":387,"data":"app_id=knfz4177\u0026v=3\u0026g=ae80665eb160d162b82c677e684627d84181169c\u0026s=9f663e87-9a4e-4f75-b265-a9293195e8ca\u0026r=https%3A%2F%2Fgwfg84x.space%2F\u0026platform=web\u0026installation_type=js-snippet\u0026Idempotency-Key=e708e4a4293a4b6f\u0026internal=\u0026is_intersection_booted=false\u0026page_title=\u0026user_active_company_id=undefined\u0026user_data=%7B%7D\u0026referer=https%3A%2F%2Fgwfg84x.space%2F%3Fstag%3D819_67d75bad718f91aca41894cd"}},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Fri, 21 Mar 2025 05:39:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 403 Forbidden\r\ncache-control: no-cache\r\naccess-control-allow-origin: https://gwfg84x.space\r\nvary: Accept,Accept-Encoding\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\naccess-control-expose-headers: x-request-id\r\nx-intercom-version: ea2242999c7cf22f8c4282f697a050e58473f1ee\r\ncontent-encoding: gzip\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\nx-request-queueing: 0\r\nx-request-id: 000dtgempnli3cojvu5g\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nx-runtime: 0.023790\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":113,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"32bb58bc4ae84a1234a29732618de631","sha1":"e7096fbc409cc747a776c21feae852722aab052b","sha256":"13be9a7724f4c0722443975847a8b5515d14aee39758f5fb5dec010c319bb501","sha512":"5196a1d6943cb70060ee609054565f1aacca478d39b6fac46eeeca94b6b6800f395098bce3d60cad9e8ccea5aa1c0dfbc57d917559c64daae29fc66aab731386","ssdeep":"","tlshash":"1cc02b8f4088d5cbd0d108d82c360d3390c1c0a404d028c50c1c900e8604031c3462d3","first_seen":"2025-03-21T05:40:08.99318Z","last_seen":"2025-03-21T05:40:08.99318Z","times_seen":1,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/VXL0wkEY.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/VXL0wkEY.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DmT_aqZN.js\r\nCookie: __ddg8_=OUfJMXjsch1vBlTq; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=4FM9BGjXic9SXhXH; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-8e2\"\r\nage: 2905\r\ncontent-length: 807\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2274,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (2273), with no line terminators","md5":"369458c3d90a237811bc0660cdcdfdaa","sha1":"12fda5ad47a1b349c20368d9af84309dcd63e2b7","sha256":"2bbe4327500921ae2349b5dea0a61fba8bef0692165249735dfba4c4b87d1d1a","sha512":"8e368c470f3cb6b41c990179ec053baa499fe0c572d1f7050d66e3cd79226284728cfce1cf67f7f3af7822a8c6ca023ca5f4babdcca56404e7319daf97f3f423","ssdeep":"","tlshash":"e341c02abef954320b101431e0df4173a046a6875c1ec331b5545eadeaa3e548ee2ffe","first_seen":"2025-03-21T05:40:08.993879Z","last_seen":"2025-03-21T05:40:08.993879Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BsH4BlRf.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/BsH4BlRf.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DmT_aqZN.js\r\nCookie: __ddg8_=OUfJMXjsch1vBlTq; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=p6jbeaWUrL6qwblm; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"67dc31ab-39e\"\r\nage: 2906\r\ncontent-length: 331\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":926,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (965), with no line terminators","md5":"4e1557980fd26ac6c50277e61e3f3667","sha1":"eeda1aaedaad811c40fdd1954d367ecd2ebbcdfb","sha256":"eae71525d76cfaa5b9d79b363739bed17013526d584be759c8de598380fe280b","sha512":"00d6d358d1b46a0f4e0ab317b7f6e9693a40e45af855280efbacb2291f8067e8f8c179e3f90e83f04b2a66347082717d62f0edf24358464f1f3b932a6e6d3f51","ssdeep":"","tlshash":"b711579d51395a9de02ccabe907af293782498b71603a0563998e078be991075e24f31","first_seen":"2025-03-21T05:40:08.994474Z","last_seen":"2025-03-21T05:40:08.994474Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfDHPoqAAAAAJ5uqpAtCwZEtyusk-ogkGIqCj1t\u0026co=aHR0cHM6Ly9nd2ZnODR4LnNwYWNlOjQ0Mw..\u0026hl=en\u0026v=J79K9xgfxwT6Syzx-UyWdD89\u0026size=invisible\u0026cb=g1pafpbu6va3","date":"2025-03-21T05:39:25.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Mar 2025 08:37:01 GMT","end":"Mon, 02 Jun 2025 08:37:00 GMT"},"fingerprint":{"sha1":"63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B","sha256":"E5:08:EF:15:62:0C:70:BF:82:8A:23:7E:52:A0:03:CC:BF:47:9D:AB:89:97:C0:F6:BD:0C:85:14:3C:09:7F:AA"}}},"request":{"raw":"GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://recaptcha.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recaptcha.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15344\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 17 Mar 2025 12:58:05 GMT\r\nexpires: Tue, 17 Mar 2026 12:58:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 319280\r\nlast-modified: Mon, 16 Oct 2017 17:32:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:35:33.203921Z","times_seen":544314,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":88,"dns":0,"connect":24,"send":0,"wait":17,"receive":4,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/providers/gamzix.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:29.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/providers/gamzix.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=paon3zTrYjcj2WRp; __ddg10_=1742535568; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=mO8wF1coqnL8jMbW; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg10_=1742535569; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 895\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-7b3\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1971,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cbf7bb79f65c2317e47dd4f30700a6cd","sha1":"1a5f29337597366bf4ac0db67818466191bf1046","sha256":"aa50feaee7f8b2624bfbb26c08bac65e6fd1e3e4b959b9e9c67a1ab61da94c42","sha512":"becb90bc1d7899a27161fc2866570417bdb923525d78990579e5b6bafbfb2682fb2e583755254ab5327842117e8f1fd0020a0f5d09f95603429d7ea931fa1cc7","ssdeep":"","tlshash":"ef41547ce3eae2e0d20c97ba4bad047ab12a38eb1f61c25d07bb1e95f61111d405a8d0","first_seen":"2023-05-21T11:43:23Z","last_seen":"2025-03-29T11:19:57.870801Z","times_seen":13,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/B_c0Fhba.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:31.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/B_c0Fhba.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/CTURe_1d.js\r\nCookie: __ddg8_=6KnFj8JbgJlRFSL0; __ddg10_=1742535571; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=zJKG9fRzMVtbhOFo; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg10_=1742535571; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-4ce7\"\r\nage: 2905\r\ncontent-length: 6430\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19687,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/Winners.BHCZU7ZL.css","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:31.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/Winners.BHCZU7ZL.css HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=2BFtV41K05TOVH6y; __ddg10_=1742535569; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ud8R6h2Wy2Cj3kFi; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg10_=1742535571; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\ncontent-length: 1291\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-1537\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5431,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5440), with no line terminators","md5":"42519b1c59b87065953f6088af29ae8e","sha1":"c36b86747ffc19fd588e2498c5cb79a2eb455d8e","sha256":"d1d3cfeae2a89a118113fbac0fb6d6e5d62df871b3bab4d99930aed80f551305","sha512":"72e0369e82b1b14232654521c61f04afccad58c1e564d110e88c919d09313b23afce0a8ea5f01e02e75b6f79697490c513c5fc50c8cc503b14a4e044a3e19749","ssdeep":"96:e8AgCn4NZWBhF2hXinmW2f9IgOBQ4YjocKOyAact7o:eBgCn4NZWBh4hynmHf9ILBQ4Yjr0ct8","tlshash":"a5b13471618c2a79f1bbd025e952664d711cb143c7178f88a17c74b888bb6ae35af38c","first_seen":"2025-03-21T05:40:08.996386Z","last_seen":"2025-03-29T11:19:57.831865Z","times_seen":8,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/DYZ6qTze.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:24.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/DYZ6qTze.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DNNdIs2A.js\r\nCookie: __ddg8_=ZXEgGxkQn6ZK5OtK; __ddg10_=1742535563; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ByXH5zcEkPrjXgpn; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg10_=1742535564; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"67dc31ab-391\"\r\nage: 2904\r\ncontent-length: 505\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":913,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (930), with no line terminators","md5":"900876417de3d8a859c8be7b3131b1de","sha1":"fee831df05a585ff9660ae15f7db303bb277f555","sha256":"5cec41ec4584ac38cf0e9b3091c0fe6b987ff649f95d53c0ef215aaa1a3c07fe","sha512":"c450f36307b499c40c47e81b5f36ff2bd3c7a8461a098553b10c4eb4aae9c041503d448646f543ca87c267fb3c72cbccfdef656503947bd10c111b7c1df06a48","ssdeep":"","tlshash":"b211002be28a473273335cb5867861e74b61078e383554d83d8cdf1b9127c92c52afa0","first_seen":"2025-03-21T05:40:08.946784Z","last_seen":"2025-03-21T05:40:08.946784Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/ThreeOaks/13475d8ae79a47b9ab864b8c99d1c41f.png","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/ThreeOaks/13475d8ae79a47b9ab864b8c99d1c41f.png HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 27909\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"4a98cfb3ada38b3d88ee47f29ca3a9f7\"\r\nlast-modified: Fri, 20 Oct 2023 08:19:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 180A341C63976B96\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 7133\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=whsTf0AbWyY8ViK6IVwNOwR9ldZc1E9B5mEbeEUcdjR6Mv63wzSakdQEfVJuuYt4R2Az8zJeINaziCUN1JUkI99dPbjeUEh3KBVDzY2C5rvtxctcNp1yMBgbp4BYUVWCzw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 923b1bdececd56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=725\u0026min_rtt=444\u0026rtt_var=298\u0026sent=92\u0026recv=35\u0026lost=0\u0026retrans=1\u0026sent_bytes=104801\u0026recv_bytes=3011\u0026delivery_rate=20435483\u0026cwnd=256\u0026unsent_bytes=5616\u0026cid=874feb8d33a12a41\u0026ts=99\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27909,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"4a98cfb3ada38b3d88ee47f29ca3a9f7","sha1":"50724d58eb2e5f1cc96d83186bfccafe0053d5fa","sha256":"8164bef11cc409666cf73f882967845bc9d2dc64174acfdc8d330a6cfe09f7dd","sha512":"e23a250b8ffffe3305a0ea58ccd0574f20bbc7ed0e954bb16a512054173ceabb1dfa556d9f9a69299228fa2c567bad309ec93dd9e7e27bf34ce8da5537f30c51","ssdeep":"768:O+WqAchrLN7L0/xCatgWIK7IbQKQSIqE4d:NbzhrhF05IK7CQKQSBE4d","tlshash":"42c2e06254434e8e0ebf4ace1f9595e987a3dc786f98b117dca32b82634012899de173","first_seen":"2024-05-07T05:57:00Z","last_seen":"2026-03-01T21:47:53.410872Z","times_seen":86,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":32,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/Betgames/0427a7e26cb190a8436605b05be2d6f6eed51cf8.png","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/Betgames/0427a7e26cb190a8436605b05be2d6f6eed51cf8.png HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 30239\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"d11b605a0a7fc590c081342080a930df\"\r\nlast-modified: Tue, 18 Mar 2025 13:45:33 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 182E76C6FF7D79ED\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 7133\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BO9RhYjbSMyrRsGxYqnlE3eWV5A2d3dKazwdhJyhzH3bitW11sWilSmkYFs4%2B%2F4Jbqil1RQWOb%2B08mBPrN8MOlurVlOOUgU9ZAfmHo8ziwtwTersaplYZLErKkFOExjUSg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 923b1bdf3f2756be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=756\u0026min_rtt=444\u0026rtt_var=163\u0026sent=747\u0026recv=185\u0026lost=0\u0026retrans=2\u0026sent_bytes=998799\u0026recv_bytes=4594\u0026delivery_rate=70564507\u0026cwnd=284\u0026unsent_bytes=0\u0026cid=874feb8d33a12a41\u0026ts=175\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30239,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"d11b605a0a7fc590c081342080a930df","sha1":"f1e7e4a1a44c9ac340e8a175abd681409ba2cced","sha256":"5a82eb5427a87aa792f80c40d255f7729613d8e8d9e386dcd22c5b9f3ee7e3a0","sha512":"b35d2b4de6781a8fceaf06935c54d107fb68290ceb17065cab9bb21b0b8d6be4db8c59f8a965c5b1dfe206f4facef71b2a8e6c3143358be0f1e00066907f7208","ssdeep":"768:GcT8UA6qWGIM7E4/iWQL4oMETBoWKL1MKe10pcrY//CFL:GQA6qPIM7v/iWjEtoWKLOD0ire/4","tlshash":"bad2d04b95ebcc1294e824a9f5742264cdbb9eba163582cb376a167d204b12f345e3c3","first_seen":"2025-03-21T05:40:08.998033Z","last_seen":"2025-03-21T05:40:08.998033Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.intercom.io/widget/knfz4177","fqdn":"widget.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"54.240.174.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:24.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sat, 14 Dec 2024 00:00:00 GMT","end":"Sun, 11 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"40:E3:24:32:5B:DE:76:F0:A4:43:7F:C2:84:CD:98:D0:50:48:25:7E","sha256":"B0:C5:D5:8B:41:34:A0:3C:41:21:0F:E0:A4:E1:C3:F7:66:24:A3:25:E9:E6:67:D5:40:EA:68:FB:D3:70:73:74"}}},"request":{"raw":"GET /widget/knfz4177 HTTP/1.1\r\nHost: widget.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 2673\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Thu, 20 Mar 2025 16:06:52 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: slwjC9rxMCzi7qO5eVqIxnJTTO73EBeb\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 21 Mar 2025 05:36:08 GMT\r\ncache-control: max-age=300, s-maxage=300, public\r\netag: \"8474db48b80f7726f440713df649e168\"\r\nvary: accept-encoding, Origin\r\nx-cache: Error from cloudfront\r\nvia: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 199\r\nx-amz-cf-id: Zj1Aq9EVSQpHOTaln8ARCVRrYCs1cy7NC1fUtsF_W13iE5YEKgtRfg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6742,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6938), with no line terminators","md5":"7ae5a924ea0e57877ad3a6be64ca9e9d","sha1":"6c83d92fae228f6ec203f251801ddacfc9ff261b","sha256":"8606cc315b58ed794ea0e6b7e4154b7a5188bb136c33d073b1c075f3b763f83d","sha512":"1c9a7fe2a3901eecf243025393a368f0226278ae390b84853ea00ff823d26126d76e7c08bf30a2405df95967bf3202f017e2de16aaccbe0ec33c42e89d0f3470","ssdeep":"96:vRALPn5depAjw1MdM03c/0FNjcuOkfG6ewhwsAstlFzbFrlPi:vC5dW1MdMxsjcuOJ2lPi","tlshash":"eae163eeb1c3b93406635566323f3b187e376440184a0520d1a9c98dba69debc157fad","first_seen":"2025-03-20T17:52:29.469153Z","last_seen":"2025-03-21T09:41:23.635068Z","times_seen":27,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BZED2XnX.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/BZED2XnX.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DmT_aqZN.js\r\nCookie: __ddg8_=OUfJMXjsch1vBlTq; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=5RB1bvgRKA0qyrES; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-1035\"\r\nage: 2905\r\ncontent-length: 1141\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4149,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (4398), with no line terminators","md5":"ad58ad94fe876f6ca854eaf21f6fe7a9","sha1":"a41262ae4530e5a2f432e80e57a554f5a8728dd1","sha256":"c7fe62164accd62fd092f5753166d9cf4b7f7b1f2c0931dc1e6816e1ba317f1f","sha512":"f2499724289ac1b6a1dae8b8ee81f8a51c971d0cccb89a7542170fed6e923eedbbabc63ef0e1678899784a6e7f8a17abad992b477dde8817789303c5f55430da","ssdeep":"96:VuTHo7Hsl2VtpaYMIklGbMrC70cqHARt35oqDwYHD+NlHpsFfpYdqqtDRq5V5cq0:0Ho7Hsl2VbCIklG4rC70XHARt35bDwYI","tlshash":"62914a78fb3df12e61221a1732a75cbccb46b40befbd14390ba6e62b507864cec11419","first_seen":"2025-03-21T05:40:08.999304Z","last_seen":"2025-03-21T05:40:08.999304Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/home/100hp-keno.webp","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/home/100hp-keno.webp HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=jRU7wOYNjvAPtHvS; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ceKVSOeqGbJPz4fY; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 56422\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"67dc31ab-dc66\"\r\nage: 2901\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":56422,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"29fbf7642b7129878bfc501047fd56ef","sha1":"23a54dcd72caa4bc6e9af6fa5c60baf007651fb6","sha256":"5b325eb23d371ed6ae480642a8beff4c1db4601916443b77327ee50e7d6a5500","sha512":"4290e6e4befc507e44a44c70181b9653a0f00476efe7e4875a1b3c16f26a45469d2bda702da0fb4404ea0a772aa48e240742bc56720e8fa368b69a8c8538b500","ssdeep":"768:sTdwF5Ef+aLxHNirfgdFmQaPfBOz5fEZRDwJQtdUnOBG9QsLEGMQu4craW9:sTdkc+aRYwaPfUz5fz9Nys4GLukW","tlshash":"1d43e0e745918395d76a38f53768497c0bacd69233ecc8eb68db6871a792313f502cc8","first_seen":"2025-03-21T05:40:09.000084Z","last_seen":"2025-03-29T11:19:57.771769Z","times_seen":8,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":41,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/validations.DEwh75vO.css","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:21.