{"report_id":"47409bfd-f2b3-43fb-aa22-0d135a62af18","version":0,"status":"done","tags":[],"date":"2026-06-18T09:52:29Z","url":{"schema":"http","addr":"gwfj18x.life/","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"gwfj18x.life/","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"title":"GET-X","dom":{"size":438936,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65224)","md5":"a46b5a3bf73df41c68fc8df563d32b57","sha1":"6fa2ffb7b0b99f747c82d7f36da49b06cc832f88","sha256":"eb5a5a244642ad33f35b529b869dd941bd649f3ce65e8b5f18cda2cabc1901d9","sha512":"b76a0e97bf2f3d7d12efc731558ccf6447e553194bec384e9ef96f8b4d66488c817fb27ae8bde4338c3e7f6cc067b248cd891a44d21b52c1bf42bd50a754d875","ssdeep":"6144:ZCzV4Eh/lT7ZaiHItXqC20ci5pM+3fX5A3:ZcV4qZaiHIt6CLzGJ3","tlshash":"f1942bb5fa0870665133cfd0e872bb5db06af62fca064ec5eed985144ed39f62a14b04","dom_hash":"domhashe9abdc38c4be5922a1d9e9aac804efd9","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"gwfj18x.life/","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-23T09:52:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"gwfj18x.life","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-18T09:52:33.136221Z","last_seen":"2026-06-18T09:52:33.136221Z","alert_count":336,"request_count":168,"received_data":3291302,"sent_data":188128,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"getxavatars1.gtx-s3.cc","ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2025-12-11","domain_rank":0,"first_seen":"2025-12-16T06:29:30.561681Z","last_seen":"2026-06-02T03:08:37.670981Z","alert_count":0,"request_count":30,"received_data":843516,"sent_data":19785,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]},{"fqdn":"gx.webim.ru","ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"domain_registered":"2006-09-29","domain_rank":0,"first_seen":"2024-01-26T10:34:55Z","last_seen":"2026-06-02T03:08:37.780015Z","alert_count":0,"request_count":1,"received_data":335,"sent_data":532,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ssogtx14.cc","ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-06-08","domain_rank":0,"first_seen":"2026-06-18T09:52:33.140154Z","last_seen":"2026-06-18T09:52:33.140154Z","alert_count":0,"request_count":1,"received_data":1204,"sent_data":575,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"gs.jdwqqi.site","ip":{"addr":"91.215.43.62","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2022-07-06","domain_rank":0,"first_seen":"2023-10-27T17:21:41Z","last_seen":"2026-06-02T03:08:37.9774Z","alert_count":0,"request_count":3,"received_data":760,"sent_data":1857,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/CU6j378_.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"599cbe374629c7e4ac9180de3d2ef32f","sha1":"4a94daa8ca16a0075ec09705ac7883f0f20b2c39","sha256":"6a44fe90e1db7af6706984d803da562625a157397bf55943d805a8e8a0f4c905","sha512":"48145d8f620821fb6b2eb23bd0561252e5acc46bb91fe5151a1888e2299d146c596b004a77691493e35b0ab209aaafae8bfa8c9712baa1c7ea76a859ff8564b8","ssdeep":"768:70GCYP0b2T8sGKVOQMWnmR5ocLi3nD+AuPUSxJlguAM13lnGEHM7Ip12gAKvEfzL:YTkQ2T8s5VOJ2D+XtZT1sAVJ5ukVafJ","tlshash":"0b43274579499cbde3321ad814190c04725d1eeb7068cce1f2eacd68abb7dac215df2d","size":56793,"data":"","first_seen":"2026-06-18T09:52:41.240499Z","last_seen":"2026-06-18T09:52:41.240499Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/eoyIKNe7.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"de0231a8bf072367c5fb2b81b73430d0","sha1":"848c75ef019bb14d52001c2032fccc1613faacfd","sha256":"f6b2eca0916a2efadf4e5a8bf09e1ecb825ff26c7c48dfb51536c9e0fe315b05","sha512":"9f7ad95a70f9ccac9dc8035525f643b95f0de7c15673a1780bfe4afa48212d4041abc7b79e5489c7e07bc40fca80b82a92aa32ee3c569b9226bb09ef5c4deefc","ssdeep":"","tlshash":"a101168dac2cc63f8b43065d4061250006481dfeae7524f291d32e25db3cee5624afe4","size":851,"data":"","first_seen":"2026-06-18T09:52:41.074437Z","last_seen":"2026-06-18T09:52:41.074437Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/B52hjvn4.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f275362aa6088c76cd20e76617f4430b","sha1":"1a0fca8769374213f907cac4ea95b60fca2d5f0f","sha256":"9f06135556f88cdf10a1a3507594bf04f3fc6ac0b7ab674289a9038655e4d0cc","sha512":"f44b43145f3e08ee0fc88ee9f54cf10fe98dcd4e4ca68b1a7ae04b97685327d1b636c86777927a4ad832123f219839420e4fcc9542970b89af5de7da9c455413","ssdeep":"","tlshash":"27213eaff82cd56027351dc035cc3549920a830e281accd0b9face032422d0b58aef3b","size":1399,"data":"","first_seen":"2026-06-18T09:52:41.218842Z","last_seen":"2026-06-18T09:52:41.218842Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/DEi4vMAd.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"243d1f8e72230dffb709f561e5a83eaa","sha1":"0e905c69cf4ef560b18dd02fe25e8db9b44efb46","sha256":"7acce1b6af6b4a52c5c96beaf953d7d6308be7460c9a6b9439a6f657fadef72c","sha512":"74bcb303b9a2a782d51afe62eb0a9ad74871821b11bf8d07d99a2dbf8740a340fefcd8cfb96f171ad1611289258a3ab556aaf6bc860fbd7962afb0dacb751d20","ssdeep":"","tlshash":"f651410ab004f6e587673436b1161140f52c0deef0b85afdb2b61df47f969183a0aba9","size":2571,"data":"","first_seen":"2026-06-18T09:52:41.175175Z","last_seen":"2026-06-18T09:52:41.175175Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/9MCj9Ndr.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"33d032c2dd2dd6a81b4680080e1e9623","sha1":"da1c5a2945890406a6d0abad4398bb632adbc2f6","sha256":"e2a89db1c87854d0495c7adb829cbea9a6cd89b561858812e0dbf21afbdf7f1d","sha512":"5aa994c44fbc56c9348ed579771c0bced8fa57bd2606d31b4d23b852a0f5a319bc5d390888cfc38a948613cac2dbdf86296cd56c27a944348bcad0c798d5a2ed","ssdeep":"","tlshash":"b5112f1a30e9933081e2b399612441d2828e4b58ad7880b4ebec8f035a45449d67fef9","size":885,"data":"","first_seen":"2026-06-18T09:52:41.229988Z","last_seen":"2026-06-18T09:52:41.229988Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/5hx4Mpvf.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"41ba8aa6ebcd365ab2649dbb7aeb711e","sha1":"9a2e1459907845efa9b703840f8388db0808b904","sha256":"04fa7a85074b7bc34611cfa202d6af6151590cf9d8c830fe56d4829ace2016e9","sha512":"91a1398a42c45f92346cd0ddb499a87c7cf608b89b06a257f379d8697e94706fb1097fe5089d4bac78d8ec7315b52c647b19d4b359092e1c36b776f3c9f2110c","ssdeep":"1536:BAkN3g33puxH++CzuXdyngWu8I7NBtYl3CwplaDzLBe3tlUx:BAqgJuxH+qyngWuXxBiJZAjAtlg","tlshash":"e9a36c0a5f0a1b690293235535cf7bc877bc506ad2b184a50cfe462c13e38b5e57fae8","size":102062,"data":"","first_seen":"2026-06-18T09:52:41.136642Z","last_seen":"2026-06-18T09:52:41.136642Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/B_XhNwg4.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6ace1159a5e92532ae5a402323e394b","sha1":"b5f196b8b722eac83d6e0d4e026a157c041c2017","sha256":"8772fbc1abf96936670bbf82f7b7455e8c80612f4b29a5efdde8a607d082cb50","sha512":"57b62ea578f43fb22e2359672fa4fe13498503cecf2fa85fbd8db6762b76e3b46009d7a5ba4e207a55e1acc64ed54087bc8af0a7e66a58878c4c5d2998f761e3","ssdeep":"","tlshash":"f0d0c2e2c41110a2c9b03c24f19a0f42032b3d40f144e1b873fc1882fee24a9a8be8b5","size":289,"data":"","first_seen":"2026-02-04T12:10:15.452687Z","last_seen":"2026-07-06T16:03:04.153256Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/ByadrAD5.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc9bd4553800b51d6957ce6eebbd75b1","sha1":"76921f1d0981b5744be4e0045020cddbcfa04bb2","sha256":"2e3d8d9d6286f4b91da8fbf810d3dbe617b742fc7ee7d0714d670627f17a7973","sha512":"b2311fc9ab2a37b98a961bef0d68348dd530720d7998ad3e190c2c79041a168dfe49e5fcd2b50ceacec8eb26bebb451f2e75b53ed030fc8d9afa51d0de009bc7","ssdeep":"1536:Y3nqlXTsQiJnZf0KnVvGgPOq7CXCqZwQKiuScBlxvHbUrXeWkHXiA6wwX/HtR6m7:Y3qlXTsQdgPfCZZV5z/VR8qH3Wg","tlshash":"b4b30989a224b57642fb5ada83b5820172b04884b409d4e8b0fd8d7f557e95803bfffd","size":107774,"data":"","first_seen":"2026-06-18T09:52:41.246955Z","last_seen":"2026-06-18T09:52:41.246955Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/CuWAKboT.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"57041243cfccdaafa5f2ba79c8d35755","sha1":"922e7fdb03bd07a0157ae1246686a0fec51dfd49","sha256":"5d0388814e88cbdd0982ad9c60d8689f8760399afac3f2b1c27f1f2796a81a44","sha512":"1dc576ebd5fc6417ecb76cd5e415916a0d1f4feaa92f381d6ab6891d9ddcbf368aad660e585bb7bb50efb944c236123f29bee4ae91f292772fdf2f4362db0d2f","ssdeep":"768:kC43aMGkQtDCPB/HyzE0qcq7yxP2C7dSlSxkPut06BcftOasz7EhQUPN/iiB8oDZ:740xtywcV3iIX","tlshash":"8603f9c8b260506583e2a1a390750203f33999153409855cbb2ceefbad7eeda7177f75","size":40101,"data":"","first_seen":"2026-04-29T18:04:07.457202Z","last_seen":"2026-06-26T20:23:29.94679Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/CwbvzBAP.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c33d127292bfe1b61e91fab39ca3b7d","sha1":"978a46e239d5a1873f6f5ed31b1e30ff397b5656","sha256":"f6dd9706144b93b497b0e3db0c887b70cd685fac73ee91d9496cf1e30fa9b0fb","sha512":"f758ba4b7c319240e237d1d34cb0b5a659235908f0216232310ae1993f655c54481b09db36802d3572c0e8076f0a10497612d3b7f6e6d771528bafafdbfb7b7b","ssdeep":"","tlshash":"a5212f1d380660bb239213e0a0ae041de118be71b66bc482e68c3d277e23585c84effd","size":1443,"data":"","first_seen":"2026-06-18T09:52:41.210449Z","last_seen":"2026-06-18T09:52:41.210449Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/OSnqbglA.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7337a92c131fe040ad1122fd3d9677c5","sha1":"b1e473d5073b6c0966c9fca01fa6fd2f0160d117","sha256":"c934b12b6e5b2d74cdb3a1af0e57036f95b348c953a9d8960e1f2563df169ce4","sha512":"6357175f5c22e72fd334ddddaf286c6c73ed031574888322d6ac8e48f1435a7361a997e0fa837ab082ed98e5d5c07b59a5dc007efde8d96712cef928fc923ebb","ssdeep":"","tlshash":"6b115c6572eac03887a59da519871aa4e94d4d0c718a81c4ecac5db2223f9acd178e0a","size":921,"data":"","first_seen":"2026-06-18T09:52:41.211367Z","last_seen":"2026-06-18T09:52:41.211367Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/T422dish.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"147ed10cb0f377eeb90d94bcf3b3e5ce","sha1":"856ac27cb26f8ead127d1ffac1f3f4e7c6eab137","sha256":"4b9b211ffb18a626ac75b8149c8652179ed6e64cef4e9fe1d282d152ec573efb","sha512":"d5ed102b81c13b8977861d6922e889d1f3baf2cc73d3a6a237f34ed24eeb15f732b3cf442ec5221e951a828f4607904b93b2ea55a9acbccd0b06ec9843e684da","ssdeep":"","tlshash":"98d0955a26d1d03515310cc684b4446886560b34b125dfd23a9e6b4b8647551d0e153a","size":268,"data":"","first_seen":"2026-06-18T09:52:41.215849Z","last_seen":"2026-06-18T09:52:41.215849Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/DlAUqK2U.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","size":91,"data":"","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-07-26T20:35:22.91172Z","times_seen":24715,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/g5hXAoCh.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e00a42fd95cedf866be989c77874294","sha1":"04d4677c9e2fca47d7dd164ec11087a7329433df","sha256":"fa8672091ead24d869e3005a70468115a3a8a13f7d4c46a15b6c63201668755c","sha512":"9f9f7d5a0b917ae1baf93f0971ad91ee9f73d81bbe7feaccfcf29a40280f99f5cebf156312b5878b41813450c1f04110cf753aa346dbfc89cd411e4e0deb8a1b","ssdeep":"12288:PaPdWbuyB/ir+112kQmhSZX9qbO+bK5BcgIg/z:6dWbuyB/X12kdhSZX92K5BcgRz","tlshash":"a4e45bd97196b06243e61af5903f0106f33a6d48784d84a8f26cedea3d7680991b7f7c","size":704458,"data":"","first_seen":"2026-06-18T09:52:41.191107Z","last_seen":"2026-06-18T09:52:41.191107Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/6KznmWpA.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"efbd6e90cb829030f6cf66021b7c408c","sha1":"07a72c8df89c987b28109e065cc1bb285e00da9e","sha256":"33888b5a1dec7ce8f217ec1e0791c9760db536ca55392a840c3e596e6afe205d","sha512":"de176345ac4f40b40697d153da070577df7f1a564e123d78a403b2aa6d9602397e801827c778eec3767115e5638a9bc3f90500539e9d8432583c8abbf54b5cb6","ssdeep":"","tlshash":"b601ab0edd5986bd8065009edcab0529661c2eebc2b0849352ee5a149b3c4f8f20df2d","size":846,"data":"","first_seen":"2026-06-18T09:52:41.040307Z","last_seen":"2026-06-18T09:52:41.040307Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/Ce3_cP9H.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"07b8886d881aa6af45d950a6c4142243","sha1":"32f362ca01999e196c8d804997571f1e784edb19","sha256":"133bc5b4b66d6ffd3191317d610216a4632c4be43ded1a9ba52f0c24a0887944","sha512":"94807f9b19f6048e705b88b058a51b6ce8587445330045cfed2650399d03a6a6bf0e8180f38022faf9d59e9dda6198ad848ec6058bad36227cdc7037d825817a","ssdeep":"","tlshash":"a6f0e1ac90d601f693d20afcc4138310c32c1809f40d6ed6d1d6afa7f256297c7b6a4a","size":564,"data":"","first_seen":"2026-06-18T09:52:41.243708Z","last_seen":"2026-06-18T09:52:41.243708Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/D-u_6vg4.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5347c4f635816286ee2d5b2a496ffdf1","sha1":"e467e0d9ec89a8daa3ac7bfdd9d5dc36f495b8d0","sha256":"772cf6517c5a0f482059e8b7890a7c9f4e02efa352ab93a990c9e7bc1077b894","sha512":"20807a17bcef2016e7b980960e585d34740c006a2589a4b688a0dfb4b99207ea84a41a5571571dd50516f00e37b431902a35418030123ead9c019c8102ac6d3a","ssdeep":"","tlshash":"e421429ab441ed7341ab0ed288f104d2d28c2b6de57854d062d6407f224f428e69bf53","size":1330,"data":"","first_seen":"2026-06-18T09:52:41.244645Z","last_seen":"2026-06-18T09:52:41.244645Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/EF0ldllv.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ad71d15a6829f8144926545bd3fa316","sha1":"d8a72a244ecdefd840cc925a6f2a9ac0fad75dfa","sha256":"dd84f981a63fd7ac657b6a6af5e456faf6a25419a06fa889e34d5e1322704125","sha512":"936b18766f983c3a66ab27f9de04a4dc4f33d198e6f730b872dc6ef52676006fad112683eecac3eab75f31e9455116c975f68c6230a89e797fbb5b1ca50030df","ssdeep":"96:szHL/bHGJ+6nRUlZU1zbohTacHOxVUfzUi5npcEf7f3ziVAK8wDmHURTQ6LOe9Hs:wbHGRnRUlq2hTacHOxW4i5pcA7iVnZl0","tlshash":"6eb1d70eb80459f943712cd82919345076280befd5e9c1d17175dca22ea2d35f7e8f78","size":5519,"data":"","first_seen":"2026-06-18T09:52:41.135617Z","last_seen":"2026-06-18T09:52:41.135617Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/B9LYutY1.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0aabe45c96bd4a3301568a775f039863","sha1":"a63a6bbbeb808de4e5267e67f191782dd0c6368e","sha256":"7be720580569049ac713405004f47c8118370556e2c1969b8b777f5369e14ed7","sha512":"a93b92a8bab6bd6b9fc13c607654e5abda7e84de33086b22a69a8bb54e4a05b8cce6c55cf94b65092b29e02f07ed2ca09fa7f4d6e589902bbaa51b30e5f29608","ssdeep":"","tlshash":"65018e87bd7b243a4dd11e1768626151b725e89d24438042bbf0ea84920ae8ce37e430","size":747,"data":"","first_seen":"2026-06-18T09:52:41.099523Z","last_seen":"2026-06-18T09:52:41.099523Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/Blww8d_Q.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"614ebd675cb3ada7ba955fb6730bf046","sha1":"27c1b1fb26d6a262a3d6d2e2ccaaa49a5faf24d7","sha256":"17feb6b9c4c738ec9d5f8ccfb8e40c951937d55940a694ba3d28ca5312f13c8a","sha512":"83350c5ec6fd4558796d298ffa1a659b627d1efdd4cf638a0ead6705e29319863b15613f2e3791b99baafbafc2afc699e88a72076b93455ecbe4b350f8fdfa1d","ssdeep":"","tlshash":"b301fd4fee06ccb7414255add80a14222bc829afd6a1959550ff13221bb9d6af14e711","size":822,"data":"","first_seen":"2026-06-18T09:52:41.03915Z","last_seen":"2026-06-18T09:52:41.03915Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/CnYQB88b.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"33ccaec1649c752b6c4dbee63bc4d056","sha1":"fcefb2cce5b45760ef744749c092f81e32c2c881","sha256":"0bf93ee11be7e4c5037c49e98ecb5fb46fdcf9282afda708c4160c98d66bb0e7","sha512":"e182d1738893fb9f7e26ed782b8d0e1c6bc3f62d826f258484327efaa3c259b9b7d959730005c39be0ceb6f8b53c5da2bc72c666b8fbea62a8dd90a93e920b37","ssdeep":"","tlshash":"7901158d1c55e4fe42a3c8e44d6831041a1c05fff3f841f9c7e4e128e721452d635b24","size":740,"data":"","first_seen":"2026-06-18T09:52:41.031583Z","last_seen":"2026-06-18T09:52:41.031583Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/BLqRxf3I.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c4076f676c3e359982554324aa3e380","sha1":"6e3928ac3e2541310f4e0e1ae254251c9537bad6","sha256":"f8622b7778b61f8ba726785312d560a302215693a00de02da533f063bae4f1a5","sha512":"26e60ee813a234626723059bafb67f5691b27c81eefa8404583fbd3feb50646e892e2524fc6223e9f46ae036f9f98c5e965e7a1cccb6663c5f86a0d3a527a878","ssdeep":"","tlshash":"d8b012cd684015b44c010cfe1356080410d3a119e4c0019001b0960faa25da3020d626","size":96,"data":"","first_seen":"2026-05-26T01:50:53.954167Z","last_seen":"2026-07-06T16:03:04.221026Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/BglbTND8.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8c6566383f2fc1a0e22e49cbcc2e2f0","sha1":"fa33ef3761ed71222759bdda9434c33df9bcc252","sha256":"5f483d12f2c5c09a35fdd5c530b15cb36bfd8bda32e85a697012af0d4a836bb1","sha512":"e962a5bb5de0abe443e036857ef7485e24a2a48067c0dea4fd0dd6d58cd1c36005208411dfc1ee9e4619c09ac1583324af781179c05b650d27f37e370646d265","ssdeep":"","tlshash":"fe11344e90351e9ed06cceba806af3833020ddbb2713e0597969e1b47eda4034d68f32","size":927,"data":"","first_seen":"2026-06-18T09:52:41.101487Z","last_seen":"2026-06-18T09:52:41.101487Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/D8CsykBC.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e67055df2c1f8893ddacbb562851e345","sha1":"18712591ee7e0ef03fcb6c3186ea716eea240e4d","sha256":"7de20a9d29ece709a4415d4b887bf2b5aa1819861f978d15bfef1bd9be4e3095","sha512":"1f2b664d866faedbc2153f2eb71a2e01e30494d9bb2b7f10b2ee9d869fe8cbe0af933348676759459aa505d3ea5c37c50941dd4850a4ebe669c6b5530612757f","ssdeep":"","tlshash":"b351b208bc6e45bc02bf5c5ba020199827540ff968383ccb76ba6d280fd2c1573a9315","size":2811,"data":"","first_seen":"2026-06-18T09:52:41.113142Z","last_seen":"2026-06-18T09:52:41.113142Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/DV8G7pGV.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"db65e0026e36921c1512afa2c99407ad","sha1":"8e85b550cdf6ae134b43e2ca21df7d142de5f06d","sha256":"e3e848972e9c6dacbf4d00f6f211e62eda2315cf4f791a5b4017cd407a256366","sha512":"17f85ea8ad3a497805b6566d4ad293680101b30d697f485123f6a43fe5e8e98b4ebd3d49b97c3632f7d4f1b62ec42a129e22535baf6ffd5f61457889f78e4f30","ssdeep":"","tlshash":"4351cbb5ba82f4a5285eb7ef4c8d5504d02c700ba41e82ccfc8935043a2659fb756fbc","size":2572,"data":"","first_seen":"2026-06-06T23:27:45.068111Z","last_seen":"2026-06-26T20:23:29.950521Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/Dn5g4Jwc.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c502b48770c8a6aec34b41533b1a45b","sha1":"8ae20d9d5f3804b1174f7b264c4f63404c930dac","sha256":"305b8b969023f072c148a6750398f1efedb4fab49d5232223856ed9e171fada1","sha512":"0ee8a0fb870dd9aa8c3dda40c29f2737fdcd7d474daa3d7b290e6030f4f9f0ddbf0341fb6bec9d384fa200ad6156562db9b638ab3fffbe23226e10333e1cd3a7","ssdeep":"1536:t9LVosJv1YsjqVGKrpejHnNHhtyxzukH1cCLOtyOAZVPZFDkD3qdJh96loX1Q8r:tddJvOsW38dXQRPOty7PnALqdb960","tlshash":"37a3e6dd7282b022429676a4443f190bf237ac94780e491cf229d9d93d7ce8951bff7a","size":104083,"data":"","first_seen":"2026-04-29T18:04:07.270246Z","last_seen":"2026-07-06T16:03:04.21139Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/J65_Il6E.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee7cf010d488f0589e354ca139fcd1ea","sha1":"0fb3c207e5ecc00bbc7802a5a4a94beefb4d2154","sha256":"a5c04cd946463befad6f663afeafda320a41b767bd8518ae8ed223acb2891fa1","sha512":"2ef3c7be42ce3f85a4cb6d966066b932d08152808fcfe628ec4fa95a40713d1261137533ab841fbfe223c72bbe795c2a46a34bfaf904f85e42fcf5dbd94cab15","ssdeep":"3072:pb9eIWGrsa7sLqhJIbIFysBVoYCdGF3QWwS1aBmUIlKqs3DHDu4Tx1vm8vwWSqb3:feI3sa7sLqhJIbI1gF","tlshash":"ee348d95f18821fcc25b6be8b4521440712e1efeeb54cc62d2fc0da83765c6c97a9f68","size":248885,"data":"","first_seen":"2026-06-18T09:52:41.157631Z","last_seen":"2026-06-18T09:52:41.157631Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/D2eHF4bJ.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bb599ba5b5c6e1276c29d9fab3d6bf3","sha1":"8d86aac1849e9af410d5acf4a3f4373023225fef","sha256":"ef9aa92c03283653f1180d925e68fe79712f90902e3de4ada734d43bf6cdbc35","sha512":"5dee20e5b2426518007ed4e67c288cb193b6f066471bc5da83230bdfbf1771525d19b89b160b4f8ab40bfae99afc2ead77e059139f9fe495e3ca90ee40a9f3fe","ssdeep":"1536:+RqGQmGiPwaEEmQhwgiJSuP/BDqac61iqBIyHkOxI+h+tmxRJUyJWs8AYx/lKtz2:+OhHkOxI+h+tU2V","tlshash":"9324e7fa93d461eda507c7b4d813a87135af29fd7fc5cb8242d8ce98a5260dc8a4ec50","size":225100,"data":"","first_seen":"2026-06-18T09:52:41.182972Z","last_seen":"2026-06-18T09:52:41.182972Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/xFDdA9PL.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"234c692cb4fe859418ed4e7a99111eb7","sha1":"aa402e0aa581e8b620acffd39e24d0f6b3e95d49","sha256":"3565fa5170160ae1fbb5af92418914bf754766599777608572e227551de0b628","sha512":"5d57ddbc65a30e9d37553cd4f50f665b939a50fa0b901fb105e95257bf9e3dd4628663a9593ee2896c95213bdc4584c884899dc660f52bec5424847ea9f2c0ef","ssdeep":"","tlshash":"6251102d679e3cac66343c812dd8247d5224c38e2861d8da34e8ee97a057d0accadf34","size":2807,"data":"","first_seen":"2026-06-18T09:52:41.130289Z","last_seen":"2026-06-18T09:52:41.130289Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/Be_1H4JC.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c4261007b527a1c9f93727f678a4a4f","sha1":"33468dd7ad0f3fbcca4db9c5888ae2a456d33de5","sha256":"ede16464aefe4d1b227a8087bf21d4543635a947f83bca0c74f1fd6fe36b67b6","sha512":"b33eaaded88f6bee2b1c3e281272fffe2c4bbe6501d89ee72338844ce19231655a4880f30f0406b4b5001bbc90f182e5c2fa4be142ddfcdb7bcda9b8953b3168","ssdeep":"","tlshash":"dd31eac9e55c98afb483d7e88867442425c825fe3fd0efc5c6c4ae702137098a70f590","size":1643,"data":"","first_seen":"2026-06-18T09:52:41.217937Z","last_seen":"2026-06-18T09:52:41.217937Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/RQ9pOA8m.