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/validations.DEwh75vO.css HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=s6a1IZLaTAntwD2B; __ddg10_=1742535560; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=fPtDwyR8A7ojPJjZ; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg10_=1742535561; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-510\"\r\nage: 0\r\ncontent-length: 488\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1296,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1297), with no line terminators","md5":"44ab1ae0922c5a8fe221dc66487ce47c","sha1":"daa81457ed144951bc5c52a646f3db36798cbc11","sha256":"d48ffe40bfdda710e710b1ff469e28072e373d0214836ac7f34d4c582d587437","sha512":"f4312db023d512362fb03d62057efcf63f235dfc4cb3f2f3f9b5d9735e000219aa7eee080164a620fba7f1903b173b9fd4ed361cde6e4695a7892e870f5bbfa3","ssdeep":"","tlshash":"d82178307a09601678f7d8f1dd60de1b6309621be803cd2cd79e783a9d8b2476862679","first_seen":"2025-03-21T05:40:08.990676Z","last_seen":"2025-03-29T11:19:57.747174Z","times_seen":9,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/ping","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"35.171.122.12","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sat, 14 Dec 2024 00:00:00 GMT","end":"Sun, 11 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"40:E3:24:32:5B:DE:76:F0:A4:43:7F:C2:84:CD:98:D0:50:48:25:7E","sha256":"B0:C5:D5:8B:41:34:A0:3C:41:21:0F:E0:A4:E1:C3:F7:66:24:A3:25:E9:E6:67:D5:40:EA:68:FB:D3:70:73:74"}}},"request":{"raw":"POST /messenger/web/ping HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 716\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":716,"data":"app_id=knfz4177\u0026v=3\u0026g=ae80665eb160d162b82c677e684627d84181169c\u0026s=abae8775-8aa5-4e0a-9af2-ff662ffe6ea0\u0026r=https%3A%2F%2Fgwfg84x.space%2F\u0026platform=web\u0026installation_type=js-snippet\u0026Idempotency-Key=b5c1d1217048b9cd\u0026internal=%7B%22marketo_tracking_cookie%22%3Anull%2C%22hubspot_tracking_cookie%22%3Anull%7D\u0026is_intersection_booted=false\u0026page_title=\u0026user_active_company_id=undefined\u0026user_data=%7B%22auto_boot%22%3Atrue%2C%22debug%22%3Afalse%2C%22config%22%3A%7B%7D%2C%22script_id%22%3A%22intercom-script%22%2C%22script_defer%22%3Afalse%2C%22update_on_page_route%22%3Atrue%2C%22last_request_at%22%3A1742535565.535%7D\u0026source=apiUpdate\u0026sampling=false\u0026referer=https%3A%2F%2Fgwfg84x.space%2F%3Fstag%3D819_67d75bad718f91aca41894cd"}},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Fri, 21 Mar 2025 05:39:25 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 403 Forbidden\r\ncache-control: no-cache\r\naccess-control-allow-origin: https://gwfg84x.space\r\nvary: Accept,Accept-Encoding\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\naccess-control-expose-headers: x-request-id\r\nx-intercom-version: ea2242999c7cf22f8c4282f697a050e58473f1ee\r\ncontent-encoding: gzip\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\nx-request-queueing: 0\r\nx-request-id: 000dc3h2thpaki542cvg\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nx-runtime: 0.027691\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":113,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"a5b1d254068b56a05ab6b4d9bf53c5e8","sha1":"97c54ed716edf2db2c8d786fa9f880fc1fa47d88","sha256":"55fc9e178b3bef4ccc470fc3cc79941151383992bc3b3d43486b25f3c40b077d","sha512":"a9952bb20e88bf514d351d2afda66485a7875b2c581cddb84a3b55f4ec564456718b83cc2245a54c439d00bd451a832987a238565ccf4bbe5f95d0e87ff9d086","ssdeep":"","tlshash":"b2c02bcb4088e58bd1c405d82d314d33d0c2e060008024c50a0cc00d4604033c6475d2","first_seen":"2025-03-21T05:40:09.000892Z","last_seen":"2025-03-21T05:40:09.000892Z","times_seen":1,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/analytics/events?event_name=slider_banner_view\u0026pgi=GTM-KN757LMM","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:28.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"POST /analytics/events?event_name=slider_banner_view\u0026pgi=GTM-KN757LMM HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 527\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=RNJZ6cIRxfBAqrvS; __ddg10_=1742535567; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":527,"data":"{\"client_event_time\":\"2025-03-21T05:39:27.724\",\"client_event_time_utc\":\"2025-03-21T05:39:27.724\",\"client_time_zone\":\"UTC\",\"event_properties\":[{\"page_url\":\"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\",\"referrer\":\"https://gwfg84x.space/\",\"page_path\":\"/\",\"query_string\":\"?stag=819_67d75bad718f91aca41894cd\",\"domain\":\"gwfg84x.space\",\"gtm_container_version\":\"11\",\"geo\":\"\",\"banner_name\":\"betting\",\"position_index\":\"2\",\"section_name\":\"main_page\"}],\"event_type\":\"slider_banner_view\",\"uuid\":\"\",\"session_id\":\"\",\"user_id\":\"\"}"}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ddDZI5aCQKaI4K7k; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:28 GMT\n__ddg10_=1742535568; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:28 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:28 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/providers/kagaming.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:29.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/providers/kagaming.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=paon3zTrYjcj2WRp; __ddg10_=1742535568; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=2BFtV41K05TOVH6y; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg10_=1742535569; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 81480\r\nddg-cache-status: MISS,MISS\r\netag: \"67dc31ab-1b147\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":110919,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8ed5b0ad384b4a164e0528f5af28e643","sha1":"a79cbec65f4f78053755b0aed8ddd0a9e39ddf01","sha256":"bad6f4ae4bedda9d75414aafb01657f8fbd2abe53335e9598438989fbfad94c9","sha512":"9e622bf836d004c9fed538e5ffcadc251705346854469ee0f52780705dfb07b89dd10dde09864d89afe911de62461f71e51ac4f45a926e96b6ace1396d7733d7","ssdeep":"1536:QEKgm/qbT6R//3E7FuuCNWLpnIS81BY2tnb81zVtMKVBU4mKChfo7ZwZIVBj11+:z2qbudyFJCOVIS+B3EzPVBUphgjV91Q","tlshash":"49b3e0bd1062dded4f22e03bb336082a495b4db1d21c5b8b5b566e79d080cd738ed8a8","first_seen":"2023-05-21T11:43:23Z","last_seen":"2025-03-29T11:19:57.80392Z","times_seen":18,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/J79K9xgfxwT6Syzx-UyWdD89/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfDHPoqAAAAAJ5uqpAtCwZEtyusk-ogkGIqCj1t\u0026co=aHR0cHM6Ly9nd2ZnODR4LnNwYWNlOjQ0Mw..\u0026hl=en\u0026v=J79K9xgfxwT6Syzx-UyWdD89\u0026size=invisible\u0026cb=g1pafpbu6va3","date":"2025-03-21T05:39:25.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Mar 2025 08:37:01 GMT","end":"Mon, 02 Jun 2025 08:37:00 GMT"},"fingerprint":{"sha1":"63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B","sha256":"E5:08:EF:15:62:0C:70:BF:82:8A:23:7E:52:A0:03:CC:BF:47:9D:AB:89:97:C0:F6:BD:0C:85:14:3C:09:7F:AA"}}},"request":{"raw":"GET /recaptcha/releases/J79K9xgfxwT6Syzx-UyWdD89/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recaptcha.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha\"\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42056\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 21 Mar 2025 03:19:46 GMT\r\nexpires: Sat, 21 Mar 2026 03:19:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 10 Mar 2025 16:03:14 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 8379\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":78627,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6af145664eb7177b2280dffa8492731c","sha1":"1e95f2f04e7b6335081e7cdbdcc48a4654a44ed3","sha256":"0767863bfde47d05640ad76bd3a33aa5cd7dfba5391e1d80347f7ec41563e404","sha512":"22d3022da4b8e4374441ed29c40b6ba43856110d089260c905d55bc914106173a228829605995860bdd9e15e81a7dc87c1c16f37589ad5e63461c2a1125311e9","ssdeep":"1536:ZfGNbFoZJSUYOOaLnAW8+IcTOIUawthXwW5vx7:pGRFauOxLA/+IcTO5LX9","tlshash":"4c738fb338513a39bc3b976560c6b9ecf21cc527e5114bfab65a7920c2c70d68253b47","first_seen":"2025-03-11T03:43:12.263374Z","last_seen":"2025-04-17T14:55:56.270635Z","times_seen":3308,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BJPdvtHl.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/BJPdvtHl.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DmT_aqZN.js\r\nCookie: __ddg8_=OUfJMXjsch1vBlTq; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=UX8iLndeb9RPiAYW; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"67dc31ab-369\"\r\nage: 2906\r\ncontent-length: 514\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":873,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (896), with no line terminators","md5":"242cbefc2ee8e72d0436ba853764ebe4","sha1":"a7541675f5b7e7479c204ab2225ad64d85bfc141","sha256":"142357024ab98e40e5221f2148046934483c4483ab68684410383e39011e9ff9","sha512":"2b3114b644ccbf00c8cdbe4ce82c53249ef946f0bde8f484267aae81648429dcd0f01fa5ba0cc8c09f2e560ac661282b57bb93b6dc737c6141d32ca1acccbb72","ssdeep":"","tlshash":"c0114c0a7b40b93c121e7bf0d40a400191f3003b700214e08a388a9b6229cbcea1bb8a","first_seen":"2025-03-21T05:40:09.002706Z","last_seen":"2025-03-21T05:40:09.002706Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfDHPoqAAAAAJ5uqpAtCwZEtyusk-ogkGIqCj1t\u0026co=aHR0cHM6Ly9nd2ZnODR4LnNwYWNlOjQ0Mw..\u0026hl=en\u0026v=J79K9xgfxwT6Syzx-UyWdD89\u0026size=invisible\u0026cb=g1pafpbu6va3","date":"2025-03-21T05:39:25.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Mar 2025 08:37:01 GMT","end":"Mon, 02 Jun 2025 08:37:00 GMT"},"fingerprint":{"sha1":"63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B","sha256":"E5:08:EF:15:62:0C:70:BF:82:8A:23:7E:52:A0:03:CC:BF:47:9D:AB:89:97:C0:F6:BD:0C:85:14:3C:09:7F:AA"}}},"request":{"raw":"GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://recaptcha.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recaptcha.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 20 Mar 2025 17:58:55 GMT\r\nexpires: Fri, 20 Mar 2026 17:58:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 42030\r\nlast-modified: Mon, 16 Oct 2017 17:33:02 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15552,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15552, version 1.0","md5":"285467176f7fe6bb6a9c6873b3dad2cc","sha1":"ea04e4ff5142ddd69307c183def721a160e0a64e","sha256":"5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7","sha512":"5f9bb763406ea8ce978ec675bd51a0263e9547021ea71188dbd62f0212eb00c1421b750d3b94550b50425bebff5f881c41299f6a33bbfa12fb1ff18c12bc7ff1","ssdeep":"384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi","tlshash":"8462e103f2bc4c01e786193ebb5870237205272619efa67780ce7ea4c65ec81a39b457","first_seen":"2023-04-05T04:58:40Z","last_seen":"2026-08-13T03:35:33.243923Z","times_seen":341755,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":101,"dns":1,"connect":56,"send":0,"wait":20,"receive":2,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wss://gs.jdwqqi.site/socket.io/?token=\u0026EIO=4\u0026transport=websocket","fqdn":"gs.jdwqqi.site","domain":"jdwqqi.site","tld":"site"},"ip":{"addr":"91.215.43.62","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gs.jdwqqi.site","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Mar 2025 11:29:57 GMT","end":"Sun, 01 Jun 2025 11:29:56 GMT"},"fingerprint":{"sha1":"C6:0C:5B:FF:71:7A:63:B7:CC:46:5F:4B:CF:41:20:46:F2:4E:B9:E6","sha256":"C4:65:A9:63:E2:AB:DC:9B:3B:EA:F1:F1:62:46:43:F5:BB:F8:64:73:62:E2:68:BD:8F:80:69:C0:75:6C:25:8B"}}},"request":{"raw":"GET /socket.io/?token=\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: gs.jdwqqi.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://gwfg84x.space\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: s53QXUsSLZGo4Qwd7x/wFQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: ddos-guard\r\nSet-Cookie: __ddg8_=wcQuUcfRhmf9hlU4; Domain=.jdwqqi.site; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.jdwqqi.site; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.jdwqqi.site; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg1_=bpfc6nWsUJA9ZsbhHE9K; Domain=.jdwqqi.site; HttpOnly; Path=/; Expires=Sat, 21-Mar-2026 05:39:26 GMT\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nDate: Fri, 21 Mar 2025 05:39:26 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: VFLuO3MPakJGNpuQg5aRWkd9eEU=\r\nSec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover; server_max_window_bits=10\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":926,"timings":{"blocked":-1,"dns":263,"connect":338,"send":0,"wait":228,"receive":0,"ssl":413},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/Gamzix/0aaa45243bf24159a57a8f12ab838577.png","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/Gamzix/0aaa45243bf24159a57a8f12ab838577.png HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 25861\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"554850b0fb7957c5d65913cef5afa9c4\"\r\nlast-modified: Thu, 13 Mar 2025 14:42:09 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 182E6F928A87776E\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 7133\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7HhDxneWln6X9EEmHpi%2FQxzQ%2F%2FGCg3Ze2N3XhbfPaaWPBFSvCZTv%2FMp9Ccgup0E6rALWi4rR7lm8Sz%2FnfKUxrfAfpBX%2Bhs4HK4WNs4vc7Z9zR4VGuGalj9aONMA2B%2FXZ2w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 923b1be0e8ee56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=741\u0026min_rtt=444\u0026rtt_var=257\u0026sent=770\u0026recv=192\u0026lost=0\u0026retrans=2\u0026sent_bytes=1029681\u0026recv_bytes=4703\u0026delivery_rate=70564507\u0026cwnd=208\u0026unsent_bytes=0\u0026cid=874feb8d33a12a41\u0026ts=447\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25861,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"554850b0fb7957c5d65913cef5afa9c4","sha1":"1d51f20a8e9d3571f15ce7caf3e5009c3466fc8c","sha256":"5fca026051593bc205b35961c480f357c832c14521238acb8013a26242949fed","sha512":"3df36147c451f74bfd0b3c0235640807243e841f13d14f4cbcb221ebe48f2618f023d5923b94ea75583943820dce01b2292013957a3f8d61f2e57e588469b958","ssdeep":"768:CNvItSn/yv7v8SLg7M5rM5WQezEpGExJIueU:CJf/UisrbnS/J/eU","tlshash":"d4c2e155ebf549b8695f0bda9422625d537e481bd4ee28645f3218f630c3028ffe8728","first_seen":"2025-03-21T05:40:09.003767Z","last_seen":"2025-03-21T05:40:09.003767Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/coinflip.CH7d-UG2.css","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:31.