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"819f09878c722d32e01bc3fc28477e8b","sha1":"a3b0842dc7ddeedb9bd94e167a8a66242b45ddda","sha256":"70e53fdade750d56dc67ea039a4ecd2295b53ba96f7df965f04bc3d99acf3447","sha512":"90b910c0779c5ba2fae2b076633a4b2c29158b1d2e8e7210986cb1b3480001b5da5633e19bf7530091eb209e15a1fc71325f4dfad3fa1bc8e83267005ad4600a","ssdeep":"96:v2wOPJmfvkSfDQ9ohHEEudcDbG6xppK9b9Lkywgln8bu18UFFozFDq:viukMHuye6fwPOa1zFyRDq","tlshash":"9cb1e97eb594affec372d58280d24a04211d17a463a2bce171be4d5703ebcd4b65e718","size":5503,"data":"","first_seen":"2026-06-18T09:52:41.168682Z","last_seen":"2026-06-18T09:52:41.168682Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/ByEVKtVc.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c1acc0d14e70708adda74cda1ed97df","sha1":"8d48761003e86f1fb9abea06b95d8ae124e00681","sha256":"aaba8e782d2604f5c72bbddc748c82eba5f91b06661dcae3fff288236846989b","sha512":"0d83d93bfa5c0851d0f94b9f028a411dcf3ae90e14bb40759861e3c98f3a09d9fdcfa4f6e8b69eda565e435f58b6ecd894cd72e31b1407f13763090fa28044ed","ssdeep":"768:aYT4+ibtf0i48lw6YJEPeE1jWPirG5Cl7EL5MP5/vA:PbiJMRxwWPiamg","tlshash":"45f2fa483be1bc34c2da30d7363e090577726a41586e6540e006cab57fa968b71bbf7e","size":36511,"data":"","first_seen":"2026-06-18T09:52:41.127217Z","last_seen":"2026-06-18T09:52:41.127217Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/DTPBPF3r.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3c3a6261146e85ec018ba104ef01a3a","sha1":"aeb4187bcffb479a6ba68e51ce07219f84ed3ba0","sha256":"c0978902341748507ce5bfaa22f14c0675b7408013a227b2b143559686db400b","sha512":"4edd61310bb0a9a9f1daf87fe3aa5e238b1fc46788553407293f847003a82dafff9c4b54a2f29c99958a5616e1ca020855e1636da433a773ddd3f5291392978d","ssdeep":"","tlshash":"7e11638cf849cf745721eca425260411f98c0e8c763445c0d0f09a914b8cc68a7edb6a","size":931,"data":"","first_seen":"2026-06-18T09:52:41.048448Z","last_seen":"2026-06-18T09:52:41.048448Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/oy_aqvJQ.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89bb11a39119ce66877df05d7b70b3ad","sha1":"fbd585ff13ff252baffed757ed1d40bcf01d7fec","sha256":"70137acf369bd990d08ea79281a753b3704198349c4d577aa5356a693ddd6e9b","sha512":"b112b8b21905abaec65ac0336b02b3280701671134dc393e8926c5f5bc196ae0fc07cf7d2cb350d07756ed305561ad725d2f7d7186b6d6682e2b45edfb08c195","ssdeep":"","tlshash":"7d2130aebb3aa7bc7c246a5f42306f20f0132096ffb8945cb8d22126e3425a155640b8","size":1151,"data":"","first_seen":"2026-06-02T03:08:49.024763Z","last_seen":"2026-07-06T16:03:04.174344Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/BAd-uBme.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"015ea0b1add75365bf0142babd4cde76","sha1":"56bc7a9506dd9f23b7303df16bbabe439f0c4d60","sha256":"9a26f1b6ed4cc8389f5f2ddc73112cfa773fb80ee061a8065cfca7b186f93f75","sha512":"2ff80fa7a8dd11faaf9106d9b4ebdf2b93ba38d6fd124f592ab4ae6f92d8184b355faed849688fa907b54773da2719fc59bb25b67af7b882663da11d5d53763c","ssdeep":"","tlshash":"9f1165b53c92f47dc329546f02619124d114132c3134eaf927ec256f245fcdb21d2537","size":1032,"data":"","first_seen":"2026-06-18T09:52:41.038108Z","last_seen":"2026-06-18T09:52:41.038108Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/BQZtSoyl.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"af6bb13675ad4c4e3f33f040d5a82f4f","sha1":"65482a4cc5715d23e53e765587d799da72d2e05a","sha256":"1a900d0616f8a998bd5e6f0f60f43dd853efd94869e8275e14a673c397ef8ec0","sha512":"52dd2fe4b128fe57c6eb624c899fd791bdb84fe2d9c3be5fcbd6a55f9c85eb9531e7afb3f808aa08fcc0be8fc6de9cf588424b737acbe785f0fe3f89c82fbf5d","ssdeep":"","tlshash":"5d01976bc429803a4028cdfcc670c23121b78a7783c7cb3ad4ef03782384830e84a693","size":782,"data":"","first_seen":"2026-06-18T09:52:41.227051Z","last_seen":"2026-06-18T09:52:41.227051Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/-pt0boNG.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa448e3f102d4615a4d8799bed108133","sha1":"ccbe036735aa94eeb7115d2c1126fc1323c832ce","sha256":"d4f85775b0ac1cb357c3a702aea808872b4bc46fd678f357ee4a189560d28e37","sha512":"8b086f69eccd0ce8a291895e8f185925c0f80208a423967e5f7327fd5f01ebac428ebf38dcfc6f83a527e1a9ab6ebcd5c40bf7dcad167d1895fb61ea4cd97c68","ssdeep":"","tlshash":"2321ea35f8fa217a133660e580fd8285936d6b79f469c0e0b67c5e0b09a5dc3c8f7268","size":1213,"data":"","first_seen":"2026-06-18T09:52:41.065981Z","last_seen":"2026-06-18T09:52:41.065981Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/CfvKJCz1.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a346e5835f097f3dfd672857ee129c4","sha1":"af0684aefa01bac17f35ffdf003b3618125e8ebf","sha256":"965dbd531da6aa1d68562bcaaa6ba3d8bbcb908b3b746da8f8fcacb567bb9204","sha512":"868fc3c257c11c79d6a2484c594922a68474bb6492df88d2a778134192689af67b051c18d0469bc383ed7c50718378c7bf4ea0b12b94edd43fe012754330065f","ssdeep":"","tlshash":"de31a61fd14090394159cef8e529d971637382ab43eac7b5e2ef0bb11351171d08db6b","size":1718,"data":"","first_seen":"2026-06-18T09:52:41.103271Z","last_seen":"2026-06-18T09:52:41.103271Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/BdoSPMw_.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"56a5ede2a879002b4ea3902de98fa26d","sha1":"c762d8a40e6b8d38b37d6ad631837a6d04d95269","sha256":"263c3b56c8703bd0db89e42b9f5936047256ad23a76f4a21550e3575777b4994","sha512":"1b0a9c89941718d1db424166de91decc68bb14495b42b2c2f8273951230e91a4043152b2967f517f25cf43dc54dc03279cc2e0b67c6f0fc66991ea9a711bd25e","ssdeep":"","tlshash":"f001f18b5d12c53a0b21698900271a205704581ee375b4d585abbab7ebdf5a8854db33","size":805,"data":"","first_seen":"2026-06-18T09:52:41.134703Z","last_seen":"2026-06-18T09:52:41.134703Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/D7YbqZWX.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c5e8a2d9c3683ea02f1ba9723006fd85","sha1":"57c550a74c1a1b4b9f8546dd3fea98e561f72a50","sha256":"e2fe12ae907b2709ceb2d33c871071198e95de9cc39fa9765ed61e5088eb42aa","sha512":"bd72c066b5f4c19700fbb975b1f39dded61b2951d4669f383162319e9bd9e101560addb083a8d39efdebacecebdd1acfd9ba41b9330fb0a0fc03f2528c3fba8b","ssdeep":"","tlshash":"01d0c791f55af2534284127540349912765ddac4334d3162e5442658b8d9cd5906e157","size":203,"data":"","first_seen":"2026-04-29T18:04:07.354858Z","last_seen":"2026-06-26T20:23:29.836017Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/CmWLqrZ8.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"73effc11c245527c36fc77d609151c26","sha1":"a5fb708c9b557c091f76cfc891621fe7a9af4ee6","sha256":"4f6f0b9a321d65f7d6af20a47d50e3924b69b9d4620bdafbc3a40eafe4f1eb6e","sha512":"375cb5963f588e858cdd5e5d571e6452aae2f5808c6349e80d650bb0ea9675337d534670e323dd8725df48b07e836f24b47d757b3f3720ebdcd624607f85f4f3","ssdeep":"","tlshash":"f3d0229a4a8062ad90028ae58f2a8dab900210ec3b20e8e1b2440024330729002b7e2f","size":195,"data":"","first_seen":"2026-06-18T09:52:41.171775Z","last_seen":"2026-06-18T09:52:41.171775Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/Cmn7f-VX.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da6cec4dd2b79b6ce3dc7efb82b0ccfa","sha1":"9aa34757534a5b1a1a814d6c6f5ea5dc2daba1da","sha256":"f34e94ff3315621c73a5aefc2db96aa533e0a429c01dbaf2728cdb95c6f9337c","sha512":"0fb035b56b58882a7430f0b99dc8bf254aa61a47321c12216d3de11c2f26948c961d34e2d2e2367efa8e3e854786d38b4472638ebb5b6bf77ef8cfab9607e424","ssdeep":"","tlshash":"0e41424ca479967801be8886f405147863480ff8952a7dcba6fd5c389fa5c34a26bf10","size":2151,"data":"","first_seen":"2026-06-18T09:52:41.088341Z","last_seen":"2026-06-18T09:52:41.088341Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/J3em_cvw.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60f8f220fdd3cff2c8a7dc7cea35a119","sha1":"7d5ecf7f4d49bb72e59d91170e902b56057abf59","sha256":"d732cf5c92bd03f97e0af465a10eedb208c8050e34ac4be9faa23bf5f783bd7b","sha512":"3c739f575faf3154a16273efaa022c07715bee72781ffe0abb56c55300b114675f1408aa76cdaf08d01e2a00522cd2ca085689d8ed5110435a7d0d0cebb765a6","ssdeep":"96:HyihfFwbwPJNkIhR/LOJO4zUOJOBMwOVH3Wx1Y7mSPbD6SliwfxiC5w6IZYOMEk9:SnbkHj/6U/WwoGxWySPiSliwfxiC5w6h","tlshash":"41918350b590f5a11f9318e298c08027e1e84329dc25bcf2d2eb5ab51bc5ec4a38bb6d","size":4557,"data":"","first_seen":"2026-06-18T09:52:41.12359Z","last_seen":"2026-06-18T09:52:41.12359Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/UdGmQQKC.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bea231cae4e1359e3e4fb7d9bc1fa19","sha1":"36feb976bbd0a4247eb845d5319310cdd05713f0","sha256":"6aad12484fba84f8829f912d86627c2f92b8d71ee22ea4111a85b1cb716626a2","sha512":"19bf6bedc9b05051af6cd539839eab1c29d775b294a15702ed4d7e0fe58c211467409a13e796b2c47d9c33d0afcfdcf05faa3ff4455d5cce74e07987a876a58e","ssdeep":"768:EwFf/JjF//Hie1/nUT1kzc0vRJQIQP9Lh1bOfOBSclIEc3VMpFTHZgNnGXSmY5dO:EweHizZUYqCouC","tlshash":"91f21ad5b6d1b06243ea60f4806b0902f3399a15b44e84b4f16c9cdb3db650a87b7fbd","size":34290,"data":"","first_seen":"2026-06-18T09:52:41.228869Z","last_seen":"2026-07-06T16:03:04.20399Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/BUPjDDxY.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6b684f1866db6d31a66de137d3dc79c","sha1":"950a962ab1a23dc32d01ce9cb7d4d7c977e63e77","sha256":"2ade445ae163fbb74e2cae4ab22140cc886fd7cfcc61e424a82cafdd82e9c407","sha512":"d3d53ee3035fe47050fd5676a47d1ee77823240d10fffe3be40231f77136aa6a847766b071ca1cb7e2875f47d2d5864d267fde9810bdcb0475c613a24a66e117","ssdeep":"","tlshash":"ddd02e8f802260f4082030c08a30f1f01a20d22ca3860a40a06488b06e52c7fcc2af20","size":250,"data":"","first_seen":"2026-06-18T09:52:41.090237Z","last_seen":"2026-06-18T09:52:41.090237Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/C8dc1RME.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5398b04e70fe7ec1e1da0e931b793783","sha1":"258ea7be50a04877de6218a91f8127380be33070","sha256":"1b40bbf42a615519b16c3153dbd0fcd94b32662090641ddd67ef421a50b2a2c5","sha512":"eac3e2d7a292fb1de110cd963d7bddde80ec4237d3a029ec99f5972a58d304edb6bc00714a476c0319b4d3eaad57111f12a48d153d4272fc6f288ea13c499c5e","ssdeep":"","tlshash":"03e0d8a6b6626fb4d7184e1001e95c51f0304a09eacf4fbbe35e1fd2552ac4a8275d8a","size":373,"data":"","first_seen":"2026-06-03T11:08:15.085639Z","last_seen":"2026-07-06T16:03:04.218332Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/fnTcI_aX.