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/coinflip.CH7d-UG2.css HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=2BFtV41K05TOVH6y; __ddg10_=1742535569; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=flIAItLYmwBgNULm; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg10_=1742535571; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\ncontent-length: 2874\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-3640\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13888,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13887)","md5":"c87a05cad86a583e48912702624b2a9f","sha1":"772fa488543442d3225e37dc5c8e778016eb3dbe","sha256":"fd1b4c4d064faac716df7c36f498c381585db6b4bf8fd484c8d0f4a8e254c4ae","sha512":"e9fbd87efaf283e21d87eae60db17d2192982955af452487920adfbd83254e0947c176df96de5586ef19f3c9f24121100a247c1ee985ec43e7b1027df8cac6f5","ssdeep":"96:LrLk5oM4QdDZzRVYK5tXaaX8TeGm2RQcdQDbExjJ2F2TLYo4Dt7iqty:n45oM4QJZtGK5JaUZGm2RQwQEWTty","tlshash":"aa529613789c142ef87bd1a5ee609a8c2235a70bd5131ffd979fa0368acf086367164d","first_seen":"2025-03-21T05:40:09.004418Z","last_seen":"2025-08-12T21:10:07.874261Z","times_seen":11,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BaQI6RfZ.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:24.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/BaQI6RfZ.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/CTURe_1d.js\r\nCookie: __ddg8_=PPNXJ4C3AyUQT8w7; __ddg10_=1742535564; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Zc24lmrs7rw0ibsJ; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg10_=1742535564; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-301d5\"\r\nage: 2903\r\ncontent-length: 37071\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":197077,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":21,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gwfg84x.space/games/casino/statsGames?limit=4","fqdn":"api.gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Mar 2025 15:13:14 GMT","end":"Mon, 16 Jun 2025 15:13:13 GMT"},"fingerprint":{"sha1":"BF:F6:26:CD:19:DC:7A:9C:43:5D:6C:E2:14:15:6C:4A:04:14:44:99","sha256":"BA:E2:88:D9:EB:25:85:70:88:7D:30:E4:9C:EB:DE:65:CB:CC:3E:F0:3E:AE:33:E2:5D:87:13:51:8A:CA:D4:E9"}}},"request":{"raw":"GET /games/casino/statsGames?limit=4 HTTP/1.1\r\nHost: api.gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=FGlOnZbbUL4hpju9; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg1_=ORyI3LWl50ViAiirxQao; Domain=.gwfg84x.space; HttpOnly; Path=/; Expires=Sat, 21-Mar-2026 05:39:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 21 Mar 2025 05:39:26 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 87\r\naccess-control-allow-origin: https://gwfg84x.space\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 09c69a6b-6db1-4516-9598-db441ba18c7d\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5182,"size_decoded":0,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with very long lines (5807), with no line terminators","md5":"cb15b2db29a116d9b59b0b741384ca21","sha1":"d119ad940539383e94b164bd013e63f368c502da","sha256":"5ce3c0275ddc4c5e7debfee9ea50d6736d44a1b87cbe85fd251052acea9af22a","sha512":"65047205c56147c38f115487810488d07a7c861206241e222339e64e1cdd386646f1c9c97cc9b3234633bb9caca87f8483857ac92233bff04b49de1a12b7cc68","ssdeep":"96:aD9+dwBs7+dwYRZhe+wEred+dwmMuD9+dwByK+whhe+wEr8+wK9D9+dwBy2K+wLY:aD9+dMq+d3R6+7id+dRbD9+dMN+X+7w8","tlshash":"e3c1d154f808eddb4da29cdc5a773eb35a0e109140a978f7d1f4c658a0fa8f5601fc69","first_seen":"2025-03-21T05:40:09.005195Z","last_seen":"2025-03-21T05:40:09.005195Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/ab3caf12a964ef856e2f933e689ee3a4616895a6.png","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/ab3caf12a964ef856e2f933e689ee3a4616895a6.png HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 33934\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"00000000000000000000000000000000-1\"\r\nlast-modified: Thu, 15 Sep 2022 12:02:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 180AD72126363B93\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 155\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7P1ZfTKpMnOx9zmCrlvwY8clrG75h%2BpvftQ15ZaD7jnH%2F49UDCSHiRiLNgxbprqxSa2kglgX4RLLrTzJhEOiuWojYFr%2BPns3caPwx%2BOR1TRNslof35yMOS%2FPC9T4Ig29Vg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 923b1bdeeee556be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1059\u0026min_rtt=444\u0026rtt_var=666\u0026sent=349\u0026recv=73\u0026lost=0\u0026retrans=2\u0026sent_bytes=461052\u0026recv_bytes=3573\u0026delivery_rate=4984509\u0026cwnd=282\u0026unsent_bytes=52792\u0026cid=874feb8d33a12a41\u0026ts=122\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33934,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"423a0d2b6177498d6162f6a08de083f4","sha1":"e2205083c8875a703b38e00d30af2ef64de9b977","sha256":"6ba8512da4e848abfdb5bfb14c6d304896f29d817d1c612ab37e0149ff7cbf8f","sha512":"1b153dda11852d1de01b823c9fd7d878a33dc9564fe9667ee2bfb59b17ce5926950850a6f9764280f964c925bf992fd79f0da2d7d8bf6f0dc5760a17041519cb","ssdeep":"768:42dzzoeMpbv3CrSq9xdzHu7YBEjGJRREXZLrW4Vpll8d55jSMMxU4:NSD2XdzH1IqT6/W4Xqh4","tlshash":"efe2f2583878b9ed571db3e152f43eacf2d28125dd5a54266d830f518c6f2acb81c837","first_seen":"2023-10-22T16:06:43Z","last_seen":"2026-07-11T00:52:31.086064Z","times_seen":24,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":24,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/Gamzix/3fccc4f90df944fa825b3f55385971a0.png","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/Gamzix/3fccc4f90df944fa825b3f55385971a0.png HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 25861\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"554850b0fb7957c5d65913cef5afa9c4\"\r\nlast-modified: Thu, 13 Mar 2025 14:42:09 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 182E579CAEE56DAE\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 7134\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BaEnYrGRzjHQ6JB0%2BDqhJiUL2HH7AMoqZ4T%2B6KVthVMdLJNsYDUkfG4QgWZfBR%2FaAeJyIXzPNGjYFM4Pq6%2BshTFRAfDFJ0R2sMA0PfXleA9ljKUqINgQl4HobnXDIxY7NQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 923b1bdf3f1d56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=774\u0026min_rtt=444\u0026rtt_var=201\u0026sent=706\u0026recv=183\u0026lost=0\u0026retrans=2\u0026sent_bytes=943704\u0026recv_bytes=4594\u0026delivery_rate=70564507\u0026cwnd=284\u0026unsent_bytes=0\u0026cid=874feb8d33a12a41\u0026ts=171\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25861,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"554850b0fb7957c5d65913cef5afa9c4","sha1":"1d51f20a8e9d3571f15ce7caf3e5009c3466fc8c","sha256":"5fca026051593bc205b35961c480f357c832c14521238acb8013a26242949fed","sha512":"3df36147c451f74bfd0b3c0235640807243e841f13d14f4cbcb221ebe48f2618f023d5923b94ea75583943820dce01b2292013957a3f8d61f2e57e588469b958","ssdeep":"768:CNvItSn/yv7v8SLg7M5rM5WQezEpGExJIueU:CJf/UisrbnS/J/eU","tlshash":"d4c2e155ebf549b8695f0bda9422625d537e481bd4ee28645f3218f630c3028ffe8728","first_seen":"2025-03-21T05:40:09.003767Z","last_seen":"2025-03-21T05:40:09.003767Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/CTURe_1d.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:21.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/CTURe_1d.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=s6a1IZLaTAntwD2B; __ddg10_=1742535560; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=POVIkLDW9zZlBYLl; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg10_=1742535561; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-6ecd7\"\r\nage: 0\r\ncontent-length: 162455\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":453847,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":43,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/CZMI8v_-.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:21.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/CZMI8v_-.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DNNdIs2A.js\r\nCookie: __ddg8_=RbNrh8y3wkGBGL31; __ddg10_=1742535561; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":285,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"45cba5f74dd5a2d0d28b433033eecab5","sha1":"0b4a1dcee93d58b8367a28f313e8836c651b259a","sha256":"bb6af7249adec7c8059da7920ebc68a619aa027481bd2ab9749f4a0e825b126f","sha512":"72bb91b3d0dd0627bad45bdc8fb1ee112b40955a2fa0a808e8a2110b281029b2f6f76dffa1dd95d818e2569ca947fdf854c2de421b28749142c23da048c06fde","ssdeep":"","tlshash":"a1d02bcdef7061b4bb04456d849bc753c718f90027596bc6e57a65a12f00d92c345fd1","first_seen":"2025-03-21T05:40:08.945496Z","last_seen":"2025-03-21T05:40:08.945496Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/locales/br.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /locales/br.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=PS7WWjCFtFHAvhYR; __ddg10_=1742535566; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=jJbqEc56KAIH6rQq; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1356\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-1959\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6489,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f37e9eb9c2647fadf851eaf2db583c4c","sha1":"11d406e311125803550b2fb425f0fe523bae99a2","sha256":"9819dd57ea480b0390786e0f459258876e9d1c0797d77191088ad1447ff16d5b","sha512":"1d2db57339505a8364a68eeea01f61aed872dd03a949e0f4c0221383b33ce525b37798bacd6910bde65bea984368fb2c93cd3780cbf2e318060a823872c0b8a5","ssdeep":"96:0t6tRnVh+4cjIdyRLIfD91LOEgiPprO7mr0RQk13sZig+oEwllCZlMuIWWUsULQX:+6tRr+4Ycw6al5QUbzNI","tlshash":"9ce18b19dfa1b10e4c09b2876b68dfee7b07b4de3787414bc9bb793b3026d611916128","first_seen":"2023-07-23T18:22:19Z","last_seen":"2025-03-29T11:19:57.814646Z","times_seen":17,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/WPiWsW_T.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:24.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/WPiWsW_T.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DNNdIs2A.js\r\nCookie: __ddg8_=ZXEgGxkQn6ZK5OtK; __ddg10_=1742535563; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=nk0wenqoV5ypO4qX; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg10_=1742535564; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-142b\"\r\nage: 2904\r\ncontent-length: 2085\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5163,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5226), with no line terminators","md5":"68636c99ffbe0d4e381a4a631eb73def","sha1":"08a3d4b5d227bb9c13a776ad4af8409ca7d359cf","sha256":"751ac112871a322c0733ffc1556e35ecf8c9b9ec1adfa1128b438f4659cf853d","sha512":"e1fd2e2680eccc259edbad544782d5ddaa95d61e6f9f22837cb676c4126671ad4943d27a8ff61689bcfaea637964e34370b2f90cb5fae059f1198d3914b9b1ff","ssdeep":"96:6Ep53hE4oKMj1K81wUZ13XPx1oRst0CBRL/8JXgfDblKPRPR:6g31Y1K81jTpmQ0CHEgbYH","tlshash":"bfb1a6d4b1d8e0dbbb764fd2c036225250076b947434a0d0f27aadb7315bb54a663b2f","first_seen":"2025-03-21T05:40:08.903313Z","last_seen":"2025-03-21T05:40:08.903313Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/OZv6iJsG.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:24.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/OZv6iJsG.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DNNdIs2A.js\r\nCookie: __ddg8_=ZXEgGxkQn6ZK5OtK; __ddg10_=1742535563; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=6ASZ0MqNCFNixjvb; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg10_=1742535564; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-171ba\"\r\nage: 2904\r\ncontent-length: 27951\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":94650,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5cf0ce803f3fb65f1a297f632d6eaf50","sha1":"6daa65c0ac95842a55c271a1f25603ba99b4fd40","sha256":"e2bbc7ea980ef4de4ddafbd48f72dd615a759f8fc0fe81022af43c10b513862e","sha512":"db1c95d35cff981d16186da3274dbd2bc158bb97dada4e4904fb93f9b567e8ac4b95d1b401f005fb43379d727891a32538ee2639b1c5b3206ceeeed05b29dbcb","ssdeep":"1536:+7WUcvXJnXfZsUdMJqyiWNP3IDXRC216866jJBlxvHV+yThDkUXiA6wyb5gzbdmI:+aUcvtfCUYNP4D02fjpTaZyzbN","tlshash":"45931989b224b57742f75ada83b58201b2a04984f409d4e8b0fd9d7b457e95c03aeffc","first_seen":"2025-03-21T05:40:08.916931Z","last_seen":"2025-03-21T05:40:08.916931Z","times_seen":1,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/CvukIv9x.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/CvukIv9x.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DmT_aqZN.js\r\nCookie: __ddg8_=OUfJMXjsch1vBlTq; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=0RAmLg0Ur2Uxvr2b; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-9eda\"\r\nage: 2905\r\ncontent-length: 13048\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40666,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"daf80f89c657655e996d43df19118d0d","sha1":"480439d9442d2dbc1b7568661ef8f6b9fa196071","sha256":"9435fc448c07bb892677ab48b0adcb549a23bb9fde3cd267383aa4e4220d17ad","sha512":"507765437dfdfa283ca65c4c1195b9bdde48506a58e0485a55bababb61a4843215692281a60f8de4cbd329cd29049bc69a1f425ab0a8183a1583d2b83a42654b","ssdeep":"768:rU4ML3uaz4sTQ/AyEdyAMwi2KFnyY+EXuwZMjE/1WkOWwDbBcvFjAB4TyMfqVZVv:eMxrzh1v2cdu0Fa","tlshash":"e203fac8b2a1506583e2a1a390750203f33995157409816cbb2ceef7ad7eeca7277f75","first_seen":"2025-03-21T05:40:09.007591Z","last_seen":"2025-03-21T05:40:09.007591Z","times_seen":1,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/DVk-ui_H.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/DVk-ui_H.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DmT_aqZN.js\r\nCookie: __ddg8_=OUfJMXjsch1vBlTq; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=o7h6dhjddl6fLOdq; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-11c1\"\r\nage: 2906\r\ncontent-length: 1996\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4545,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (4636), with no line terminators","md5":"7b28da24ec50deaccc2a02e6b084f589","sha1":"07831c7b45c3a9dccd709b53aed55b2a209e7e41","sha256":"8aa80245f11e52484386b87048d249fe4cfccee5d3cfb250d836e87f8b43d929","sha512":"f06d358fc0a1e420067df7279134b5d8218efeb60290fc8cb50c9cfb4d7070079887c9942e1cdbc07877c1a2e866f2ef5981be3f5308695fb1b2ee5e2ffcd6e4","ssdeep":"96:gL5XhK13OvgxqK6n/LTjrlzrQxHTMOYRwjbQjIaxAHnytpz+:gL5XmevgAKOzrlzrAHTnY61y/+","tlshash":"d8a1c65d69500b3880a546b341ebd0938f6a0302b05793b6756ceacafa854fcef45ab6","first_seen":"2025-03-21T05:40:09.008194Z","last_seen":"2025-03-21T05:40:09.008194Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/home/100hp-mines.webp","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/home/100hp-mines.webp HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=p6jbeaWUrL6qwblm; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=pNVU7b9fqd6yI0zF; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:48:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 76028\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"67dc31ab-128fc\"\r\nage: 3065\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":76028,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2984x2060, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bff4b3355dea63d258888a81795b64c9","sha1":"5f42a8d92aa6a29837c2a731975851db241ae7e4","sha256":"6518c070c0f76ef56f07223c682583435c1b62b9b3f2e850357aa6102cffff0a","sha512":"2dcb0869c5bed101159ea665ab316b50cc13eca6b59ab68cf972cd5cd9df0b2d2b5e508ac15dd0e48381ca561e2a5146ea76767804192f4b7ae968a70bf7652e","ssdeep":"1536:QlPqUNAYvFpSPBA955XW/3f1V2jaGZZjxQpgJj2YEi/MkB1j3:YNPi4FCAwknr","tlshash":"647312044d053c5df9b793cffee7112d629b3f82f236769213b9143da826662280b5e5","first_seen":"2025-03-21T05:40:09.00881Z","last_seen":"2025-03-29T11:19:57.844442Z","times_seen":8,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":34,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/PragmaticPlay/24af37f89f48429eb57f315f3c5c80d7.png","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/PragmaticPlay/24af37f89f48429eb57f315f3c5c80d7.png HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 24882\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"36124c66609bcbfc658cab49ccbc43dc\"\r\nlast-modified: Mon, 06 Jan 2025 19:17:20 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 1823B02B20BBB7BA\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 7133\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4TseBIk%2BqmFbs1qMnU3Sm89nG0Mk3x9CcjZoMDcHZpEOA6FMMhRhLEmVejZ43v5RpltGcq0vrLQKMxe%2BCzdAlaomkUYeDzGvJU4lvLGN6TAY9MjsWO7JKAhxpJHK8XFFjw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 923b1bdebec656be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=783\u0026min_rtt=444\u0026rtt_var=353\u0026sent=79\u0026recv=32\u0026lost=0\u0026retrans=1\u0026sent_bytes=87393\u0026recv_bytes=3011\u0026delivery_rate=18897226\u0026cwnd=256\u0026unsent_bytes=23024\u0026cid=874feb8d33a12a41\u0026ts=99\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24882,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"36124c66609bcbfc658cab49ccbc43dc","sha1":"4807a48c9a26aafe18728e0f1de98976d140a8af","sha256":"1d7466243afcf48d42499b7d98371f760c1c69aa1dd108426e781d77dccc3616","sha512":"9a3d3c8b7e69d294e0052a5ef1c01c9a5f2d9c654f1820166f301c30c7c1a2ef892907234e4e365bca73fb8386218f03e6aecbe04f90d30110fbef5e0f4e1937","ssdeep":"768:7v7GRlxglB8sZUWu+kz5rEj0b4ZgQX/61R:uXxgA+orEj44/6j","tlshash":"69b2e1ded133afdf90c01e5d3fb0491181a6c75ee20b4a40590191a52ba24aaa79e77e","first_seen":"2025-03-21T05:40:09.009592Z","last_seen":"2026-07-12T17:41:43.816578Z","times_seen":43,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":32,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/providers/100hp_gaming.