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"26ce49393721e6887cc2d6b55e796aa7","sha1":"b8b74f6e8710e5685ac0b037d1739ac4522b6432","sha256":"d799d7d4bc29bb074592218c22df9d3b84c62784e276a9758c3dfb7791f617b4","sha512":"526434b510135e401d02087732fd48d1f663bb0aa8b219cf4335217e05f3dd7b6c67a29e4e685f5ca6a27d758e5d98724e3db0b3a02079ef6bb900665fa0301f","ssdeep":"","tlshash":"e0219389a4bacb7e023e44c8268d1c901a192b1d41ec0df9436fca1157cddf0a32ac94","size":1169,"data":"","first_seen":"2026-06-18T09:52:41.237711Z","last_seen":"2026-06-18T09:52:41.237711Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/CggDooSd.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0aae63cd734dcc7ef3f1628b9387eb1","sha1":"4570b7cd04534fda284dd36fb7151c59d69bc471","sha256":"828ebf69a62ac5a0a3ed08e40957b7e051c02ba6361ba0becc876478d2bd2cf3","sha512":"c1319ae96d25d700fe7d87bfb21f71effb562d58978f1ffa7612e764028fb0bb1e338c0e1782ce28bc6fcac3e2bb068322f221b5f6d9af2b14675104bc4a2e17","ssdeep":"","tlshash":"e511274f01a900b8938a4dc685254174e580230a3c96d6c174af3f173fb84d35689771","size":913,"data":"","first_seen":"2026-06-18T09:52:41.189189Z","last_seen":"2026-06-18T09:52:41.189189Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/9DgUbVIc.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"17192f9f832feccb45cded543981cf5d","sha1":"b9a128d1dc546380d0baddc76cca45edfffb242d","sha256":"c7e8daa88e43279686a7b53b73205aadec314a1ef2412ca27ebef27d531b2040","sha512":"66e0098b2f2743233209b7f1a5036b4c58338a6326d83bec557c5da22f47bade9ce48084cf9ddf7ae4be96e571d3d63ae71b46b4aa30a561b1bff416a0a24f6f","ssdeep":"","tlshash":"f001fedaa941693502eddfc5922d9321a32002a9735a88c1607bedb71d08ef001bbd9d","size":701,"data":"","first_seen":"2026-06-18T09:52:41.213973Z","last_seen":"2026-06-18T09:52:41.213973Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/NVYtNWqq.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d36e6940c120c0c140d193d5009ce345","sha1":"99763a91ce30bee082c920f9d02e6ed91ebd4dca","sha256":"0d4b154c0b7d74febb087f54319d542070d110b8b716197ccffccb9e99e5a028","sha512":"314f85460a7a38418cff695b26904c290af9c09e50d6fcb670ff2c7be47b2bfd056a72f98d27dc641a07c4e04978f6b1e15b0ffeab52773f74ce36e52a3b9cbb","ssdeep":"","tlshash":"5df0db5e7142e0f1e2361191da47010a1f6917c460bb19ea216a578837d1d59d2b7d3f","size":625,"data":"","first_seen":"2026-06-18T09:52:41.109182Z","last_seen":"2026-06-18T09:52:41.109182Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/DI6dyA3y.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d451e4e2df3a051d1b674b2d9ff4c14","sha1":"46d6a6d422c58e656ed5f91b5c6cdf501fff6da6","sha256":"74e2af76214cd49644958c1d10494d7493ac584c2a6127f3bae42102eb00bc5e","sha512":"3c7e60d38cb747c5ca0ba6ceeec01d19d871d722b946f2bdce3fb628837c2d826a604a8baf8c6c72ac168a90a02167686961f497752b05d48d868684861d5f55","ssdeep":"","tlshash":"90416269b0f854b243b20ce165096f02615e4b9c322de0d17a4c4d8b9270f416bfddf7","size":2124,"data":"","first_seen":"2026-06-18T09:52:41.212507Z","last_seen":"2026-06-18T09:52:41.212507Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/WX0FrEFA.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"472c05de223348dbdf0d97b6de2b7c76","sha1":"9b504c16d6059b4a5f0e0ede27983290608193c3","sha256":"e6019571d671a6f62b522c215f61805b62d932a5bd7c873bcccbe50da5b1fbcd","sha512":"3d6779b675820b22241a1fd4125056ec90acd09f50e8d95658e243809e4815f0c119fa3ccbcf540b2eab14c43eebdab9b434d8e6a7dcff8fda420df63d482729","ssdeep":"","tlshash":"fa41125b3ef164325b191430a4970163d06a89caddadc710bb100caf355ae618ef2fdf","size":2124,"data":"","first_seen":"2026-06-18T09:52:41.15075Z","last_seen":"2026-06-18T09:52:41.15075Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/BjaoS0bC.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"91966d0e0f688dde3b6730cfe8d0a203","sha1":"62387d185c5cf97124d6aacd3968e222980f5563","sha256":"66a9a4e10555c5456d21fb91e0e8c21db66749a039bd4fd5fbc1c952c13ee8ab","sha512":"3430e1d80f1476b2eb766e1e3d6762e9183b1e696fe74936514f2088286dbf651d9490d56475220ead6997067c511b1c5c780e77ae1cd0e397e5f55d73d71520","ssdeep":"","tlshash":"6951411fe82c823881699df6d450843066ba0e9aa3e1dbb6e1ef4b351700cb0f2cd717","size":2896,"data":"","first_seen":"2026-06-18T09:52:41.067823Z","last_seen":"2026-06-18T09:52:41.067823Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/DBtxnSc7.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"51b201bd1ffd2e773492cd8dbb623726","sha1":"bb320cdb324fc2ee2155e24619c773f8f0c39fb0","sha256":"433e98b4ffb9b51ec7fa874b8378ad7b2fd55fc111b87b4ac4d5331fc7a503ce","sha512":"f2a9c9a564dfd624028dcd6c78dba8416980757e0961c345758199ce5d32ec6e7adc6e7556e259e39fca4d77a6ec5c5990e864403fa99141fc8dffb78f5b4c57","ssdeep":"","tlshash":"dcd05edb13807674121a45c5222faba8d3481aa9a256198183526d057a148e7c2eca97","size":247,"data":"","first_seen":"2026-06-18T09:52:41.187946Z","last_seen":"2026-06-18T09:52:41.187946Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/CfN6zuEu.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55d3f8b534b71d8479bf53acb975afe3","sha1":"a28ab448cc00114d2c97b4a3d953fb918ea97c89","sha256":"11c8b7571442a5004d5b8d0bfe9bf6a9c735c8381039ffe08cae01e4ece6c4a8","sha512":"75677de89941c33dd7e94063d37e04f2c085b2c5507c89e2267555de73782dfe7406fea4dc2ed6a69ad2fff3a30779e35fed6048400b667ec429bcd7c195ea5a","ssdeep":"","tlshash":"1901105db1b258117ff78685a9704004712079756308c3cc3d566deb6a2bd8a328afff","size":796,"data":"","first_seen":"2026-06-18T09:52:41.164902Z","last_seen":"2026-06-18T09:52:41.164902Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/CVfCJYqK.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"784c3a946d7c1bd2cae53057e6350e6d","sha1":"54163ef5eea15a2fbdc8202278f97e0894827432","sha256":"558c1afcd09ec26b5f964008c9fba5d1adbaa5e94fa110af3e98b0d0c3a07409","sha512":"a9b2cf60c19a3fe2335909649c26785a7e679af4019ce2296202069585273232b43197f00b9cafba04d7da2b4600f1dd1e08e59d365a393eec85d4518eab5f23","ssdeep":"","tlshash":"7a2132c4e1d361d68ad0198864a05024b12c0f177cacf5c1f4ab8d137827ae282fd915","size":1242,"data":"","first_seen":"2026-06-18T09:52:41.059246Z","last_seen":"2026-06-18T09:52:41.059246Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/DEtMMOBd.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b207c9d47611ec520cc4e2aa470ca5b","sha1":"55eaf0acead01fba23aecb3de88a9aac34647c8d","sha256":"02c16dcbd5dcda2442248f875c87801873760096a05045a8b277848884234ce5","sha512":"f5c26cb5cf9249579d119c4752b6cc2c190d6c432cf06177e6a9f76b0f8a6656c2d3bd1092fa8a0f6852f3a362541b73a5f9bf71f5bd6c947659fa0e90b5d8a7","ssdeep":"","tlshash":"9011404d3555dabacd764854802000aa221a9a2cb76315e1c3ec3d312f82490da0ff7b","size":916,"data":"","first_seen":"2026-06-18T09:52:41.233851Z","last_seen":"2026-06-18T09:52:41.233851Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/DPhSUX1g.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5347ca2dc66a613265e535530096cf6","sha1":"f192e29b08a7d3244053769ce6c683a36b963336","sha256":"0afb9f0db102213a4784e465f59be0d47ccd25b87c8584abf14e143ca56bbbc4","sha512":"cdf7559ef6b1b98b4530afb8a5dea1fdbc2d06dcd6495c8568418c924fd9397e74ab26bc2c6574f69d9652c0255d45c26ffa6bd1d5ef2339ae140f1e7e65a736","ssdeep":"","tlshash":"1d01fe0dbc69d0bab6d580b48431150056181a5ff734859c4288113b634f66197deb54","size":677,"data":"","first_seen":"2026-06-18T09:52:41.20312Z","last_seen":"2026-06-18T09:52:41.20312Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/js/pwa-load-event.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2bc483a317c2c87ac7473d5a865184cc","sha1":"e89f1be89f12756f4a6c8c602f054743a70bed19","sha256":"2230761f24483c5b391e8483f69a7a42e1bbcf87da3c1100656c436dfc83018c","sha512":"516f055d9f6690c6d8d04559ecb3a628ee44cfe86b164d7e7984f7b0d8bc72b910d44241a732d2b65e2307ac2017b27fe78dafb03a3f03b52c0eb21c1864f534","ssdeep":"","tlshash":"ced02b6483b8567004f142ab170b3f09217710936018ad105286180db88154b80f1ac3","size":238,"data":"","first_seen":"2026-04-15T20:04:00.635334Z","last_seen":"2026-06-26T20:23:29.938443Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/ls-cdn.amplitude/analytics-browser-2.6.2-beta.0-min.js.gz","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a81d9804ed47201de5314a7110e680be","sha1":"df58e208599843e46894e9c2bbfdf2feb2a985a5","sha256":"59dd69f4230f7535182747c17235fe4526d34826a142498485779bfdb5d617f1","sha512":"2c15805effa726a40e1b3156d003df4b5f602ab4c1b09b8897ff759d143c0a33a5eb7cc90887b850b1f209ccb05b7be263935ad805ad86383f88947d777fdb42","ssdeep":"768:p6wmsZPARRFO/J6zZsideR53I+dte7I4GWyihZurBJ8:/msY4/JceR54+zeU4GWyaZudq","tlshash":"f35372c9f6cbf0250393a5b8907f140ab33e7e9d242d4428f626d9d53c6d6499233bb9","size":66596,"data":"","first_seen":"2025-03-26T18:10:08.318249Z","last_seen":"2026-06-26T20:23:29.909592Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"Amplitude Logger [Error]: NetworkError when attempting to fetch resource.","filename":"https://gwfj18x.life/ls-cdn.amplitude/analytics-browser-2.6.2-beta.0-min.js.gz","line_number":0,"column_number":0},{"level":"error","text":"Amplitude Logger [Error]: NetworkError when attempting to fetch resource.","filename":"https://gwfj18x.life/ls-cdn.amplitude/analytics-browser-2.6.2-beta.0-min.js.gz","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/C1Pa_I6G.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.326Z","timestamp":1781776324326,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/C1Pa_I6G.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/BQCEykDc.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.433Z","timestamp":1781776324433,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/BQCEykDc.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/CnYQB88b.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.375Z","timestamp":1781776320375,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/CnYQB88b.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=aBOKG9dWehjO3Wyq; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-2e4\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":740,"size_decoded":1177,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (739)","md5":"33ccaec1649c752b6c4dbee63bc4d056","sha1":"fcefb2cce5b45760ef744749c092f81e32c2c881","sha256":"0bf93ee11be7e4c5037c49e98ecb5fb46fdcf9282afda708c4160c98d66bb0e7","sha512":"e182d1738893fb9f7e26ed782b8d0e1c6bc3f62d826f258484327efaa3c259b9b7d959730005c39be0ceb6f8b53c5da2bc72c666b8fbea62a8dd90a93e920b37","ssdeep":"","tlshash":"7901158d1c55e4fe42a3c8e44d6831041a1c05fff3f841f9c7e4e128e721452d635b24","first_seen":"2026-06-18T09:52:41.031583Z","last_seen":"2026-06-18T09:52:41.031583Z","times_seen":1,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":163,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/img/world-cup-26/logo.svg","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.442Z","timestamp":1781776320442,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /img/world-cup-26/logo.svg HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=oTf60mMvt1HvDRqi; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-6643\"\r\nexpires: Sat, 18 Jul 2026 09:52:00 GMT\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":26179,"size_decoded":6280,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1656860ddf765f947093c1503108d998","sha1":"49f74665024e2a1b9b5f72fe2c1aa085f229dcd6","sha256":"ca3d8f9988021ed75bc6666509c843fdd4542c5c93415b52ace27b1573367ccc","sha512":"3cdf87fd64755289fdc48f8eda0c66b6fde97dbe224368136fc812bf909d30baeb491ad98b44fd237fcaf0210c145f4b249c9fcdb844f281801d9bce2295ac71","ssdeep":"768:9OmFOm7OmFOmze74n7DyZhCWWDyZhCWPzM:97d7nn7DyZ3WDyZ3o","tlshash":"62c2d8b07a74d2fcf545d3f8ee0248613d9628e6ea8140d5c2d4ae2b843255edd2edd3","first_seen":"2026-06-02T03:08:49.098278Z","last_seen":"2026-06-26T20:23:29.868619Z","times_seen":8,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":411,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/casino-category-icons/xvoGroqcbRlbWm3uHmYiz9oKn1zczMvrVovKRsCF.webp","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.657Z","timestamp":1781776320657,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /casino-category-icons/xvoGroqcbRlbWm3uHmYiz9oKn1zczMvrVovKRsCF.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=QcExegtAkSNPEyj3; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg1_=zuXNDyVyhhTGmr22wxg2; Domain=.gtx-s3.cc; HttpOnly; Path=/; Expires=Fri, 18-Jun-2027 09:52:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 03 Jun 2026 15:31:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5284\r\nlast-modified: Wed, 03 Jun 2026 12:08:26 GMT\r\nx-rgw-object-type: Normal\r\netag: \"80aec6317e2f7d48145eab5f0a700151\"\r\nx-amz-request-id: tx00000c4728457e2d661c8-006a2048df-1a410d9c0-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1275617\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5284,"size_decoded":6300,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"80aec6317e2f7d48145eab5f0a700151","sha1":"6f51e83dbe22382c86a86d51e127838bbdd219ba","sha256":"6a0528d66784bb0062df75af22347250270134b5ba7bbe62ca32ba01dceab641","sha512":"acc995be352e4a0be54b6d4e9b1c921ee55f9305fa0f7adc5de36b835beebabb7c1041b176282332ed3c818a30345c3fc253cbb3eb81c776a3320a1a28a5a519","ssdeep":"96:iPiPXFY4/GopZiRjflL7e6UKg90JDJNX575pflvxHSNfKTpF8pgiH7MgH4TULsq4:6ebGtj9efKg2DJv75pdemMpgibtMUwq4","tlshash":"2ab16d3bd218d083dc600db2b5ff97bce9901d24ab394311618fcb1db994a6a5d6e226","first_seen":"2026-06-04T08:51:57.431716Z","last_seen":"2026-06-26T20:23:29.892696Z","times_seen":5,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":22,"send":0,"wait":76,"receive":8,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/casino-category-icons/WdaxFqtYhy5ncKFyn51U6mHHFcEfDJzkKRWkkNEB.webp","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:01.562Z","timestamp":1781776321562,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /casino-category-icons/WdaxFqtYhy5ncKFyn51U6mHHFcEfDJzkKRWkkNEB.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/\r\nCookie: __ddg8_=QcExegtAkSNPEyj3; __ddg10_=1781776320; __ddg9_=195.64.118.152; __ddg1_=zuXNDyVyhhTGmr22wxg2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=umvJpWLadSUKztXw; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg10_=1781776321; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 03 Jun 2026 15:31:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3908\r\nlast-modified: Wed, 03 Jun 2026 12:08:34 GMT\r\nx-rgw-object-type: Normal\r\netag: \"439b5063b284439fed7462d9b563fd9d\"\r\nx-amz-request-id: tx00000c7bbe64363287760-006a2048df-1a4096667-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1275618\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3908,"size_decoded":4819,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"439b5063b284439fed7462d9b563fd9d","sha1":"fbbb0a6f1c3377a1cfe7e679ad7c9ade16541be0","sha256":"be5bb32b70b0786eb27bab03fa894672906f008d4f8a19fc5cf1ff7b7b4ab0c6","sha512":"55efe354ef99a5e416cdb266852e93a6757bbc5dfcbeaea4667c979b249dac1630420b7ca70e01621f2e1a2a5320cb3223d6fd9a6dc780cc16303b33f0dd2480","ssdeep":"","tlshash":"f0815cc86c6b70c54ad0bf61d49c008951146adb36a07db8616c5f1b3555b3723c6e7e","first_seen":"2026-06-04T08:51:57.524593Z","last_seen":"2026-06-26T20:23:29.895929Z","times_seen":5,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/api/games/casino/v2/search","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.108Z","timestamp":1781776324108,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /api/games/casino/v2/search HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 108\r\nReferer: https://gwfj18x.life/\r\nRegion: RU\r\nOrigin: https://gwfj18x.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=0wDXFa0WR6KUl3WX; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/CLUH3AlJ.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.700Z","timestamp":1781776324700,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/CLUH3AlJ.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/BAd-uBme.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.410Z","timestamp":1781776320410,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/BAd-uBme.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ttSHibgHy3AMUTjC; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-408\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1032,"size_decoded":1405,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1031)","md5":"015ea0b1add75365bf0142babd4cde76","sha1":"56bc7a9506dd9f23b7303df16bbabe439f0c4d60","sha256":"9a26f1b6ed4cc8389f5f2ddc73112cfa773fb80ee061a8065cfca7b186f93f75","sha512":"2ff80fa7a8dd11faaf9106d9b4ebdf2b93ba38d6fd124f592ab4ae6f92d8184b355faed849688fa907b54773da2719fc59bb25b67af7b882663da11d5d53763c","ssdeep":"","tlshash":"9f1165b53c92f47dc329546f02619124d114132c3134eaf927ec256f245fcdb21d2537","first_seen":"2026-06-18T09:52:41.038108Z","last_seen":"2026-06-18T09:52:41.038108Z","times_seen":1,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":363,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/Blww8d_Q.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.415Z","timestamp":1781776320415,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/Blww8d_Q.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=mOiP8Z8PcwU9qXDa; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-336\"\r\nexpires: Fri, 18 Jun 2027 09:52:01 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":822,"size_decoded":1233,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (821)","md5":"614ebd675cb3ada7ba955fb6730bf046","sha1":"27c1b1fb26d6a262a3d6d2e2ccaaa49a5faf24d7","sha256":"17feb6b9c4c738ec9d5f8ccfb8e40c951937d55940a694ba3d28ca5312f13c8a","sha512":"83350c5ec6fd4558796d298ffa1a659b627d1efdd4cf638a0ead6705e29319863b15613f2e3791b99baafbafc2afc699e88a72076b93455ecbe4b350f8fdfa1d","ssdeep":"","tlshash":"b301fd4fee06ccb7414255add80a14222bc829afd6a1959550ff13221bb9d6af14e711","first_seen":"2026-06-18T09:52:41.03915Z","last_seen":"2026-06-18T09:52:41.03915Z","times_seen":1,"resource_available":true,"data":null}},"time_used":673,"timings":{"blocked":406,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/6KznmWpA.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.416Z","timestamp":1781776320416,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/6KznmWpA.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=cgEkLgyJPYZ7j3cn; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-34e\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":846,"size_decoded":1222,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (845)","md5":"efbd6e90cb829030f6cf66021b7c408c","sha1":"07a72c8df89c987b28109e065cc1bb285e00da9e","sha256":"33888b5a1dec7ce8f217ec1e0791c9760db536ca55392a840c3e596e6afe205d","sha512":"de176345ac4f40b40697d153da070577df7f1a564e123d78a403b2aa6d9602397e801827c778eec3767115e5638a9bc3f90500539e9d8432583c8abbf54b5cb6","ssdeep":"","tlshash":"b601ab0edd5986bd8065009edcab0529661c2eebc2b0849352ee5a149b3c4f8f20df2d","first_seen":"2026-06-18T09:52:41.040307Z","last_seen":"2026-06-18T09:52:41.040307Z","times_seen":1,"resource_available":true,"data":null}},"time_used":513,"timings":{"blocked":425,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/img/home/lobbyCategory.png","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.454Z","timestamp":1781776320454,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /img/home/lobbyCategory.png HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Ezul7d9RrwY4FriL; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg10_=1781776321; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 1486\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: \"6a3290be-5ce\"\r\nexpires: Sat, 18 Jul 2026 09:52:01 GMT\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1486,"size_decoded":2173,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced","md5":"cf14ddfe73464c9c75f2f3295de55bb5","sha1":"4a9eb16538551b4c81323b30ae368748a3755bee","sha256":"2062857085cd661e89c47d26006ad0b9308f4e7861e1a758febcfa099d7f4b2a","sha512":"4b737af49c592ea7efa1d9a62fc8da5698ff39405cbfe4e92f24c37e070a77fc04f2d71308439d61a11ceb653578c4f0b7f8d24c90ca619f41cee55ab6a37cac","ssdeep":"","tlshash":"0e31f7e81b429d4c0a9b8b972a1203a020aa252bc503e705ff961accce7e94c62f7013","first_seen":"2026-04-15T20:04:00.505407Z","last_seen":"2026-06-26T20:23:29.894114Z","times_seen":40,"resource_available":false,"data":null}},"time_used":660,"timings":{"blocked":544,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/fonts/icons.woff2?v=1629439516391","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.624Z","timestamp":1781776320624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /fonts/icons.woff2?v=1629439516391 HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/_nuxt/entry.B59ZjaW5.css\r\nCookie: __ddg8_=hZYU8H3onePqDyKk; __ddg10_=1781776320; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=2yb2X3JvS3hXiAb2; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg10_=1781776321; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 9324\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: \"6a3290be-246c\"\r\nexpires: Fri, 18 Jun 2027 09:52:01 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":9324,"size_decoded":10025,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9324, version 