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:28.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/providers/100hp_gaming.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=ddDZI5aCQKaI4K7k; __ddg10_=1742535568; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=SNY2ngnQoiEB1X8F; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:28 GMT\n__ddg10_=1742535568; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:28 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 387\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-452\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1106,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0d3cf20774edde7124014c0ed6e496f7","sha1":"647085aa6154ed26c321e84888833a7179d2f394","sha256":"630aeb8bbe85f086edf4efa70e1e286d246beb1a296d261b819057894211b6e6","sha512":"aabf8054caafcaf1061bf1ec58d00024f21ae284291e50dbd92a6ab20d4dc2c30ca58ad7693f833e47e3dea173cf3e50280584e54e1d03e4b6c4a6a6fef54f87","ssdeep":"","tlshash":"1c217fa9889de7b2ad8083171f5d58bb00b030fef5e125099a57537f342543f6ae16f4","first_seen":"2025-03-21T05:40:09.01022Z","last_seen":"2025-03-29T11:19:57.762475Z","times_seen":8,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/analytics/pv?pgi=GTM-KN757LMM","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"POST /analytics/pv?pgi=GTM-KN757LMM HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 517\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=dM6hkqZOUZ8VbEXN; __ddg10_=1742535564; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":517,"data":"{\"uuid\":\"\",\"session_id\":\"undefined\",\"event_type\":\"page_view\",\"user_id\":\"\",\"client_event_time\":\"2025-03-21T05:39:25.095\",\"client_event_time_utc\":\"2025-03-21T05:39:25.095\",\"client_time_zone\":\"UTC\",\"event_properties\":[{\"gtm_container_version\":\"11\",\"page_url\":\"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\",\"referrer\":\"https://gwfg84x.space/\",\"page_path\":\"/\",\"query_string\":\"?stag=819_67d75bad718f91aca41894cd\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}]}"}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=AuYKgawYhKD6qx6x; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:25 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gwfg84x.space/games/casino/lastBets","fqdn":"api.gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Mar 2025 15:13:14 GMT","end":"Mon, 16 Jun 2025 15:13:13 GMT"},"fingerprint":{"sha1":"BF:F6:26:CD:19:DC:7A:9C:43:5D:6C:E2:14:15:6C:4A:04:14:44:99","sha256":"BA:E2:88:D9:EB:25:85:70:88:7D:30:E4:9C:EB:DE:65:CB:CC:3E:F0:3E:AE:33:E2:5D:87:13:51:8A:CA:D4:E9"}}},"request":{"raw":"OPTIONS /games/casino/lastBets HTTP/1.1\r\nHost: api.gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwfg84x.space/\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=H9O8Zu8ntY9be9FY; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg1_=kegEgiApcV8L3MdgSK9Q; Domain=.gwfg84x.space; HttpOnly; Path=/; Expires=Sat, 21-Mar-2026 05:39:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Fri, 21 Mar 2025 05:39:26 GMT\r\naccess-control-allow-origin: https://gwfg84x.space\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: 4dd1e9ec-3164-4d1a-84db-523b8940fbae\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/DNNdIs2A.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:23.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/DNNdIs2A.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/CTURe_1d.js\r\nCookie: __ddg8_=iYjgVZDtNDAlGWEr; __ddg10_=1742535563; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ZXEgGxkQn6ZK5OtK; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg10_=1742535563; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"67dc31ab-25c\"\r\nage: 2902\r\ncontent-length: 356\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":604,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (637), with no line terminators","md5":"3be18a861a89ca333a598e9d61d84483","sha1":"6515c076439bf250c2ba50d588ce52259f65aa0b","sha256":"dc2a589282b418a4e19e840da96399de5a8947b5fce227310c7ab2e8ff6b1562","sha512":"b03b6bbf0327e074f05e8bf62b5ea1978825cb2e354d57e8c45e38863dd8283a27c37e7041e0791aee4d18ad5f86d8da5b32c51c5ea15d4d0427ea28a5622646","ssdeep":"","tlshash":"abf0a61f5a92c0b87008c3bce53b3c77ba7684882b7c248093cf8fb143c0080a96ee52","first_seen":"2025-03-21T05:40:08.983432Z","last_seen":"2025-03-21T05:40:08.983432Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/D0ptTuKO.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:24.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/D0ptTuKO.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DNNdIs2A.js\r\nCookie: __ddg8_=ZXEgGxkQn6ZK5OtK; __ddg10_=1742535563; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=5XHhZP9Ku2rcymhI; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg10_=1742535564; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-2007\"\r\nage: 2904\r\ncontent-length: 2839\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8199,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8346), with no line terminators","md5":"968ce9714348d12d8d52dc2f8e783d99","sha1":"b038d3af753b441dc8808e26a28dffc0376eeaeb","sha256":"06a3aa7707f701dd708fb89d695ed39523abaf11eebb2db3a944fff7ef7e52d5","sha512":"0ab31b2483d5d199f59cd25a1297ba400f2f0fb63886c1e9feb473c4a343e0fdb7091af7a0402178a3c20fbca94652f37f2b7591adf640d8dc2615a74860d15b","ssdeep":"192:M8paawwef9Igm2oWt81wPVO4SSNLvs9gB9y2eOLurv9:MzNf3mc2ASSlvs9g93eOCj9","tlshash":"7202b5dd1300b61969ef426743b1181883350882f84d77f8b0abde2cd66ec5d5b67bb9","first_seen":"2025-03-21T05:40:09.010904Z","last_seen":"2025-03-21T05:40:09.010904Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/C1CbtQXp.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:24.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/C1CbtQXp.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DNNdIs2A.js\r\nCookie: __ddg8_=ZXEgGxkQn6ZK5OtK; __ddg10_=1742535563; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=SpcbJRJ979vzUaJK; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg10_=1742535564; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-457\"\r\nage: 2903\r\ncontent-length: 490\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1111,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1122), with no line terminators","md5":"3229ef6b58a68752d2a76c92324204e6","sha1":"6fbb491d5abedc283b26d57750f98acecafc834f","sha256":"37920a09877102814d34edc43a0a3656bf893bec1d8958f7f2cb4cd9239aac56","sha512":"e9acd7c773beb8d909479e7bad146d56eafc1f572ef0c4417dd533ca80fa718441e67567fb79f41c5694d070be470915d36697e246b9b44f2cae55c8291a27d5","ssdeep":"","tlshash":"f62138bd4aec2dc8091cbc8039d89d7c7514d2496192cc9639a6fee7f487d59ec48471","first_seen":"2025-03-21T05:40:08.9523Z","last_seen":"2025-03-21T05:40:08.9523Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gwfg84x.space/middleware/mirror","fqdn":"api.gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Mar 2025 15:13:14 GMT","end":"Mon, 16 Jun 2025 15:13:13 GMT"},"fingerprint":{"sha1":"BF:F6:26:CD:19:DC:7A:9C:43:5D:6C:E2:14:15:6C:4A:04:14:44:99","sha256":"BA:E2:88:D9:EB:25:85:70:88:7D:30:E4:9C:EB:DE:65:CB:CC:3E:F0:3E:AE:33:E2:5D:87:13:51:8A:CA:D4:E9"}}},"request":{"raw":"OPTIONS /middleware/mirror HTTP/1.1\r\nHost: api.gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,region\r\nReferer: https://gwfg84x.space/\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=hBQON05RZ5Vb7q0n; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg1_=Hd8K1lLz04lucsTu6pe3; Domain=.gwfg84x.space; HttpOnly; Path=/; Expires=Sat, 21-Mar-2026 05:39:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Fri, 21 Mar 2025 05:39:25 GMT\r\naccess-control-allow-origin: https://gwfg84x.space\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type,region\r\naccess-control-max-age: 86400\r\nx-request-id: 0d6b9a55-4f2a-4ed9-8fd4-7de276d69b04\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/805e294072873e2afdcc2f500913568bac1a6ee7.png","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/805e294072873e2afdcc2f500913568bac1a6ee7.png HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 31160\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"00000000000000000000000000000000-1\"\r\nlast-modified: Thu, 15 Sep 2022 12:02:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 1825FEA06B97E8A0\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 7133\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=K4Leub9dFusXusFQDY%2FgH%2F2ZSYVSeLdUQ0uvlQ4AWmCTOJc3byrHoSWCUZ5oKjB7CwMnxAW7V1DztwjgbJ20JmG7LB9W3RgWjBSHGbloibBemAEdQZVkc0na3HdW%2FbsKKQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 923b1bdebec156be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=877\u0026min_rtt=444\u0026rtt_var=512\u0026sent=71\u0026recv=29\u0026lost=0\u0026retrans=1\u0026sent_bytes=78102\u0026recv_bytes=3011\u0026delivery_rate=54789189\u0026cwnd=256\u0026unsent_bytes=0\u0026cid=874feb8d33a12a41\u0026ts=98\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31160,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"d9162bc1c1e7d67d56d701707a87b9b5","sha1":"aa450f1f4897d30cfda4acfa4c85f62229ecd472","sha256":"4c56057c81c292ac2a61c2f74001156361db602c8a9d3a72f7ef7a9dc9eb4154","sha512":"875b0e7533ddce7566153182fc1911cd7eaf4c6157699132081aa32ba3963dc87bb287e5f2da97c3ba0e2c171fcf3b5c3ccea021313000adf5183b2d9fa4c2d0","ssdeep":"384:09RNdhLsCaMS7aNCElmgxXlEN/g3Ur479MEJg/71dD3mbx11GZYHs6tiqlQa6dOx:0PtgrN2UH/g3Use/7LD37+1lXNAcvNL","tlshash":"b4e2e04d867c866b232c4f33081847f8ff2497639fa523c650ea895d23295c923868ee","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-02-25T19:06:54.219522Z","times_seen":69,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/Loading.Bk2PI8_1.css","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:23.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/Loading.Bk2PI8_1.css HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=t44G9X48ms9HCwMK; __ddg10_=1742535563; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=e1QfL5UV41NWI7ql; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg10_=1742535563; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nddg-cache-status: HIT,HIT\r\netag: \"67dc31ab-ee\"\r\nage: 2\r\ncontent-length: 144\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":238,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"9cb0ebaa6bbb2e2c53fc0a4c01db8426","sha1":"1e8221adcd8bc188a7eef58438272e790703b45c","sha256":"23db996a156ddaf2b44b9b68bbf0992bdb544a6e94f45656ad7cd30ae8a4ec43","sha512":"215868f7ef7260a00114c539d8f0a19dd52c5ccdd330068fa3def7b4676087ed4e99c5e1d59216de13784dde1d3a0b91a667bc2ceb45c07d2951530fc5b73b21","ssdeep":"","tlshash":"ecd0a7d5864444530f670a3311cc5d59c8b02ec2c8be1c1eb399d1aa03492a933b7a69","first_seen":"2024-08-19T21:28:00.794175Z","last_seen":"2025-03-29T11:19:57.789559Z","times_seen":10,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/Dwm2o3f2.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/Dwm2o3f2.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DmT_aqZN.js\r\nCookie: __ddg8_=OUfJMXjsch1vBlTq; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=xyHxg5ZaaXfZuW4g; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-8a7\"\r\nage: 2905\r\ncontent-length: 830\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2215,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2310), with no line terminators","md5":"916a4931db103577fedb546cb61daf24","sha1":"a101b838dfb5da7d9e089f53637e99da008f0142","sha256":"cadb1097ab8fcb6cba0f703d8e9e94f35bf829610cac7d2847c6056f9324f0da","sha512":"2507182903f815a34939165c007d4179e52ec525e504caf32d537074c4d01529599295b5dbeeb660e8f4b9e7b0a405e543ee38096d53267d1d34ba15881f6995","ssdeep":"","tlshash":"bc41ee0d2185e164aad7b402729f06c26e1ed84f9425099d62ece1fff64cd7cab49970","first_seen":"2025-03-21T05:40:09.012272Z","last_seen":"2025-03-21T05:40:09.012272Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/PragmaticPlay/76b3846996214fa09c1f761a0228c032.png","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/PragmaticPlay/76b3846996214fa09c1f761a0228c032.png HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 21038\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"f1abb86c2856cecc5b6a0f5fb83a462c\"\r\nlast-modified: Mon, 06 Jan 2025 19:16:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 1825B43EB287D3F7\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 7133\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pqmY9eMJ8OBtKVlXZhWR%2FR%2F6l7LuzWWP7SEzikohCASK4QbBoZpnSemoYYBZ413HCGaFLUR1ghq0T1NtRZz%2BTx3R940TEwYM8H582yOucNsB2ytMttN6%2BJej0RQazrxG8g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 923b1bdefef756be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1038\u0026min_rtt=444\u0026rtt_var=639\u0026sent=578\u0026recv=132\u0026lost=0\u0026retrans=2\u0026sent_bytes=780698\u0026recv_bytes=3921\u0026delivery_rate=70564507\u0026cwnd=284\u0026unsent_bytes=0\u0026cid=874feb8d33a12a41\u0026ts=137\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21038,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"f1abb86c2856cecc5b6a0f5fb83a462c","sha1":"d3b29d8f79e981e7bb4da89cd8beb535d9f65bb3","sha256":"db8542127e0e7435ecbdbdf2fc87409b5a717f7b58477d61e97d588955f09346","sha512":"398244fbfc327d67add15826d4f8c46a6c5db1e541228fab9390cdafcc622131872df405b4c90e4788330596120ff100901c754b6e2214a0f2f2a02af9e17685","ssdeep":"384:UiP3rjEwDYDBGjhkaky4/e7KkJ9aF3hyow8FcyQGemThQTjEOTm:UivtYGhka6e7KgEFzfFEBTYkm","tlshash":"b992d0519f922525859ef30b12ab35bcb3278fd88abc8c18045de21ffa7d147676c29c","first_seen":"2025-03-21T05:40:09.013124Z","last_seen":"2025-12-04T06:16:10.510649Z","times_seen":120,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/providers/playson.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:28.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/providers/playson.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=ddDZI5aCQKaI4K7k; __ddg10_=1742535568; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=dMvsRdKK57O6FfEZ; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:28 GMT\n__ddg10_=1742535568; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:28 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 604\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-4b6\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1206,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e16b6380411829b323cc4bfeef45aba","sha1":"9d3b1a47657f0d2151090ed900a44a55682433d0","sha256":"f9f01f9bfef74f62caa5df2c87041e698341bad95e369d4b4eb2004cc1bef208","sha512":"d89854dcead7c2e64ae430e92655ecfaed10cc618596283c9f61dbaf4f7d5d6a78282dc76d08e9eb1cf1ec2b6e5571bafd4563b08a96c79d3472f5335d2f7cea","ssdeep":"","tlshash":"dc2124fbe39eb7d1dc088320cd2989b450a6757e7f59a39d42d0ed72e52645d1c44c90","first_seen":"2023-05-21T11:43:23Z","last_seen":"2025-03-29T11:19:57.758056Z","times_seen":10,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/v/images/upload.png","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:29.