1.0","md5":"fda09e7500d3a2867129d2ed80c57583","sha1":"d871428e4c47c45f3cd7232c489442943ed079ac","sha256":"fae8a414803516ee3ce7076358411be3ab4fdf1f68c8b9dee7e76802bd3aefc9","sha512":"94bae208ea5a0b8b9a6c04bd845247c59503852b42c32fa1a8e5833859dd963d3a1b26da5d3362babb5185206de0c05380fb3be080229284555f2e81d9f96485","ssdeep":"192:XlV9RVDfOg6KUzP++NzEsfO/aL+rNHxUQqj/qzT5SlrDuZYoh0:VV9RhfZ6DzP++tEsW/G+rNHxUQq2RAmW","tlshash":"8112cfbfb53be2a1e0f27d78141adb5259df317842fd0b781006313567f4b65a042532","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-06-26T20:23:29.819246Z","times_seen":134,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":509,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/ls-cdn.amplitude/analytics-browser-2.6.2-beta.0-min.js.gz","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:01.740Z","timestamp":1781776321740,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /ls-cdn.amplitude/analytics-browser-2.6.2-beta.0-min.js.gz HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=AU9eYNLONZBq7PrR; __ddg10_=1781776321; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=XyAEHDLXxkgSd26T; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg10_=1781776321; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Mar 2024 00:42:57 GMT\r\netag: W/\"7300cb5f3b4294338b104c0f3268002f\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nx-amz-version-id: IogUhwUfPmM04el12d60iABuuT4mFuey\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: AMS56-P1\r\nx-amz-cf-id: sw07Fb7mOyvMAtsvKqe_xBbum-10m3M24EPsnqoEmHHuE5TgDwqpVg==\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":66596,"size_decoded":18620,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a81d9804ed47201de5314a7110e680be","sha1":"df58e208599843e46894e9c2bbfdf2feb2a985a5","sha256":"59dd69f4230f7535182747c17235fe4526d34826a142498485779bfdb5d617f1","sha512":"2c15805effa726a40e1b3156d003df4b5f602ab4c1b09b8897ff759d143c0a33a5eb7cc90887b850b1f209ccb05b7be263935ad805ad86383f88947d777fdb42","ssdeep":"768:p6wmsZPARRFO/J6zZsideR53I+dte7I4GWyihZurBJ8:/msY4/JceR54+zeU4GWyaZudq","tlshash":"f35372c9f6cbf0250393a5b8907f140ab33e7e9d242d4428f626d9d53c6d6499233bb9","first_seen":"2025-03-26T18:10:08.318249Z","last_seen":"2026-06-26T20:23:29.909592Z","times_seen":142,"resource_available":true,"data":null}},"time_used":582,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":582,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/DTPBPF3r.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.963Z","timestamp":1781776322963,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/DTPBPF3r.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=BWR43tLTgHpUax8Q; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-3a3\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":931,"size_decoded":1263,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (930)","md5":"f3c3a6261146e85ec018ba104ef01a3a","sha1":"aeb4187bcffb479a6ba68e51ce07219f84ed3ba0","sha256":"c0978902341748507ce5bfaa22f14c0675b7408013a227b2b143559686db400b","sha512":"4edd61310bb0a9a9f1daf87fe3aa5e238b1fc46788553407293f847003a82dafff9c4b54a2f29c99958a5616e1ca020855e1636da433a773ddd3f5291392978d","ssdeep":"","tlshash":"7e11638cf849cf745721eca425260411f98c0e8c763445c0d0f09a914b8cc68a7edb6a","first_seen":"2026-06-18T09:52:41.048448Z","last_seen":"2026-06-18T09:52:41.048448Z","times_seen":1,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":209,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/BypTfZp-.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.324Z","timestamp":1781776324324,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/BypTfZp-.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/fonts/new/Eurostile-Heavy.woff2","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.619Z","timestamp":1781776320619,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /fonts/new/Eurostile-Heavy.woff2 HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/_nuxt/entry.B59ZjaW5.css\r\nCookie: __ddg8_=hZYU8H3onePqDyKk; __ddg10_=1781776320; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=OUOHd7t2zmRJt4EE; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg10_=1781776321; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 41120\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: \"6a3290be-a0a0\"\r\nexpires: Fri, 18 Jun 2027 09:52:01 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":41120,"size_decoded":41822,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 41120, version 1.0","md5":"d1958ba67212d73de425889587c7262b","sha1":"5212f98ffc6aaa07dfa1cd4b3cf8652c6e02c318","sha256":"d60991165c1443ea7c965cf379d4a8ac285621f6c5f38b33c740e78b1f693f8d","sha512":"2f9b292bfb88a282837c9c375286a8c97af0258fb7d7bf9d87589c9cc1611c8f0a1c5958475c54462dbe781448547186896af0b8daa6b83033e92f31d41f864a","ssdeep":"768:CSRZGXxUYpnCwBF7T/gh1qmcrUSJbaCfOlKqeXWqa+mLt66Mz:rzSUYZHTYh15crUAfADU6E","tlshash":"0003f16814a9766cc07b85fcbefca177efd457be01a97184f43891a36c2869335b3104","first_seen":"2026-04-15T20:04:00.573048Z","last_seen":"2026-06-26T20:23:29.930782Z","times_seen":42,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":489,"dns":0,"connect":0,"send":0,"wait":82,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/Badge.BazMPmo4.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.345Z","timestamp":1781776320345,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/Badge.BazMPmo4.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=h36g5FXLnuvWnCik; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-5af\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1455,"size_decoded":1162,"mime_type":"text/css","magic":"ASCII text, with very long lines (1454)","md5":"1a94c43f6398194b45c292c5a187f23f","sha1":"b76330e15d8fd66310aab883484d1117908fbca6","sha256":"67a9d8d8b60d8d1c70b2130f073a3d131cae862cc7e3a6e57a3aabfea7e53a85","sha512":"0ad000d3856e1e086fb1008196268eea2e96ef8c749de6951565efd22487ca989a244931160933f089b6b23a0af6af8d7ffd3059e66060d95163ba2269e3b95e","ssdeep":"","tlshash":"d6317bfcb078d2397b7364695719b55c4505a9a6cb230fecfec2a81549c3ee231d2702","first_seen":"2026-06-06T23:27:45.175162Z","last_seen":"2026-07-06T16:03:04.16749Z","times_seen":6,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/fonts/new/Eurostile-Regular.woff2","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.354Z","timestamp":1781776320354,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /fonts/new/Eurostile-Regular.woff2 HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=NivaaqqQmrRprYJ4; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-a37c\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":41852,"size_decoded":42653,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 41852, version 1.0","md5":"45f880f69689f4933e8ebbea0f653f8e","sha1":"1ddbde227e90d6869a728c7cdf6e46263b8596f0","sha256":"c1fc31d25b923e8f17aba93706b829a433bd1c4a2bd76fae6513643b7e90e469","sha512":"0d266ac863a5c540dc1b69c95500c2da721f3ea6c138aa99fdf5259ed08765bd6fbc3cc4149a81e7b9994bba7ef6a63b39b9b609b28d25b47e170889f4de113b","ssdeep":"768:Z2ddeMHR9b4FS8wXfEO1qbvthlXm5YLWNDOVJN1qnik:dW78wXfJ1qjtHmWCVh","tlshash":"b613f1b742e51c73a4ad2ef115b1dc8684dfc5e74f4325c156e15280e0eaefa9e50433","first_seen":"2026-04-15T20:04:00.658067Z","last_seen":"2026-06-26T20:23:29.882991Z","times_seen":43,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/Dn5g4Jwc.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.403Z","timestamp":1781776320403,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/Dn5g4Jwc.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=tBQqrkhy5Ptif53z; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-19693\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":104083,"size_decoded":43452,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4c502b48770c8a6aec34b41533b1a45b","sha1":"8ae20d9d5f3804b1174f7b264c4f63404c930dac","sha256":"305b8b969023f072c148a6750398f1efedb4fab49d5232223856ed9e171fada1","sha512":"0ee8a0fb870dd9aa8c3dda40c29f2737fdcd7d474daa3d7b290e6030f4f9f0ddbf0341fb6bec9d384fa200ad6156562db9b638ab3fffbe23226e10333e1cd3a7","ssdeep":"1536:t9LVosJv1YsjqVGKrpejHnNHhtyxzukH1cCLOtyOAZVPZFDkD3qdJh96loX1Q8r:tddJvOsW38dXQRPOty7PnALqdb960","tlshash":"37a3e6dd7282b022429676a4443f190bf237ac94780e491cf229d9d93d7ce8951bff7a","first_seen":"2026-04-29T18:04:07.270246Z","last_seen":"2026-07-06T16:03:04.21139Z","times_seen":36,"resource_available":true,"data":null}},"time_used":422,"timings":{"blocked":329,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/img/sidebar/wheel-of-fortune.webp","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.448Z","timestamp":1781776320448,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /img/sidebar/wheel-of-fortune.webp HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=yHfOcPYAUk63mjAp; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6542\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: \"6a3290be-198e\"\r\nexpires: Sat, 18 Jul 2026 09:52:00 GMT\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":6542,"size_decoded":7231,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8b65ebca97ad7bfb24fe2cf6dba797e1","sha1":"403af9d321491654a7d0bbecb0b35f5e16cc4ad6","sha256":"92c432520878284b1a8c910c321004814dbdeb3dc3af7eb9bd9b82cf9ee8a5c6","sha512":"1f48c293330ef19497216e14a5e084003e87990d69b8d14257504eb88563ecf60400c26a6b4b6ea30746706d0ceb18520952c619d774c0fd198a0c95e1853e0a","ssdeep":"96:MawuZp9fCEQM/Xyp1arfovnneNzLbXIBpBPmS+sM0gK3uWhsvYQLQPicQO9K2Y1e:vpkg/Xyp1arfieNz/g9+90SQPnZfz","tlshash":"a7d18e8b631afa21643e8c9a5c9910f1c58d3fac8355d94da2a0e33154c6c76733ccb8","first_seen":"2026-06-06T23:27:45.18619Z","last_seen":"2026-06-26T20:23:29.849355Z","times_seen":4,"resource_available":false,"data":null}},"time_used":757,"timings":{"blocked":482,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/img/os/windows.svg","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.640Z","timestamp":1781776320640,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /img/os/windows.svg HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=C41czKsqHLEbOJ9m; __ddg10_=1781776320; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=WFfZWUXhr81ONUkw; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg10_=1781776321; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:01 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-55d\"\r\nexpires: Sat, 18 Jul 2026 09:52:01 GMT\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1373,"size_decoded":1219,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6e14178597c53ba6d31d676a671369eb","sha1":"6fd30e86437ef3c211f04bb11ca181b4cf86901c","sha256":"0be224f5dd68025f7d945f56025b7ef3f2ee82181c226396439de7debfc64d15","sha512":"631773e6b0d7efec5cf23b6b5ded1cce89d0c3368ca2dfded6a9b634f3c138202e74ee55cac68d7162584cc60a9e8c1e72f0c19bff61edb79749c0a7917f351f","ssdeep":"","tlshash":"ef2136ebe3e8d600e1c793612050bd307b2a999ac3c6c6f04230bbe53d18955ac4e2e5","first_seen":"2026-04-15T20:04:00.589108Z","last_seen":"2026-06-26T20:23:29.869203Z","times_seen":42,"resource_available":false,"data":null}},"time_used":657,"timings":{"blocked":571,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/button.php","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.697Z","timestamp":1781776320697,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 