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 21 Jan 2025 21:48:29 GMT","end":"Sun, 22 Feb 2026 21:48:28 GMT"},"fingerprint":{"sha1":"C9:8F:2B:90:8F:AA:A2:41:5B:E2:A2:52:7D:CB:E8:06:B8:A0:74:B2","sha256":"A4:69:EC:34:42:8B:01:37:A2:0E:C6:34:5F:3A:A3:2C:80:A3:01:0A:B8:13:8B:33:B9:87:E0:C2:5A:16:AB:59"}}},"request":{"raw":"GET /v/images/upload.png HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 21 Mar 2025 05:39:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 5607\r\nLast-Modified: Wed, 15 Jan 2025 07:23:25 GMT\r\nConnection: keep-alive\r\nETag: \"6787626d-15e7\"\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5607,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 252 x 192, 8-bit/color RGBA, non-interlaced","md5":"7b5802fbdfcaff9ccd0826fa008c38ba","sha1":"bec3747315222740af2524067fdb193ba5cd3dd4","sha256":"455f8ff96a7775e51c6766e041b6d94f324729236e4f11cee602d5374d4c70e6","sha512":"0b0a952f2f4ee0b4db1f8d195fdbd81487e6c34b2b1d72a3fda1870c6d8eda43e4291e2a0cb5a060e75644ee6dbc2e1e2932aa10e1027b578d4691c87187b26d","ssdeep":"96:bJ/0V4UQ9C6HWpAK6a44RkRMeUkucxOx5QUR6eDJHV7IlH:V/2yHWpHiTgkucxI5QeDJHV7IB","tlshash":"7ac17cf769d8da9a70dfa9e043237872f8041b2bc6f0f356a8298097bf15c41f961301","first_seen":"2023-05-01T22:32:10Z","last_seen":"2026-08-02T00:07:57.72238Z","times_seen":2300,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":132,"dns":16,"connect":21,"send":0,"wait":20,"receive":0,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/CLfxcPb_.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:31.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/CLfxcPb_.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/B3Eab3YU.js\r\nCookie: __ddg8_=HoQ1GuZP8P6g54xL; __ddg10_=1742535571; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=8EENvKVInibx7yp1; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg10_=1742535571; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-1889\"\r\nage: 2905\r\ncontent-length: 2986\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6281,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6567), with no line terminators","md5":"85ac5c85680875febf12ffea73cb03cb","sha1":"c79e180552c07878a38c4086c0d3ca2e2b024183","sha256":"9c931f43339e8a36f0b2ab41148b872a9fe82920679def95bc764fd74acb64c9","sha512":"cc2bedd240b30eae2335f4f0943739305b5649f1beaab0dc547ed11e26ab65f7e7827b9dd9e647962985080d678d704c82eab1390d5d0aefaf7aa3c8b46b8ece","ssdeep":"192:muTUwvhsGvNl+nroJIZ/wwKnsirfw4K+qeEW4fkr+UKa:mCNvtNlEr1ZhKsx8qa4fkrj/","tlshash":"f6d1fa1db144ed35c063e8d4913f14149a5bb392b87649a061e8cab3e26757d3f4f78c","first_seen":"2025-03-21T05:40:09.014668Z","last_seen":"2025-03-21T05:40:09.014668Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/ns.html?id=GTM-KN757LMM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:24.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Mar 2025 08:35:59 GMT","end":"Mon, 02 Jun 2025 08:35:58 GMT"},"fingerprint":{"sha1":"16:BA:A3:B5:22:51:BB:87:46:7F:17:3F:9D:14:B3:35:F0:FE:B1:8D","sha256":"EA:A9:16:BF:DF:87:08:5F:BB:3E:9B:05:23:A9:FC:DF:F6:53:A5:BC:1B:A8:45:77:DA:94:41:74:6A:89:71:88"}}},"request":{"raw":"GET /ns.html?id=GTM-KN757LMM HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: *\r\ndate: Fri, 21 Mar 2025 05:39:24 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1310:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1310:0\r\nreport-to: {\"group\":\"ascgcycc:1310:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1310:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 92\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":268,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (397), with no line terminators","md5":"c21182596ebb274942845558c44a5af9","sha1":"4ebcb97267494e4e8d22079ec4c1602e84ceccf0","sha256":"8c6818048f4762543b0475719679018bd6b885005edc86f25ee6dbec99e072ec","sha512":"5f3f4aaf0d846b1765655abd81e3e81e04c438b4b71cb442341f69cc6d44f5b9899ff5d87607c3201b1f9a0e050a4230683bc7e69df385671b5eed53ad037fa3","ssdeep":"","tlshash":"27e04c4e34f1503d46605ac01fce7168144f3e407191da30268525172945575fd63e84","first_seen":"2023-04-07T01:55:39Z","last_seen":"2025-04-06T22:37:18.362973Z","times_seen":232,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/VZmfE2m7.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/VZmfE2m7.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DmT_aqZN.js\r\nCookie: __ddg8_=OUfJMXjsch1vBlTq; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=0ymQf6ItcMPBUlUd; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-4f7b9\"\r\nage: 2905\r\ncontent-length: 84314\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":325561,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"37dd6310a46709fa62d9324fecf77fe5","sha1":"86937cbe135215d18cf71a04891bf2a148fc02a9","sha256":"bd0d9b990a23fa9eb216890c162485a79ae3128c3345bcb946711f0efc6be82d","sha512":"75c770e209e7b6562c53c461c783e16595f0f608144026067be08eb74f4fc9424331b59685c9644cdf7e1b763beafeb2c109447766a11aa0a76cdcbf1ae49a63","ssdeep":"1536:ieG/EiU4fuPHs384FTCSZcAJu6GBynmI0wcQ3BynmI0wcQZBynmI0wiJu6K2Ju61:iAJPHs1+6a0Q59","tlshash":"fc64f8e172a4a1e4f407d7fce912e4f0325a77fb3ad1c5c541a4bf189a220ac6e4dd82","first_seen":"2025-03-21T05:40:09.015828Z","last_seen":"2025-03-21T05:40:09.015828Z","times_seen":1,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":36,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/home/home-getmax.webp","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/home/home-getmax.webp HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=p6jbeaWUrL6qwblm; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=OgBFzDdpJIUl6iDy; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:48:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 872202\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"67dc31ab-d4f0a\"\r\nage: 3065\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":872202,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8545f65f952c82cfda7032c7d6ae10e0","sha1":"e2c1421642200a69ab0a037422fcea298b4771bc","sha256":"f35e78d73590b9f901d46a046b1cc9fea8839da99792716496a6819ab96e69ff","sha512":"7ed84f012f0f366e061278bd77194617970970d14409ab1ad0e9575d4fdec44b05cad0307bcad4f2027a7385d70184c9f3f6fd853780caf69ce5b495e66f27e0","ssdeep":"12288:ojIL2ZMe66kiGsKHoALfabh+Jno6wbznwZVtySu934YqTv7QE0AHflJ/rA6naekj:jLyeiGskomfzZoVLwztW5LqTshAzAsy","tlshash":"ce053333172d9a236054cbea54dcb21b6e76f113e5e785834c52233db7294ce2e9292f","first_seen":"2024-12-10T17:19:34.241331Z","last_seen":"2025-03-29T11:19:57.809316Z","times_seen":10,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-03-21T05:39:20.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /?stag=819_67d75bad718f91aca41894cd HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=s6a1IZLaTAntwD2B; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:20 GMT\n__ddg10_=1742535560; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:20 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:20 GMT\n__ddg1_=PicdWqULu20TJl0TA4t2; Domain=.gwfg84x.space; HttpOnly; Path=/; Expires=Sat, 21-Mar-2026 05:39:20 GMT\ni18n_redirected=en; Path=/; Expires=Sat, 21 Mar 2026 05:39:20 GMT; SameSite=Lax\nuserVersion=45.10.240.43; Max-Age=86400; Path=/\nuserBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; Max-Age=86400; Path=/\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:20 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-powered-by: Nuxt\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":371279,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":1024,"timings":{"blocked":396,"dns":91,"connect":21,"send":0,"wait":231,"receive":0,"ssl":281},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/D0ptTuKO.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:21.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/D0ptTuKO.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DNNdIs2A.js\r\nCookie: __ddg8_=RbNrh8y3wkGBGL31; __ddg10_=1742535561; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=iOT0RoJnvLqLxK4Z; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg10_=1742535561; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-2007\"\r\nage: 2901\r\ncontent-length: 2839\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8199,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8346), with no line terminators","md5":"968ce9714348d12d8d52dc2f8e783d99","sha1":"b038d3af753b441dc8808e26a28dffc0376eeaeb","sha256":"06a3aa7707f701dd708fb89d695ed39523abaf11eebb2db3a944fff7ef7e52d5","sha512":"0ab31b2483d5d199f59cd25a1297ba400f2f0fb63886c1e9feb473c4a343e0fdb7091af7a0402178a3c20fbca94652f37f2b7591adf640d8dc2615a74860d15b","ssdeep":"192:M8paawwef9Igm2oWt81wPVO4SSNLvs9gB9y2eOLurv9:MzNf3mc2ASSlvs9g93eOCj9","tlshash":"7202b5dd1300b61969ef426743b1181883350882f84d77f8b0abde2cd66ec5d5b67bb9","first_seen":"2025-03-21T05:40:09.010904Z","last_seen":"2025-03-21T05:40:09.010904Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/Cisep7MC.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/Cisep7MC.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DmT_aqZN.js\r\nCookie: __ddg8_=OUfJMXjsch1vBlTq; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=DYmyAMAZvMKDdTtO; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-7a0\"\r\nage: 2906\r\ncontent-length: 1090\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1952,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1979), with no line terminators","md5":"4cbf1733a1f0b7f9488d7c85c7006328","sha1":"3000e0dbc86424aa9f03c8a9ae1903df358d52ff","sha256":"44bfbb4463f49b3e1b7ad40864b06641b7caaacf36bb8f9ff2a1632394ae7294","sha512":"fe816952223013ae29a222de65940b50128934f7f44b89214885c9781879a1c08a90718028cad7a56f24464a3e87d1e0ebcb643da1c75bef5239eed0c344da3d","ssdeep":"","tlshash":"2341e85eb355683818e250f1480a20a0196125267027d8e83a73c9daa6718fdfa4effd","first_seen":"2025-03-21T05:40:09.017325Z","last_seen":"2025-03-21T05:40:09.017325Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/home/100hp-hilo.webp","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/home/100hp-hilo.webp HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=jRU7wOYNjvAPtHvS; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=CDe4vW5JzbOkgvwe; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 112262\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"67dc31ab-1b686\"\r\nage: 2901\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":112262,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2984x2060, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a045c16cfc2af6bf9ef6dec364f6dbd3","sha1":"b3c801f4222a7ef00d81c21aaed45a8b72dc8747","sha256":"6b5867355d1152442b5a1881c450cb239e80c7dbc387d7d49459be17b7ec75b9","sha512":"1009117f8739c3e4ead0e9e510909856dd88a73829c6b5321f58b5f2331d61521d9dc31215beb370130ca5ff00870ed630898670ed20a3069b2626a0ffffd1c9","ssdeep":"3072:JHfYp2EElZ+kcVBQDKm4dqmvni4vK0PiB3I7EHdtuS2B2:J/oElLcVBQknaIK0KB3sqb0B2","tlshash":"aeb301a907a92713f80956f553d71b71c8fb100ca6667d51e33ad0c39bd3b6288dead0","first_seen":"2025-03-21T05:40:09.018019Z","last_seen":"2025-03-29T11:19:57.861235Z","times_seen":8,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":50,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/sounds/click.mp3","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /sounds/click.mp3 HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=2SzmHFFbLOSRCH1c; __ddg10_=1742535566; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=hR8641O7of70Crwg; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:48:20 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 6731\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"67dc31ab-1a4b\"\r\nage: 3066\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6731,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"b497ee5b7f24d5540859a2fe9a2f94a8","sha1":"402f32b8a0c59a6655cee008020948c8b0dc3878","sha256":"627e28dd820dbe208a2d764c086b4eca2c54330b9741073bec9da852aa592962","sha512":"1f0e4fd80c187354ac665cf7e3dc52b8834ef35022c6fe922db3aae0f89f8530c5e97aa2d4860f2351c8fbf05ea2252593d626d12b8f90865b7eca6b6a476ee9","ssdeep":"192:79qf6EhSf0IotHNKWliJRgFn0DsEZM8+h/wgMgl:79qf6ASfCtHtliJ2F6sEZMph/w1gl","tlshash":"cad16d6a6d478951e40c5570d8ce1b4c737824b5afb0b3daa267f79e00e536c12ceb29","first_seen":"2023-04-10T18:19:05Z","last_seen":"2026-06-26T20:23:29.963181Z","times_seen":1246,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/providers/yggdrasil.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:29.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/providers/yggdrasil.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=ddDZI5aCQKaI4K7k; __ddg10_=1742535568; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=LTeCKue9X6hkkwJe; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg10_=1742535569; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 832\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-645\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1605,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b7247827506477c1c4f4053be3ce5631","sha1":"66fe8d7286a78ca2c2c62fa0eed027f9f71003f7","sha256":"6c19eafb79b17a6a27850728dafb52528314322b41c64ebc2b98a29228a77b65","sha512":"b38fc9a1db88ee8751f5fae904ed3585b3164e816da439fb2cdff643ef9faea4be5924559a748e2a5bc16e800e1700b4607cf38bcfbc6a95da6743775ee04c12","ssdeep":"","tlshash":"6a3120f6e39852d0ea069bfd0a1a38b2741738e73d63c68d49669895f15006e80e4cd7","first_seen":"2023-05-21T11:43:23Z","last_seen":"2025-03-29T11:19:57.788147Z","times_seen":10,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/cryptojs-aes-format.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:21.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /cryptojs-aes-format.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=s6a1IZLaTAntwD2B; __ddg10_=1742535560; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=3fYxAn9zpH247jAF; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg10_=1742535561; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-5d6\"\r\nage: 0\r\ncontent-length: 562\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1494,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1544), with no line terminators","md5":"f64648d3d21bcf5cbc350e14d16af9ee","sha1":"aa44c6cd079b54792e2faac3d86471b87a8211b0","sha256":"f66ba51e25c2e5fb5817d41ac71a73593cb380e04c5f023221b5504d43f4d381","sha512":"6782f0bd631349c205bef7e9b68d75470259cbf627f072b244dd3219ad6bb3852a8ddb63b4bda997774fd35cbb301251d93a9d22b3b49683da0865dbe04f4039","ssdeep":"","tlshash":"6f31048738caa4c2cae8e1c50874e15cf67a79447211caf3a7167408e3eef2246325e4","first_seen":"2023-05-21T11:43:23Z","last_seen":"2025-04-06T02:33:43.040103Z","times_seen":142,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/entry.B0BOi0i9.css","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:23.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/entry.B0BOi0i9.css HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=t44G9X48ms9HCwMK; __ddg10_=1742535563; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=bS1w2vMUXyA7UHkU; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg10_=1742535563; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nddg-cache-status: HIT,HIT\r\netag: \"67dc31ab-1080\"\r\nage: 2\r\ncontent-length: 751\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4224,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4225), with no line terminators","md5":"b8a870cb8b264407f5c0d81abd8f6382","sha1":"e7138dbf39857f615184270a24806e425a7b0bcc","sha256":"59b135b33dce37f4d695317fe40277522ac1eff894725ac3d643e9b742af4373","sha512":"86eb3a41a0c8501cf30cfd2f67d27cafe7bcbb90435d74209c67b4b29e878001ca8e56947b7c53f7aa2cd8a62667279abe7e2ba64d047b395fcba28057e2efdb","ssdeep":"48:qBK1KVrwxo7yXr29OKJgbKA7cb2XYKBKJKeKbKaeEaSkeEnS0SSSWS8VSfHeEPee:qxi8yK9RHN4MEBWWXIShv7JRhW4D/qy","tlshash":"6b91ff7fb288f6580127ff02a4a15bddf42b23b0b2522a15f2d5523061b67d1bc29d7c","first_seen":"2025-03-08T20:48:29.195744Z","last_seen":"2025-03-29T11:19:57.794499Z","times_seen":10,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gwfg84x.space/games/casino/best","fqdn":"api.gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Mar 2025 15:13:14 GMT","end":"Mon, 16 Jun 2025 15:13:13 GMT"},"fingerprint":{"sha1":"BF:F6:26:CD:19:DC:7A:9C:43:5D:6C:E2:14:15:6C:4A:04:14:44:99","sha256":"BA:E2:88:D9:EB:25:85:70:88:7D:30:E4:9C:EB:DE:65:CB:CC:3E:F0:3E:AE:33:E2:5D:87:13:51:8A:CA:D4:E9"}}},"request":{"raw":"OPTIONS /games/casino/best HTTP/1.1\r\nHost: api.gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwfg84x.space/\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=VOUgBzRh53sPrfXg; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg1_=EMGyqQzMQ8uRFGuY7pr8; Domain=.gwfg84x.space; HttpOnly; Path=/; Expires=Sat, 21-Mar-2026 05:39:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Fri, 21 Mar 2025 05:39:26 GMT\r\naccess-control-allow-origin: https://gwfg84x.space\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: f7c573be-e915-4daf-b3fe-de656e5fbf4b\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gwfg84x.space/mirror","fqdn":"api.gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Mar 2025 15:13:14 GMT","end":"Mon, 16 Jun 2025 15:13:13 GMT"},"fingerprint":{"sha1":"BF:F6:26:CD:19:DC:7A:9C:43:5D:6C:E2:14:15:6C:4A:04:14:44:99","sha256":"BA:E2:88:D9:EB:25:85:70:88:7D:30:E4:9C:EB:DE:65:CB:CC:3E:F0:3E:AE:33:E2:5D:87:13:51:8A:CA:D4:E9"}}},"request":{"raw":"GET /mirror HTTP/1.1\r\nHost: api.gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=nDjwYqM3ZVeyFaeo; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg1_=Y9wWkI2Fw3piRTtHsEkg; Domain=.gwfg84x.space; HttpOnly; Path=/; Expires=Sat, 21-Mar-2026 05:39:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 21 Mar 2025 05:39:25 GMT\r\naccess-control-allow-origin: https://gwfg84x.space\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 2712b6f4-9376-4231-8a42-afb1909e886b\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":456,"size_decoded":0,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with very long lines (524), with no line terminators","md5":"79520c2df09e98f4b07de192af979dbe","sha1":"5bb49293252c4bd200796fb7b68fed06e0e37beb","sha256":"697a883e4ddc6c7f2098e0ccb03a2277f9a71a321bca1631eefe2712e6712158","sha512":"81984c2e6d0f64edaff6063252baf7cf4b107cdb281264906ad0e90c30987b6019be9b5ca6298c7020c686d17873d140caccc7c83c0e603f1c9f54cb445e5164","ssdeep":"","tlshash":"f0f09ad2eb06cd0840c8989f6b283c29618e518fd8954e2ec8c48f4003c00bebf3b08d","first_seen":"2025-03-21T05:40:08.98492Z","last_seen":"2025-03-21T05:40:08.98492Z","times_seen":1,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BxyKuxdW.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/BxyKuxdW.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DmT_aqZN.js\r\nCookie: __ddg8_=OUfJMXjsch1vBlTq; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=GkG4sbtAFyGD4WDL; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-598\"\r\nage: 2905\r\ncontent-length: 795\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1432,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1474), with no line terminators","md5":"7ed2318e99ae53da6fedced9a114a0ba","sha1":"8d9eec57ce143fa0989eb37bac78a9b56c7178ba","sha256":"160cb3f2828584feb46b9a14ea0d937772f733dcfc71113044fbae60ef1dc26a","sha512":"10a76fa0eff091f3aa808a5b0da168093fb2b36b4f4de653a1aec48b723144ff20eee5a4578df1ca96ca52037ccf1a8a2d3f64ae32e30ed6a590a3fc4968bafd","ssdeep":"","tlshash":"f531540c3804a077138607e194df0c19e00cb851ba6bc4d4e6ccbc3b3e2a5a48d9dfad","first_seen":"2025-03-21T05:40:09.019894Z","last_seen":"2025-03-21T05:40:09.019894Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gwfg84x.space/games/casino/best","fqdn":"api.gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Mar 2025 15:13:14 GMT","end":"Mon, 16 Jun 2025 15:13:13 GMT"},"fingerprint":{"sha1":"BF:F6:26:CD:19:DC:7A:9C:43:5D:6C:E2:14:15:6C:4A:04:14:44:99","sha256":"BA:E2:88:D9:EB:25:85:70:88:7D:30:E4:9C:EB:DE:65:CB:CC:3E:F0:3E:AE:33:E2:5D:87:13:51:8A:CA:D4:E9"}}},"request":{"raw":"GET /games/casino/best HTTP/1.1\r\nHost: api.gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=o2cRVO8VDxXxQUYd; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg1_=QPzo6ayyUWLKbdkn9GCM; Domain=.gwfg84x.space; HttpOnly; Path=/; Expires=Sat, 21-Mar-2026 05:39:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 21 Mar 2025 05:39:26 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 88\r\naccess-control-allow-origin: https://gwfg84x.space\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: be3e86a7-2bfa-4e8a-9d5d-8d743016d080\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10099,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c96670bfba326199a872f62e0701fbb1","sha1":"493a1471f30feaebf1a20368dd4a322e4c44ade4","sha256":"e77175bcb65936e1c4dcf875276b052ffa11efa248377bd65912e6d0ee0e0550","sha512":"349bc522ee4e06f1ea649203bd0aae2e91d016efd9e72c90cd9981ceaeee014b82e49d6df60c9faab9c5e2fa1442769d2b7e187dd91c4718260aa759cda7267c","ssdeep":"96:fXyzaC1TPC91q+Hy31D2UJx/7KIYfC8YEE6TEE/VnMfe37ZQuijUGdTmr3DZ1hR5:Ql1rAftJ7NQVN7D5Qn","tlshash":"732201923a4838a1cbb662d80f6f7f99584816676128bc63f8ddbc7480f55b713258f2","first_seen":"2025-03-21T05:40:09.02047Z","last_seen":"2025-03-21T05:40:09.02047Z","times_seen":1,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/roboto-medium.eJsCudPf.woff","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/roboto-medium.eJsCudPf.woff HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=ertejrzxvbmukyDJ; __ddg10_=1742535567; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=RNJZ6cIRxfBAqrvS; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:27 GMT\n__ddg10_=1742535567; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: font/woff\r\ncontent-length: 140892\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\netag: \"67dc31ab-2265c\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":140892,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 140892, version 1.0","md5":"cf745939a2f0d88aa9e9e111d03f0c44","sha1":"e3e7869aa64560578586af40a475c0dfa55b8b77","sha256":"7090bfaf91390512f722b859fae9585ec5f662e31fbc00a0a281859f92c54c4e","sha512":"ff2483368f008496135c596a8b2863a9c5953a52041c85e03d3c01e6d4cb16ee74efb5411da034b9606b1a23e2d77ae472c9bfdc0b5358440d96c2a9a22232cf","ssdeep":"3072:tyGRtev6xczb/azWnXkjS3k0wzb9QZyKqtU0EzCq5YLA6+Txvw545N:FGiGzb/LnUwwzZUWN+B","tlshash":"4bd312b5d6a53397eef8fdca71a80f62279dbc48e8ec8f0b251c48543507ca9c276520","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-04-25T06:32:47.456343Z","times_seen":66,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/providers/triplecherry.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:29.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/providers/triplecherry.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=SNY2ngnQoiEB1X8F; __ddg10_=1742535568; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1BNapOj8qMGC9OlZ; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg10_=1742535569; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29022\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-9cc2\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40130,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d7b72497a709d371c0b42510ecfac382","sha1":"70f19990d8e54831e33edaceacc0d521d3e4d366","sha256":"cc32bf72860f4cb7444d1cadff17a1fd31b1a09952c0a716bbff9d528a692227","sha512":"5eb32a62d1ead4b37c466f43f75d300e9083f532c25b9d8e2a514205901c491debbd94997d71553f7596734678dde7fb78d1475411d66d45de856c274d6b6a43","ssdeep":"768:hIx0XMOOxWinoJiBWSof+k4pTOLyE3U+tIXf63mpkg:hIx08JBnoJxDwTapU+SSOkg","tlshash":"6203e1b9de215ccdaa40e100927baf905e7a0ecb7ce497c8844d610fb5c9a9cca4edd5","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.940066Z","times_seen":76,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/providers/blueprint.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:29.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/providers/blueprint.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=QTqm4Pigx9kMgmmX; __ddg10_=1742535568; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=gc9XZzQjM348o1ul; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg10_=1742535569; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2623\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-1ac1\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6849,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a80760799eaf54b6449b07663affe14d","sha1":"a7334b00b5a87ff713494e370aa33683d6d4d9f1","sha256":"f5560bd1f379650c3ecd21ac0cb574966c8cc6cf5f39a6d59dc25b5688df2f9c","sha512":"0c459fe7c965e5b16b77f72006ba805c6e7dd9c09905fab8e558be718536400ecb70ea7665dfe3b5340e9212e2b471fcfdf573b9ed9be97ba55778874e5a958c","ssdeep":"192:+yxKcj1V6e6jzn57EATf4k0Bj65n1vYXxu:+uj1V6vpAAkk0BRxu","tlshash":"84e162e9a7d8a3e0b509f7e5cb2e9871363734f93972d90d43fe6a19922102e45c8cc5","first_seen":"2023-05-21T11:43:23Z","last_seen":"2025-03-29T11:19:57.872312Z","times_seen":12,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim2.ru/v/ui-resources.php?location=default\u0026mode=desktop\u0026lang=ru\u002644689108\u0026callback=getWebimUIResourcesCallback","fqdn":"gx.webim2.ru","domain":"webim2.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:29.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"webim2.ru","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Dec 2024 10:41:08 GMT","end":"Fri, 28 Mar 2025 10:41:07 GMT"},"fingerprint":{"sha1":"39:22:2C:F3:51:C3:18:D9:E0:56:1C:F4:75:2C:8C:7D:D7:C6:50:3F","sha256":"3A:AC:C1:DD:28:20:B3:C8:03:99:4D:E0:23:B0:5B:D4:F5:06:10:9E:06:A7:B3:20:A3:45:F2:29:D5:3E:95:63"}}},"request":{"raw":"GET /v/ui-resources.php?location=default\u0026mode=desktop\u0026lang=ru\u002644689108\u0026callback=getWebimUIResourcesCallback HTTP/1.1\r\nHost: gx.webim2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 21 Mar 2025 05:39:29 GMT\r\nContent-Type: application/x-javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Wed, 15 Jan 2025 07:23:25 GMT\r\nX-Cache: HIT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":619334,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"exported SGML document, ASCII text, with very long lines (65536), with no line terminators","md5":"0999db46af3726d3ab44ba1335a93688","sha1":"1436b3828143bab8ff7d38856f06b1c9d1aaa654","sha256":"e0eaf15f6b1ad1e90321c10347bd0832c88f4f4985700654dcd645d51109ac2e","sha512":"b1e9e29885e83da69d7e42fcd4db621ab3a822660013256a83597a8185d5cd81797d374bedde392a88455a57ddb675359fbd6512e73b1dc760fa9dc9b5e1ec93","ssdeep":"1536:QQHOcWqV61g4iy5VkMNMKQRgME234Cs57h7Fbsas1sUs+s1seT5Ggr6uN+Y3L54g:K3bvyawQJ3gy5f9uZS44WkHD","tlshash":"3ad4270feed21469be6bee6361f70655713d34a25590079cb22f34de2f81ce29322b64","first_seen":"2025-01-05T05:22:17.123372Z","last_seen":"2025-03-29T11:19:57.877228Z","times_seen":9,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.com/games/PragmaticPlay/0b6e2e38d76c4a40bf6ab7235f92c5e7.png","fqdn":"gis-static.com","domain":"gis-static.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gis-static.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Feb 2025 03:37:30 GMT","end":"Thu, 08 May 2025 04:33:43 GMT"},"fingerprint":{"sha1":"AD:EB:6C:C5:68:61:46:F1:53:7F:9C:57:BD:CB:2D:20:D6:AC:BA:CD","sha256":"23:C4:6F:49:62:F5:EF:84:48:3B:F9:62:1D:23:65:D8:7E:6D:1F:35:B3:FA:EA:A1:83:FA:74:AA:68:A0:20:E0"}}},"request":{"raw":"GET /games/PragmaticPlay/0b6e2e38d76c4a40bf6ab7235f92c5e7.png HTTP/1.1\r\nHost: gis-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 21309\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"a0243053186e9dc6b7ceb3f5ae10058b\"\r\nlast-modified: Mon, 06 Jan 2025 19:17:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 1818348ADCBBD723\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 7133\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=32S52VPQaqXKwQvtSoaCy%2FpywjTGBIHwGmPPLugv9Kw5F2BMT32Ip82eBrb8QSe7va5WmhxfPtDCdmDrElJ1bWAOqsmDdToKEu4B9f0OAjUZOEGqfBB7mVEMVwjSCRf6sA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 923b1bdebeba56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=864\u0026min_rtt=444\u0026rtt_var=859\u0026sent=54\u0026recv=27\u0026lost=0\u0026retrans=1\u0026sent_bytes=56044\u0026recv_bytes=2902\u0026delivery_rate=7729537\u0026cwnd=256\u0026unsent_bytes=0\u0026cid=874feb8d33a12a41\u0026ts=97\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21309,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"a0243053186e9dc6b7ceb3f5ae10058b","sha1":"b71e035aae00b689245f0966c3d9a3a7b52892d7","sha256":"458e62a07eded322f3a1f254fdfba3f49e9dba0f3148f47da7844697c11801ac","sha512":"54fa56177a5a8f0503c6908bb91fef479aea4611ff61b6f614e6b941eca458b49b5c0071b5f82ae6ef4f55be4b15554ebb9a36fc17026b4504d4824c017e6678","ssdeep":"384:wWvwb3jEKZdinOjA4JKcRA1lNSpNEalUMfTHrt/buMkgIeGfe+:wWYbTEm0Ok4J/G1lN6EayEHrt/C+3L+","tlshash":"84a2d03a9ef5c6391a19b6a0308131892f0986b3f7c9752bda296543ee3d91784e6488","first_seen":"2025-03-21T05:40:09.025565Z","last_seen":"2026-03-01T21:47:53.218484Z","times_seen":41,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwfg84x.space/games/casino/currentGames","fqdn":"api.gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Mar 2025 15:13:14 GMT","end":"Mon, 16 Jun 2025 15:13:13 GMT"},"fingerprint":{"sha1":"BF:F6:26:CD:19:DC:7A:9C:43:5D:6C:E2:14:15:6C:4A:04:14:44:99","sha256":"BA:E2:88:D9:EB:25:85:70:88:7D:30:E4:9C:EB:DE:65:CB:CC:3E:F0:3E:AE:33:E2:5D:87:13:51:8A:CA:D4:E9"}}},"request":{"raw":"GET /games/casino/currentGames HTTP/1.1\r\nHost: api.gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=x3rDHG7Wigje1WTo; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg1_=NUyW2q4TxIywhXqFfAJl; Domain=.gwfg84x.space; HttpOnly; Path=/; Expires=Sat, 21-Mar-2026 05:39:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 21 Mar 2025 05:39:26 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 83\r\naccess-control-allow-origin: https://gwfg84x.space\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 830fe558-2092-456a-bae3-71934645272a\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1549,"size_decoded":0,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with very long lines (1736), with no line terminators","md5":"c013d405a2879ab56766abe626ac5af7","sha1":"1d04182ab2a640f7d2c62e9151c2b7a4ac5747a2","sha256":"09129753c0d3b747cfef8141f6b2f05a3a8d4096bdf7368d322296bb9dd5bb30","sha512":"557178f8b08bcb067336286898ef36848610583bf1aba409163d2d11f7fbdb3215e120df319fdd4d9144f12356a955f587d89a21be9eb409d78c69f34e61a305","ssdeep":"","tlshash":"e531ad8dfc2dcc50d09459192f3faeb66048651a12ce5284dafbae2942a49f6d1a4cb8","first_seen":"2025-03-21T05:40:09.026498Z","last_seen":"2025-03-21T05:40:09.026498Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gwfg84x.space/games/casino/highRollers","fqdn":"api.gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:26.