00:53:21 GMT","end":"Tue, 28 Jul 2026 00:53:20 GMT"},"fingerprint":{"sha1":"A1:C6:95:D4:3F:23:C6:14:BB:AF:4E:0C:DA:A4:6A:1C:79:1C:46:F3","sha256":"3C:85:97:4C:BB:16:EB:31:3C:8D:A8:54:47:26:AE:B0:57:5D:80:C9:CC:0C:1F:C1:89:DD:38:C9:C6:53:37:38"}}},"request":{"raw":"GET /button.php HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 18 Jun 2026 09:52:00 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nConnection: keep-alive\r\nX-Webim-Version: 10.7.164\r\nEtag: \"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a\"\r\nx-prt: 8360\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":335,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"325472601571f31e1bf00674c368d335","sha1":"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a","sha256":"b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b","sha512":"717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc","ssdeep":"","tlshash":"bf900003ea80c002c2a2c0300e0ccb802b88b0308a28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-05T06:29:39Z","last_seen":"2026-07-26T20:31:43.81747Z","times_seen":95182,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":45,"connect":20,"send":0,"wait":21,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/CVfCJYqK.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.914Z","timestamp":1781776322914,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/CVfCJYqK.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=EDpFlhsE5NdKOVAq; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\n__ddg10_=1781776322; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-4da\"\r\nexpires: Fri, 18 Jun 2027 09:52:02 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1242,"size_decoded":1487,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1241)","md5":"784c3a946d7c1bd2cae53057e6350e6d","sha1":"54163ef5eea15a2fbdc8202278f97e0894827432","sha256":"558c1afcd09ec26b5f964008c9fba5d1adbaa5e94fa110af3e98b0d0c3a07409","sha512":"a9b2cf60c19a3fe2335909649c26785a7e679af4019ce2296202069585273232b43197f00b9cafba04d7da2b4600f1dd1e08e59d365a393eec85d4518eab5f23","ssdeep":"","tlshash":"7a2132c4e1d361d68ad0198864a05024b12c0f177cacf5c1f4ab8d137827ae282fd915","first_seen":"2026-06-18T09:52:41.059246Z","last_seen":"2026-06-18T09:52:41.059246Z","times_seen":1,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/DV8G7pGV.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.395Z","timestamp":1781776320395,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/DV8G7pGV.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=xjEhbuVgcaBGXWSZ; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-a0c\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2572,"size_decoded":1564,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2571)","md5":"db65e0026e36921c1512afa2c99407ad","sha1":"8e85b550cdf6ae134b43e2ca21df7d142de5f06d","sha256":"e3e848972e9c6dacbf4d00f6f211e62eda2315cf4f791a5b4017cd407a256366","sha512":"17f85ea8ad3a497805b6566d4ad293680101b30d697f485123f6a43fe5e8e98b4ebd3d49b97c3632f7d4f1b62ec42a129e22535baf6ffd5f61457889f78e4f30","ssdeep":"","tlshash":"4351cbb5ba82f4a5285eb7ef4c8d5504d02c700ba41e82ccfc8935043a2659fb756fbc","first_seen":"2026-06-06T23:27:45.068111Z","last_seen":"2026-06-26T20:23:29.950521Z","times_seen":5,"resource_available":true,"data":null}},"time_used":407,"timings":{"blocked":324,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/Tab.BOH2EQL4.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.947Z","timestamp":1781776322947,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/Tab.BOH2EQL4.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=HxPSdx98cdfuWgUX; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-4ff\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1279,"size_decoded":1160,"mime_type":"text/css","magic":"ASCII text, with very long lines (1278)","md5":"396c567460abe6e3874fc940b150e785","sha1":"aa8340c3b77de7e49c297f7a37c1fc72c9b9cba5","sha256":"4c52947121de4a5925eca48da3a7100d4f47110e3b9a2897beb3261a6a3825c3","sha512":"06f2b40189be1845846c483d7e6742b4e6fa2dbe6116755889f7f886e84c97e33f0ee60e998178e15ac881b2cdf8328cad76d6889eec6fa7c76509e0a4697dc4","ssdeep":"","tlshash":"f721cef1650412947623c2d0d5d2ca82732cb84ec033ae9ee0dd74d584cfae72dab657","first_seen":"2026-06-03T11:08:15.309263Z","last_seen":"2026-07-06T16:03:04.188967Z","times_seen":8,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":298,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/CurrencyIcon.B23I0gqc.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.950Z","timestamp":1781776322950,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/CurrencyIcon.B23I0gqc.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=rgMkgHqoijbvaUAO; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-264\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":612,"size_decoded":941,"mime_type":"text/css","magic":"ASCII text, with very long lines (611)","md5":"2690c9ab6f33be3e4c1d1c8b57a9b19c","sha1":"57bd229c042f3f979b6760b5a21a32a5d7312c9d","sha256":"9c9aed7ddec531bb7c52694d25e82b2ed61da9a23e0f014c0998df3286112656","sha512":"842d24df71989926e65987f33ce447407193aa175e117bcc82a78a33f74c6fd7e8fa56b7003176a7bfb971f371a56ce60fcfa052e0c65c9c95e1961c76796527","ssdeep":"","tlshash":"86f0a2a88a08257cd733d484a0125ff87232f72ef68706c840482a350371243657ffb2","first_seen":"2026-06-03T11:08:15.197161Z","last_seen":"2026-07-06T16:03:04.161613Z","times_seen":8,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":185,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/-pt0boNG.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.957Z","timestamp":1781776322957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/-pt0boNG.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=jzBChFW9vFvsyezD; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-4bd\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1213,"size_decoded":1476,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (620)","md5":"aa448e3f102d4615a4d8799bed108133","sha1":"ccbe036735aa94eeb7115d2c1126fc1323c832ce","sha256":"d4f85775b0ac1cb357c3a702aea808872b4bc46fd678f357ee4a189560d28e37","sha512":"8b086f69eccd0ce8a291895e8f185925c0f80208a423967e5f7327fd5f01ebac428ebf38dcfc6f83a527e1a9ab6ebcd5c40bf7dcad167d1895fb61ea4cd97c68","ssdeep":"","tlshash":"2321ea35f8fa217a133660e580fd8285936d6b79f469c0e0b67c5e0b09a5dc3c8f7268","first_seen":"2026-06-18T09:52:41.065981Z","last_seen":"2026-06-18T09:52:41.065981Z","times_seen":1,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":202,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/BjaoS0bC.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:03.894Z","timestamp":1781776323894,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/BjaoS0bC.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=rhGZmYlzQlW71vhJ; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=AE1xE3srWLWu8tgp; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-b50\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2896,"size_decoded":2276,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2895)","md5":"91966d0e0f688dde3b6730cfe8d0a203","sha1":"62387d185c5cf97124d6aacd3968e222980f5563","sha256":"66a9a4e10555c5456d21fb91e0e8c21db66749a039bd4fd5fbc1c952c13ee8ab","sha512":"3430e1d80f1476b2eb766e1e3d6762e9183b1e696fe74936514f2088286dbf651d9490d56475220ead6997067c511b1c5c780e77ae1cd0e397e5f55d73d71520","ssdeep":"","tlshash":"6951411fe82c823881699df6d450843066ba0e9aa3e1dbb6e1ef4b351700cb0f2cd717","first_seen":"2026-06-18T09:52:41.067823Z","last_seen":"2026-06-18T09:52:41.067823Z","times_seen":1,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/Icons.D0xY2eUe.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:03.899Z","timestamp":1781776323899,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/Icons.D0xY2eUe.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=rhGZmYlzQlW71vhJ; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/casino/games/GXLn3IXOO20Q4AgggSA9pTbXHUsIYfeQvcENQan6.webp","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.099Z","timestamp":1781776324099,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /casino/games/GXLn3IXOO20Q4AgggSA9pTbXHUsIYfeQvcENQan6.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nCookie: __ddg8_=3af5uSeexqo8p6eg; __ddg10_=1781776324; __ddg9_=195.64.118.152; __ddg1_=zuXNDyVyhhTGmr22wxg2\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=9LnhJgAIIuqSNAcM; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:04 GMT\n__ddg10_=1781776324; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:04 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:04 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 07 Apr 2026 15:20:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26606\r\nlast-modified: Tue, 24 Mar 2026 08:49:29 GMT\r\nx-rgw-object-type: Normal\r\netag: \"eb2c6e9919b1128f6d3093ead843a7c0\"\r\nx-amz-request-id: tx000003e91db34b9563fcc-0069d3bf71-1a40e219b-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 6201124\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26606,"size_decoded":27518,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 287x193, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"eb2c6e9919b1128f6d3093ead843a7c0","sha1":"497047962518db88e7fa1e1fdf93818289ba5092","sha256":"84af5a5da75a17ee47756bd3639dea1e3f9c740fc5f574f2294c040d6cf0ca1e","sha512":"047fa5bd7f810b9bbe237976645db165e75174513eb4b4c7caddad04f5553a9536ff224737f89bb8dd5c0e130ee23730ab1a0b37f14e96724e5343053db3560a","ssdeep":"768:x5cXzIXWGeqK9YimUV46H/7/qriLbq83F06:CIkdf7/X3q8i6","tlshash":"97c2e18bd37bcbc01a402420d657a4ac2f41959aba7923fe53fe867ca73d9c45938920","first_seen":"2026-05-02T11:32:35.048374Z","last_seen":"2026-06-18T09:52:41.071066Z","times_seen":4,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/gqWS0WvA.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.415Z","timestamp":1781776324415,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/gqWS0WvA.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/eoyIKNe7.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.378Z","timestamp":1781776320378,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/eoyIKNe7.