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Mar 2025 15:13:14 GMT","end":"Mon, 16 Jun 2025 15:13:13 GMT"},"fingerprint":{"sha1":"BF:F6:26:CD:19:DC:7A:9C:43:5D:6C:E2:14:15:6C:4A:04:14:44:99","sha256":"BA:E2:88:D9:EB:25:85:70:88:7D:30:E4:9C:EB:DE:65:CB:CC:3E:F0:3E:AE:33:E2:5D:87:13:51:8A:CA:D4:E9"}}},"request":{"raw":"OPTIONS /games/casino/highRollers HTTP/1.1\r\nHost: api.gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwfg84x.space/\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=78tDJimX2LkATC2d; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg1_=2ayHQLlZ4y8XT03z8hSR; Domain=.gwfg84x.space; HttpOnly; Path=/; Expires=Sat, 21-Mar-2026 05:39:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Fri, 21 Mar 2025 05:39:26 GMT\r\naccess-control-allow-origin: https://gwfg84x.space\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: eb2cfa73-f7bf-4de5-ab45-b14ad6b2277e\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.fra1.digitaloceanspaces.com/casino/games/01916e73a55c674f0b8777dde1fb102e.png/ckirZcVvwu149okjHUbhn5dKRQxfAv3r2lFKxsH2.png","fqdn":"getxavatars1.fra1.digitaloceanspaces.com","domain":"getxavatars1.fra1.digitaloceanspaces.com","tld":"fra1.digitaloceanspaces.com"},"ip":{"addr":"5.101.109.44","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fra1.digitaloceanspaces.com","organization":"DigitalOcean, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sat, 13 Apr 2024 00:00:00 GMT","end":"Tue, 29 Apr 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3B:96:40:D5:27:23:13:D0:01:19:6F:20:E8:9A:88:B8:93:61:8F:08","sha256":"BB:BD:48:FD:42:23:8E:58:BD:11:C9:CD:7C:CC:5B:A4:69:1E:BC:AB:A9:5D:16:A4:95:F2:DE:20:7D:F8:63:A4"}}},"request":{"raw":"GET /casino/games/01916e73a55c674f0b8777dde1fb102e.png/ckirZcVvwu149okjHUbhn5dKRQxfAv3r2lFKxsH2.png HTTP/1.1\r\nHost: getxavatars1.fra1.digitaloceanspaces.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 462515\r\naccept-ranges: bytes\r\nlast-modified: Fri, 31 Jan 2025 08:38:38 GMT\r\nx-rgw-object-type: Normal\r\netag: \"9cf315bcb928defe08150287b604caf0\"\r\nx-amz-request-id: tx00000af48192c0fbb8bb3-0067dcfb8f-13d169952-fra1b\r\ncontent-type: image/png\r\ndate: Fri, 21 Mar 2025 05:39:27 GMT\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":462515,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGBA, non-interlaced","md5":"9cf315bcb928defe08150287b604caf0","sha1":"c51742d98ea2a05a8b9c634021d5650e560877fc","sha256":"4cdd3151236420f31ca996641d610792403d7a5a1806b485a667bdaafe581998","sha512":"9abcb8236e87b046159b7a614be94bd4a1c8bfc4f39f4c26c41eaa9892c0bc2162a73528753edcf84c9bf8264b264f1481f07c62f9cc96d2fcff80e939e6cb9f","ssdeep":"12288:rKLvq/4MM4/qRSBlPeX9FRXIpg90btSdFgJczWQVPry:rMqwMMAqSBRCqtcccjBry","tlshash":"68a4235930bf813aa5f29e60a3e635f312a6091eff5346c42c7ecc647b6d1a14c846b3","first_seen":"2025-03-21T05:40:09.027316Z","last_seen":"2026-03-01T21:47:53.268796Z","times_seen":40,"resource_available":false,"data":null}},"time_used":1917,"timings":{"blocked":867,"dns":1,"connect":41,"send":0,"wait":180,"receive":32,"ssl":787},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/providers/smartsoft.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:29.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/providers/smartsoft.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=SNY2ngnQoiEB1X8F; __ddg10_=1742535568; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=OJwc5BTtesqCDp3F; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg10_=1742535569; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 186539\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-3fc64\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":261220,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2c9ec21cc781477f34fdda4b159a25ba","sha1":"3b8f7ef6aa40d521ec68da5e2dd6dff9b1ab53a9","sha256":"02d076106fcedce7a887b221b473da74821168ce712964113a1c915f716a626e","sha512":"3355c37011830420dbc9cd5acc363152881fbe3ccf2cf9d1990fc58b1186c3d7c9737960cb71b47d7b57c84cfc0e4cbf98d74e68a6184d299dafa1b37a765fab","ssdeep":"6144:qDqaJSrBXu8qTu9j3v0oUFdupVLm8KjEPpR0ApM/5:qea4ST0AVdH8KjEPj7p8","tlshash":"b44412b79aacfef1e1a583d8c525c0343e7235cba3e4ce8416b07a5e565a40bd817e84","first_seen":"2023-05-21T11:43:23Z","last_seen":"2025-03-29T11:19:57.786233Z","times_seen":17,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/analytics/events?event_name=slider_banner_view\u0026pgi=GTM-KN757LMM","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:28.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"POST /analytics/events?event_name=slider_banner_view\u0026pgi=GTM-KN757LMM HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 531\r\nOrigin: https://gwfg84x.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=RNJZ6cIRxfBAqrvS; __ddg10_=1742535567; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":531,"data":"{\"client_event_time\":\"2025-03-21T05:39:27.704\",\"client_event_time_utc\":\"2025-03-21T05:39:27.704\",\"client_time_zone\":\"UTC\",\"event_properties\":[{\"page_url\":\"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\",\"referrer\":\"https://gwfg84x.space/\",\"page_path\":\"/\",\"query_string\":\"?stag=819_67d75bad718f91aca41894cd\",\"domain\":\"gwfg84x.space\",\"gtm_container_version\":\"11\",\"geo\":\"\",\"banner_name\":\"HappyMonday\",\"position_index\":\"1\",\"section_name\":\"main_page\"}],\"event_type\":\"slider_banner_view\",\"uuid\":\"\",\"session_id\":\"\",\"user_id\":\"\"}"}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=p0ziCQFkJSfsdgCW; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:28 GMT\n__ddg10_=1742535568; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:28 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:28 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendor.370d3c70.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.98","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:24.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 31 Oct 2024 00:00:00 GMT","end":"Fri, 28 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:4F:FB:78:56:DC:20:7E:66:CC:9B:57:7F:92:C2:FA:50:69:C1:5B","sha256":"09:35:37:9C:E9:C9:26:27:7B:F2:E2:42:CA:82:EF:F1:2C:B2:B4:97:04:61:0B:FD:77:9A:15:4D:57:F4:76:D6"}}},"request":{"raw":"GET /vendor.370d3c70.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 208547\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Wed, 19 Mar 2025 14:59:56 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: iOXCnAX46JIhVkJTS.4OyCLFctNg6QlE\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 21 Mar 2025 04:26:01 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"1cf73ba4c2dc14b585f70801c595cdec\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nage: 4404\r\nx-amz-cf-id: 8PkgFjoGERx0VuyuFx0yOiWyx0t4qw1Bd3-yPmJCs5K3pCOUFoqJ8A==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":672455,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfDHPoqAAAAAJ5uqpAtCwZEtyusk-ogkGIqCj1t\u0026co=aHR0cHM6Ly9nd2ZnODR4LnNwYWNlOjQ0Mw..\u0026hl=en\u0026v=J79K9xgfxwT6Syzx-UyWdD89\u0026size=invisible\u0026cb=g1pafpbu6va3","fqdn":"recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Mar 2025 08:36:15 GMT","end":"Mon, 02 Jun 2025 08:36:14 GMT"},"fingerprint":{"sha1":"66:66:17:8A:0A:82:CB:9F:B3:66:1F:CE:88:E4:BD:CC:BE:E5:F3:8E","sha256":"06:74:30:59:11:23:B6:46:46:B5:D5:82:0F:0E:70:B1:BE:77:32:A7:85:C4:0D:C8:6B:83:B5:4D:9D:4C:D3:B9"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LfDHPoqAAAAAJ5uqpAtCwZEtyusk-ogkGIqCj1t\u0026co=aHR0cHM6Ly9nd2ZnODR4LnNwYWNlOjQ0Mw..\u0026hl=en\u0026v=J79K9xgfxwT6Syzx-UyWdD89\u0026size=invisible\u0026cb=g1pafpbu6va3 HTTP/1.1\r\nHost: recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 21 Mar 2025 05:39:25 GMT\r\ncontent-security-policy: script-src 'nonce-2_AIXIXiMFr9cHc1fB0fEg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72505,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (56646)","md5":"3449d413714edcff4bcc7c9816eb7c5c","sha1":"6c8c8e6300d756f5b4671932c5e93c875a1e8c1c","sha256":"511e865a97e857df7e7a9595921126fa4bf5a5401758e5ce6660411fe59575af","sha512":"5ca720cd723bcc0686d0836571d572d79dd8d607dce0d357e7ead97f27ca81b5c4721c992ad572b7b68542acc404d1e735b78c6dc11cd9f17cff3f8d6a77be38","ssdeep":"1536:eH5vifiPiplvdrfbZV0uLfKjcNdqdeooy9m:eEq8l5VVKjCkdeS4","tlshash":"e563cf2185136469dfab4d809bc77ab9723f510a3a9209dd17ff04d69daac53b3283cc","first_seen":"2025-03-21T05:40:09.029113Z","last_seen":"2025-03-21T05:40:09.029113Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BHrglONr.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/BHrglONr.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DmT_aqZN.js\r\nCookie: __ddg8_=OUfJMXjsch1vBlTq; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=iEEZDTKH0QZT6NLH; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"67dc31ab-8e6b\"\r\nage: 2905\r\ncontent-length: 9800\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36459,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (26664)","md5":"ded757171f873ae33ed42df08d4e4eee","sha1":"169eb8207bf0f1dcb59392333efbf5f91658fdfb","sha256":"f1f0bc1f7aa3f90807f5fe4d9be556ed5b0c05a4da8552407b8eff0cb1a216cc","sha512":"860eb8329d86c207f120f74bd9cdc9750f906dd37a57429085f4283fd93635422c1685b91e3ca996fa3a5a9a3586dcde7275d145c528a45dbba3dd90afeeea36","ssdeep":"768:7qTY+itM+orCjJJy1ee3JP6r1KCcKlyUW7YC6u64tH/9:2biJou3CP6YhcW","tlshash":"6cf21a487be0bc34c29a31d7353e09057b726641586f6600e009c6b97fa968a717ef7e","first_seen":"2025-03-21T05:40:09.029955Z","last_seen":"2025-03-21T05:40:09.029955Z","times_seen":1,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/home/100hp-dice.webp","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/home/100hp-dice.webp HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=jRU7wOYNjvAPtHvS; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=hixM8UQWJnhyJBkc; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg10_=1742535566; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 85076\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"67dc31ab-14c54\"\r\nage: 2901\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85076,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2984x2060, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0b7ec80aa74cb3c3f38466d6f8eb34d5","sha1":"c64543e50d6b2faaab5d3843e161a6952bcdbe30","sha256":"b468ca4d4dec4b54a821faee2f54e1e6098ae70b09bdbdfc20650e6ddc2daa93","sha512":"cc0d2b19fc454816fca73542c3976206cfd97f0508ee7ac061bf96450116fd3c01436c9c103c36f5c2e20d96943fb8b1483f530f234851e18e654c9fcb1b9b15","ssdeep":"1536:c5merc9h+469NZoqKyVueGY34ASz178sN2Xo1AzTV0UvpFwRCS6A4LU:0rn469NZ241H3uz1QsA41oiU7oCS6A44","tlshash":"1983029b4d1cb7b3e6304f6eada7709a4483435b57182a85892cbb9127b11b3c3edd80","first_seen":"2025-03-21T05:40:09.030903Z","last_seen":"2025-03-29T11:19:57.832522Z","times_seen":8,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/providers/igrosoft.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:28.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/providers/igrosoft.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=ddDZI5aCQKaI4K7k; __ddg10_=1742535568; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=5zTqkgjBzJZ1zh5j; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:28 GMT\n__ddg10_=1742535568; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:28 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 690\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-58b\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1419,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"570379c88328e4a1c936f24f599c14a7","sha1":"11326d7a1a508390449855d77e4f277b7fffe734","sha256":"418c99f8cd497ca02db2e28672b1ff14e5c3a3740256be17e05610f77714f391","sha512":"de0e8e25202dc6b74c02f14bcb7f1a762415dc37274968ceb845bc08183f8586bad26a748b8fa7c10f5cb225084b72e1038e6dee6a543f71781cd32a4e253547","ssdeep":"","tlshash":"dc3152a5a2d0d77cd004879c6836c939b9c77ab93febd50182c2520281f40ec8d778e3","first_seen":"2023-05-21T11:43:23Z","last_seen":"2025-03-29T11:19:57.915033Z","times_seen":10,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/Button.DTPpyI1-.css","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:31.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/Button.DTPpyI1-.css HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=2BFtV41K05TOVH6y; __ddg10_=1742535569; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=9YBWmZrvsXD1WU4h; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg10_=1742535571; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 174\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-138\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":312,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (313), with no line terminators","md5":"2dbd2b2096b18e9f2cc21667ee6e4736","sha1":"bd1238d755714af2c5ed3628d8a04751a4fbb950","sha256":"942bfe1330015948e649609feb4bcd8d416aeff89e0f3de2d16f814f332a81b8","sha512":"2f7beea0d38fce627d0689b995f4b1d3dcebb4c955ebaf86b6b8e26d451835d38f4d51f0d68c940368b1e4befe0ad3a8360323bec3a81109ac3e075fb6ede7d1","ssdeep":"","tlshash":"3ce0cdb5ebc8334a3737d084b485034156635b779031364d69d173f599db452332f5a3","first_seen":"2025-03-21T05:40:09.032555Z","last_seen":"2025-03-29T11:19:57.76754Z","times_seen":8,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/home/bgaming-drops-frenzy.webp","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/home/bgaming-drops-frenzy.webp HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=p6jbeaWUrL6qwblm; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ABwG5d5aUnT4ldck; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:48:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 123764\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"67dc31ab-1e374\"\r\nage: 3066\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":123764,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1720x1301, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1939491d8cf6054736c0ee7bbe2e6ec0","sha1":"9bdfe9caff93fa1693799982219b9c1fbef4634e","sha256":"9c75da2c25c8a3a47830cb8d22f32223d4acf4ec79b8e33420dca78a933299b3","sha512":"da0529798eaff647297f55d70923707427f1491470d9da0c6beb5f5398f4af4ab05fb700de76adfe084a5a4a89a76486452a411632eb0dec36fc42fe0be5ebaa","ssdeep":"3072:VGVPwJQgWgNhVtI+xnm8HvxdS/ElyOtfqu4t/mqGN31:VIPwmgJtL/Hpk/QvtSuGmqGN31","tlshash":"11c31202db917d78138f66c353e043b62d9d1188c939852826f29aeecf77780e6c2ca5","first_seen":"2025-03-21T05:40:09.033323Z","last_seen":"2025-03-29T11:19:57.808799Z","times_seen":8,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/J79K9xgfxwT6Syzx-UyWdD89/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://recaptcha.net/recaptcha/api2/webworker.js?hl=en\u0026v=J79K9xgfxwT6Syzx-UyWdD89","date":"2025-03-21T05:39:26.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Mar 2025 08:37:01 GMT","end":"Mon, 02 Jun 2025 08:37:00 GMT"},"fingerprint":{"sha1":"63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B","sha256":"E5:08:EF:15:62:0C:70:BF:82:8A:23:7E:52:A0:03:CC:BF:47:9D:AB:89:97:C0:F6:BD:0C:85:14:3C:09:7F:AA"}}},"request":{"raw":"GET /recaptcha/releases/J79K9xgfxwT6Syzx-UyWdD89/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recaptcha.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha\"\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 220830\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 21 Mar 2025 04:28:18 GMT\r\nexpires: Sat, 21 Mar 2026 04:28:18 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 10 Mar 2025 16:03:14 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 4268\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":558604,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BWl6bLNT.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/BWl6bLNT.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=hR8641O7of70Crwg; __ddg10_=1742535566; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=DEbn3zoSpAhWSyjg; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:27 GMT\n__ddg10_=1742535567; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nddg-cache-status: HIT,MISS\r\netag: \"67dc31ab-c20\"\r\nage: 6\r\ncontent-length: 1394\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3104,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3167), with no line terminators","md5":"50710fcaa8666ee50acc8dbb46441292","sha1":"5d99b94d026d6a893f5b15f7a89f5d4667cbbebc","sha256":"57e3acc3a268a2e59d8830bd3e450dd725cfeb2e210e5d011046627158be3e79","sha512":"dbc152e0bbf23b5a92e7989450f2cd58e7b40626e629231c6a4838b6f8bb7e04e936e505a90480af349f1a9653b2e08775029ad5db92228fc54dbac44248052b","ssdeep":"","tlshash":"8e517964b4c1c6a54f86cd1bedf2ee290c1c0652db1385b9a7c91821b6c719ff99b307","first_seen":"2025-03-21T05:40:09.034434Z","last_seen":"2025-03-21T05:40:09.034434Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/BetPicker.VlbSoqnE.css","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:31.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/BetPicker.VlbSoqnE.css HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=2BFtV41K05TOVH6y; __ddg10_=1742535569; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=rfq3bEbMZTROaHzK; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg10_=1742535571; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\ncontent-length: 638\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-943\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2371,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2372), with no line terminators","md5":"ac00098b9d320e48da24dfdf62be0042","sha1":"ed84981c6f9514250cc24386a79c29a02bcc24df","sha256":"8f77c44cae844087088f513a002bab0e6d4f5d08206d1b9ac719e17083f764ca","sha512":"e024c0706942f0bf021114ddcd997f89c3dd1616f26a64f3bfd263989db024f414870566fba12d25807b53d4242d75450affa492a63c16a27ffaabb5566ec9fa","ssdeep":"","tlshash":"ac41ce26b30ca62da13bf1c35eb5b058239db30bc65b43948fb21831cfe3526a2b0655","first_seen":"2025-03-21T05:40:09.035405Z","last_seen":"2025-03-29T11:19:57.897347Z","times_seen":8,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/js/pwa-load-event.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:23.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /js/pwa-load-event.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=t44G9X48ms9HCwMK; __ddg10_=1742535563; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=uqxd9gh95RzFb0Nd; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg10_=1742535563; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nddg-cache-status: HIT,HIT\r\netag: \"67dc31ab-177\"\r\nage: 2\r\ncontent-length: 164\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":375,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (387), with no line terminators","md5":"e4e7f99d26e91849e128a8ad5701f1b5","sha1":"d19e7cc0931b010516bb00bb9ff09a9f8c7c5a6c","sha256":"b7080b849d2a0f65b812996de4556aaf8adfe9b6f776ce44b1affd3c86863e23","sha512":"701947dea99b21fea7bd04d885d97a661cad6be5ce235316ec1026493138e1d7b4d3df99bbc48f194876a5c795446d26027b974388212ec0624f6749494f3cc9","ssdeep":"","tlshash":"b9e0222d639c59b80dc08bb79baabb4620a331a7707489908a472d46f0d144780a2fd3","first_seen":"2025-03-21T05:40:08.987656Z","last_seen":"2025-03-29T11:19:57.768057Z","times_seen":9,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/home/home-cases.webp","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:25.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/home/home-cases.webp HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=p6jbeaWUrL6qwblm; __ddg10_=1742535565; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=iVyLbSE0ymbJzbi2; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg10_=1742535565; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:25 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:48:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 393942\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"67dc31ab-602d6\"\r\nage: 3067\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":393942,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"96944d839f8997e1b73fe36a5a1040d8","sha1":"b81fb7c8cfe3a179ac63fbb77c5a00d574503983","sha256":"f5d733ce82ca78caa7647c9145e6f1112e5da256b74621abb2e6bb17d68a4042","sha512":"0008dcef503410561c1421857b34e023e0cddcf5e3b9dc6b81b88d6216df0677add9dc38d7b0277ef70272980c3c91f0e4b6fd9dd6feb91d125d2c82d7d26ed3","ssdeep":"6144:Egh/mDxHzuCDQjjzBT81XgJsI6o1MPJC4juR1B7P9FghtqnVyy+Re4NKIsqbsBp5:N/mvDQjPaTK0NypitqnVyqwFSpqymYH","tlshash":"1b8423d33180bd1668a4a31f9c53a351e44c27b0d8bbdf23789185622eeb47f542d6ee","first_seen":"2023-10-14T12:47:41Z","last_seen":"2025-03-29T11:19:57.821241Z","times_seen":18,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":45,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/bonusWagering.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:27.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/bonusWagering.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=hR8641O7of70Crwg; __ddg10_=1742535566; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535565.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ertejrzxvbmukyDJ; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:27 GMT\n__ddg10_=1742535567; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 04:51:06 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"67dc31ab-652\"\r\nage: 2901\r\ncontent-length: 657\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1618,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"511da29e98ba20b9e83da3ee7172fc77","sha1":"51ca499400f3c5c00ed4c83bc273559a68fe96c9","sha256":"d628fd32be1f92ca72567471aafe8d599bae7b0d0957b3bd15af943063871ddd","sha512":"6ef8bb66925738d676f91e4442fe78b0fc3406e9356266759155f70d76d52f6547b2d00263b1b691f4240411bb1d96502a4e3edc54e3aaf3a0ec56f43fdc61e3","ssdeep":"","tlshash":"8d31bef6e2c1aae19e4373878ca06034f747606a37951e905370c3def77946d468a8e5","first_seen":"2025-03-21T05:40:09.03727Z","last_seen":"2025-03-29T11:19:57.831009Z","times_seen":8,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/providers/no_limit_city.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:29.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/providers/no_limit_city.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=ddDZI5aCQKaI4K7k; __ddg10_=1742535568; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=mdnhjFHyFlAtXYOW; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:28 GMT\n__ddg10_=1742535568; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:28 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1669\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-bf0\"\r\nage: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3056,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5cb126824651ba8c40ed6fa4fcb79e1a","sha1":"82e2e955fd4e353bdee15f395cead6d11b85ebc7","sha256":"db754e4e5988cdd17c84f79938fb536ca94def436772108f7c9efa6fb745cac3","sha512":"e352dabb51a2117b673e1d79ec7e66ceb324b5cd860a04fefc2b9860ba36c0d5d3f012adf297d260dd8a7b8f78238c5cb1b7f796e005fe9aaea7f63609ead1aa","ssdeep":"","tlshash":"a2514577da41bd178b81011f53efb9513f22d24fedc2016b48c892d7394ec669d542b6","first_seen":"2023-05-21T11:43:23Z","last_seen":"2025-03-29T11:19:57.936014Z","times_seen":12,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/cryptojs-aes.min.js?v=1","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:21.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /cryptojs-aes.min.js?v=1 HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=s6a1IZLaTAntwD2B; __ddg10_=1742535560; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=tQpvsCGJYwA2IeN6; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg10_=1742535561; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:21 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-359a\"\r\nage: 0\r\ncontent-length: 4790\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13722,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (629)","md5":"cd93b7f0987a614bc17698503bcb6af9","sha1":"68a66448326499ff34c75bf31e2769b278584e0c","sha256":"8d4fae1a37a5b5338c889d0897b50024194b4d3ae94940e7e42c1c1423a1183e","sha512":"e3b87dfe10c0e3f3d801a85ae9c654a74eac22c2a93a757568a0d2b13755c36aeb5f9337e94a21db4ef2d1f0f1cfb98fccbbb0151d5cdf8d967730df96bfde98","ssdeep":"192:9BIGDmDm90mP9z8Ui015lN1I5rI2Tru6hMJFmHV+mdpwIfyAaYfKnNVYkUUFJZm3:9yiB0ez8UiIX1SrTegsEHJuI+y8Z7AX","tlshash":"625297c936edb94263963028587f6017b86b28b6945c4824f29cd4ddff9899dc03ae3c","first_seen":"2024-11-30T18:08:34.076577Z","last_seen":"2026-06-26T20:23:29.818692Z","times_seen":1206,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/B9uVR_PM.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:21.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/B9uVR_PM.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/_nuxt/DNNdIs2A.js\r\nCookie: __ddg8_=RbNrh8y3wkGBGL31; __ddg10_=1742535561; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"5f39fb8b22d67596f9a6169b27f8555d","sha1":"b88d59b42ea97557b34b476756abb59b81d9e40c","sha256":"054b6d192507d7e8fac99379c1ac4e0fd87f2ebd248f806356bf3b4f01262a46","sha512":"bd3155d5cd2c39653695b6eabf5bc6c6602bbab11358c0e632a3c4e3296563acc69e50bc7798a6a32661f31d94f9b7593c87f49dddd766e2f7d20d23a176c29d","ssdeep":"","tlshash":"acb012151d1c407831680df07b06441d4ca00805132129855144e70ac6241c96d1cd00","first_seen":"2025-03-21T05:40:08.944842Z","last_seen":"2025-03-21T05:40:08.944842Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/fp2.min.js","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:23.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /fp2.min.js HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=t44G9X48ms9HCwMK; __ddg10_=1742535563; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=xnR8g73Mo2nPkHx5; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg10_=1742535563; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nddg-cache-status: HIT,HIT\r\netag: \"67dc31ab-883d\"\r\nage: 2\r\ncontent-length: 11113\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34877,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (34698)","md5":"02087a3f4f46b15bc198570d800bff41","sha1":"e59f5e3521d8c60e5772de1f65c90e5b87d9eb9e","sha256":"e753042decd90a96d0636a7df16df556860af92ca09ac37f0f6ab1d574acd1f1","sha512":"2c733c348e26c0b400befd5ccac6734eb06a0ca0c8c638f8d3a66afd75ea5860c6cfd3a913ba6dd6824bd9c629c2f28d14204efa625b10fa8fd9b366ba82c968","ssdeep":"768:J2N6EbuZaWRhGT8e20R5J++t6cOrVrzib:oxuZaWRhGoF0R5UVra","tlshash":"e6f21b96b2e8373c8143b063394bec15fb799495e784808a5e2d4180f8758e9e77bdf8","first_seen":"2023-07-23T18:22:17Z","last_seen":"2026-06-26T20:23:29.90284Z","times_seen":1217,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/apple-touch-icon.png","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:23.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=ZXEgGxkQn6ZK5OtK; __ddg10_=1742535563; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.0.1742535563.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ewVW591Eox8dcrGf; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg10_=1742535564; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 5476\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"67dc31ab-1564\"\r\nage: 3\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5476,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"b0fd6219c3cc6542ac16de5fb1a803e5","sha1":"32e23eec5c195ebb1288a30e3eb88fabef54d68e","sha256":"3de26349c4bfab8a20055a516f6a01a3e26870922b5e158d25b222150248bb9f","sha512":"ca31b6c5eed2c86716e420501bba2bd940b0b74627e9acf6c535e1391dd518851aaa699484966b2c9b463af4b84fea8a91072966e6d355f12e7bbd7e04b724a8","ssdeep":"96:TitXRWWOLtp6cCMcakSchLRel2CgQ+dwmcwveg4tjvR8VRtvS:TUoWOLPIaihg29dwAv5Vi","tlshash":"b0b18db839459902eec1e13923565bd0af3111a036012c4a136fc9375b147a23abbfdd","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-06-26T20:23:29.98019Z","times_seen":156,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recaptcha.net/recaptcha/api.js?render=explicit","fqdn":"recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:24.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Mar 2025 08:36:15 GMT","end":"Mon, 02 Jun 2025 08:36:14 GMT"},"fingerprint":{"sha1":"66:66:17:8A:0A:82:CB:9F:B3:66:1F:CE:88:E4:BD:CC:BE:E5:F3:8E","sha256":"06:74:30:59:11:23:B6:46:46:B5:D5:82:0F:0E:70:B1:BE:77:32:A7:85:C4:0D:C8:6B:83:B5:4D:9D:4C:D3:B9"}}},"request":{"raw":"GET /recaptcha/api.js?render=explicit HTTP/1.1\r\nHost: recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Fri, 21 Mar 2025 05:39:24 GMT\r\ndate: Fri, 21 Mar 2025 05:39:24 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":912,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (912), with no line terminators","md5":"d13357d73f29c6e9f349fcb7b8654b07","sha1":"1be0e9d4cbd57d0b9a001e37296186bb339f5b97","sha256":"275d749e4e72e0bcabdb5ba02db9f36aa9a4dad8daf89ca45d39f1a6bf188779","sha512":"98e0d9fcdfe657bac1355af5ad2b2823eb18754cdfdb832a63975e30451262fab730c21fd01bd4792a70bbbd224f74a54f0c58bb7f848612e32654527599c73a","ssdeep":"","tlshash":"211140b50515b0384f3208f5e0ebcbb6f081202cf11889e8e105eac8af2d8dbce15988","first_seen":"2025-03-13T17:33:25.512321Z","last_seen":"2025-03-21T05:40:08.92993Z","times_seen":6,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/img/providers/pgsoft.svg","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:28.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /img/providers/pgsoft.svg HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=ddDZI5aCQKaI4K7k; __ddg10_=1742535568; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=QTqm4Pigx9kMgmmX; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:28 GMT\n__ddg10_=1742535568; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:28 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2048\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-b19\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2841,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6f2ff36a8c0019b5d6607209226ebe28","sha1":"406f99a793aff974249961c9f555cf5f463a176f","sha256":"b5a11394a142c1aa3518896292623235777afd10369b76bd00dec3e272b6983b","sha512":"5f2b60f299a6ad8f5d852650993bd568f7f65064b3eff67fcf2225288178012bd3b20e41144263059992a543494020ffa1875154155a5b77c57549d96216e194","ssdeep":"","tlshash":"3d512a3fe696b68b328854349e3045abac46f02b0507210e58e8fdbcf9871b0ad16972","first_seen":"2025-03-21T05:40:09.040287Z","last_seen":"2025-03-29T11:19:57.797018Z","times_seen":8,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfg84x.space/_nuxt/betting.CH61GRmA.css","fqdn":"gwfg84x.space","domain":"gwfg84x.space","tld":"space"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd","date":"2025-03-21T05:39:31.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfg84x.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Mar 2025 13:20:59 GMT","end":"Tue, 03 Jun 2025 13:20:58 GMT"},"fingerprint":{"sha1":"37:0A:D4:A4:39:7B:34:03:06:F3:97:38:77:9C:87:92:41:54:45:E2","sha256":"36:63:9D:A0:C3:F4:D1:35:30:96:91:1A:68:51:D7:30:4D:36:81:69:F2:35:ED:96:9D:D6:DA:1C:B5:DC:AA:BD"}}},"request":{"raw":"GET /_nuxt/betting.CH61GRmA.css HTTP/1.1\r\nHost: gwfg84x.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwfg84x.space/?stag=819_67d75bad718f91aca41894cd\r\nCookie: __ddg8_=2BFtV41K05TOVH6y; __ddg10_=1742535569; __ddg9_=91.90.42.154; __ddg1_=PicdWqULu20TJl0TA4t2; i18n_redirected=en; userVersion=45.10.240.43; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; stag=819_67d75bad718f91aca41894cd; _gcl_au=1.1.202055893.1742535563; _ga_VRDLWS0SHC=GS1.1.1742535563.1.1.1742535567.0.0.0; _ga=GA1.1.655554979.1742535564\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=vCyJoU1x4aLeUqBZ; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg10_=1742535571; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\n__ddg9_=91.90.42.154; Domain=.gwfg84x.space; Path=/; Expires=Fri, 21-Mar-2025 05:59:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Mar 2025 05:39:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Mar 2025 15:18:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 166\r\nddg-cache-status: MISS,HIT\r\netag: \"67dc31ab-188\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":392,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (393), with no line terminators","md5":"85997b728be6a1b720e881ea2af4ddf8","sha1":"5189f50056836c95806b44402463f54ed88d6908","sha256":"f197500e4373b192380eda5229811b8ddf6b6f3a0e6ccb9a65bd890348c89e13","sha512":"caf48d5a4549be51ecaa961f356e7aa15c448a0227aa69176379b1ffe23b7f1a88bdbf1a67d49d795a8e4981fcb4060f9edf36aff5465f385cc060bea1d219f4","ssdeep":"","tlshash":"82e06111162cf138c07baa0dd1c286897529e153ee1726b85e58f4537c5a9812f150d2","first_seen":"2024-12-10T17:19:34.471792Z","last_seen":"2025-03-29T11:19:57.917022Z","times_seen":9,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-21","alert":"Sinkholed","trigger":"gwfg84x.space","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}