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=UripjZEEIar6WHGI; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-353\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":851,"size_decoded":1205,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (850)","md5":"de0231a8bf072367c5fb2b81b73430d0","sha1":"848c75ef019bb14d52001c2032fccc1613faacfd","sha256":"f6b2eca0916a2efadf4e5a8bf09e1ecb825ff26c7c48dfb51536c9e0fe315b05","sha512":"9f7ad95a70f9ccac9dc8035525f643b95f0de7c15673a1780bfe4afa48212d4041abc7b79e5489c7e07bc40fca80b82a92aa32ee3c569b9226bb09ef5c4deefc","ssdeep":"","tlshash":"a101168dac2cc63f8b43065d4061250006481dfeae7524f291d32e25db3cee5624afe4","first_seen":"2026-06-18T09:52:41.074437Z","last_seen":"2026-06-18T09:52:41.074437Z","times_seen":1,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":195,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/img/home/play-icon-small.svg","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.570Z","timestamp":1781776320570,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /img/home/play-icon-small.svg HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/_nuxt/Home.CZbStT8L.css\r\nCookie: __ddg8_=dooV9iasJ6hwdshd; __ddg10_=1781776320; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=WnxysNOSB1GtSgtT; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg10_=1781776321; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:01 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-18d\"\r\nexpires: Sat, 18 Jul 2026 09:52:01 GMT\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":397,"size_decoded":951,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"92d85118bb2983429ab0b8348d5bbaa3","sha1":"a04e71df06cc82e500e6c26fdd3f368489371763","sha256":"ce446c57752855351a47bc167729d24d5dc702cea679dca30f1610ed5bc1706d","sha512":"e64c2b7f679ab88eb15beaba65137541984d8aa8ab372883f27ff12af70c157dfa956c3e345c926c2328e68343c1b16135eab8f3301d4bdd25d1f08c70220e88","ssdeep":"","tlshash":"83e0613963b4f2c44c000b15f92cf9b62cba34d2a2950bed9f40ba45696049e2d1d7bc","first_seen":"2026-04-15T20:04:00.512103Z","last_seen":"2026-06-26T20:23:29.830643Z","times_seen":41,"resource_available":false,"data":null}},"time_used":657,"timings":{"blocked":533,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/apple-touch-icon.png","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:01.938Z","timestamp":1781776321938,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=AU9eYNLONZBq7PrR; __ddg10_=1781776321; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=h2CYQPgSEDC21icj; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg10_=1781776321; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 5476\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: \"6a3290be-1564\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5476,"size_decoded":6186,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"b0fd6219c3cc6542ac16de5fb1a803e5","sha1":"32e23eec5c195ebb1288a30e3eb88fabef54d68e","sha256":"3de26349c4bfab8a20055a516f6a01a3e26870922b5e158d25b222150248bb9f","sha512":"ca31b6c5eed2c86716e420501bba2bd940b0b74627e9acf6c535e1391dd518851aaa699484966b2c9b463af4b84fea8a91072966e6d355f12e7bbd7e04b724a8","ssdeep":"96:TitXRWWOLtp6cCMcakSchLRel2CgQ+dwmcwveg4tjvR8VRtvS:TUoWOLPIaihg29dwAv5Vi","tlshash":"b0b18db839459902eec1e13923565bd0af3111a036012c4a136fc9375b147a23abbfdd","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-06-26T20:23:29.98019Z","times_seen":156,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/banners/7RXJ1TC9TuxiBkVoBiXSwyNV0vibUEClmjC7WY5e.webp","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:03.640Z","timestamp":1781776323640,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /banners/7RXJ1TC9TuxiBkVoBiXSwyNV0vibUEClmjC7WY5e.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nCookie: __ddg8_=5qvDLiQRX6MLnQbe; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=zuXNDyVyhhTGmr22wxg2\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=N4GyLJn1cvmpfgjE; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 28 Apr 2026 10:55:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17058\r\nlast-modified: Wed, 25 Mar 2026 12:40:50 GMT\r\nx-rgw-object-type: Normal\r\netag: \"5ed8da6e0b8b5bd08e5413498184485a\"\r\nx-amz-request-id: tx0000006ce29e5f709171d-0069f0921f-1a40e210a-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 4402597\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":17058,"size_decoded":17970,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5ed8da6e0b8b5bd08e5413498184485a","sha1":"bfefae71acbf774ea6529893c2139ae007e6c927","sha256":"7c9b9c0e5db578006d5c2f8f1d5556bbfbbf767b32bb2e49ec7583b51a0ef038","sha512":"8ee56e3e2bfb7dcc43bd0b5263470f438a39d313dfbac7403bf7dd322524e50f82794b95a38152230ea68f3044c9e12e778c6d723325b55e0c8616821fc14d48","ssdeep":"384:pSuWiQSPVVLb/EvOdvzQRzuJOSL3S7EO70Uc+:gDSPVVLb/ECzt3/O7dc+","tlshash":"8f72e012ab0ffd1fca6123ee5245daa76bdf0b84120f097ef44c50b9aef4205f505680","first_seen":"2026-06-03T11:08:15.168747Z","last_seen":"2026-06-26T20:23:29.821945Z","times_seen":6,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/api/games/casino/v2/search","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.276Z","timestamp":1781776324276,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /api/games/casino/v2/search HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 108\r\nReferer: https://gwfj18x.life/\r\nRegion: RU\r\nOrigin: https://gwfj18x.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/index.BuqocwVr.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.337Z","timestamp":1781776324337,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/index.BuqocwVr.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/Card.DAsEjLcg.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.428Z","timestamp":1781776324428,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/Card.DAsEjLcg.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/CuWAKboT.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.393Z","timestamp":1781776320393,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/CuWAKboT.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=3ZV8JZj8wfwjaHTm; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-9ca5\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":40101,"size_decoded":13669,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"57041243cfccdaafa5f2ba79c8d35755","sha1":"922e7fdb03bd07a0157ae1246686a0fec51dfd49","sha256":"5d0388814e88cbdd0982ad9c60d8689f8760399afac3f2b1c27f1f2796a81a44","sha512":"1dc576ebd5fc6417ecb76cd5e415916a0d1f4feaa92f381d6ab6891d9ddcbf368aad660e585bb7bb50efb944c236123f29bee4ae91f292772fdf2f4362db0d2f","ssdeep":"768:kC43aMGkQtDCPB/HyzE0qcq7yxP2C7dSlSxkPut06BcftOasz7EhQUPN/iiB8oDZ:740xtywcV3iIX","tlshash":"8603f9c8b260506583e2a1a390750203f33999153409855cbb2ceefbad7eeda7177f75","first_seen":"2026-04-29T18:04:07.457202Z","last_seen":"2026-06-26T20:23:29.94679Z","times_seen":35,"resource_available":true,"data":null}},"time_used":404,"timings":{"blocked":316,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/C8dc1RME.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.409Z","timestamp":1781776320409,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/C8dc1RME.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=toXsYvJJQwHtpvaP; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-175\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":373,"size_decoded":975,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (372)","md5":"5398b04e70fe7ec1e1da0e931b793783","sha1":"258ea7be50a04877de6218a91f8127380be33070","sha256":"1b40bbf42a615519b16c3153dbd0fcd94b32662090641ddd67ef421a50b2a2c5","sha512":"eac3e2d7a292fb1de110cd963d7bddde80ec4237d3a029ec99f5972a58d304edb6bc00714a476c0319b4d3eaad57111f12a48d153d4272fc6f288ea13c499c5e","ssdeep":"","tlshash":"03e0d8a6b6626fb4d7184e1001e95c51f0304a09eacf4fbbe35e1fd2552ac4a8275d8a","first_seen":"2026-06-03T11:08:15.085639Z","last_seen":"2026-07-06T16:03:04.218332Z","times_seen":8,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":354,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/img/sidebar/coin-x.webp","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.447Z","timestamp":1781776320447,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /img/sidebar/coin-x.webp HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=92GOBWSu414TBBZA; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5304\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: \"6a3290be-14b8\"\r\nexpires: Sat, 18 Jul 2026 09:52:01 GMT\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\nage: 1\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5304,"size_decoded":5993,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"44028be47bfa1d5ff42a159bd20019c0","sha1":"db18cd5b56c32abf5ad00512777b9554202302ea","sha256":"6763668950ac4c969d7b0c2088355e785a1393a2a2f9432a6bbd9bc9e31c716b","sha512":"7d957b8301723bda00e376147eb0492f372494bd173a41745715e9966d92bfee3b8d8013617b051738ae89c8ff0f8fd11cf2f31dc691fdc9dc3684e7c71af0c6","ssdeep":"96:C64jF6XfA/1yX5Akoyk8xCvGyF71amyUL9jwO9B3pA/0ME7taUTfrZFeq:XQkA/PtDfuMCOe/pE7tRfrZEq","tlshash":"7db19e4da6c9828140e1b3f0e1a5377c54923ba6ed1ecb013d8d1da83f50843b7b9b90","first_seen":"2026-06-06T23:27:45.148927Z","last_seen":"2026-06-26T20:23:29.965634Z","times_seen":4,"resource_available":false,"data":null}},"time_used":644,"timings":{"blocked":433,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/fonts/roboto-medium.woff2","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.623Z","timestamp":1781776320623,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /fonts/roboto-medium.woff2 HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/_nuxt/entry.B59ZjaW5.css\r\nCookie: __ddg8_=hZYU8H3onePqDyKk; __ddg10_=1781776320; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=PDgcMwUnISkCTupZ; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg10_=1781776321; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 87352\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: \"6a3290be-15538\"\r\nexpires: Fri, 18 Jun 2027 09:52:01 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":87352,"size_decoded":88055,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 87352, version 1.0","md5":"7980f1fa01343f21b6d4c63d1342850b","sha1":"72ebb9e79b847152e88b871cde64e37d764cb1c9","sha256":"e054ff070edbcd5c5d7de2f78a94e74632f10409c3043d46d304dc826b8f35ac","sha512":"be301857afe937262ed0b14ee04bf0450a6911bcb0644e040b59e5c0357dd7a30dc6be1666d95aca8b1168921c0eb9f6b8696f401c7dbc527ca06d81f7384493","ssdeep":"1536:rs3SLLpRiUyHq2TwOh4blrGa7uUhypipG/kBTC81bArdvEz:rs3SLLpRvyK2MOh4bjsp/kBX18rC","tlshash":"a58312a1c7975f90cefea9a4d73f2cb8a6242c349fc217e9942b16055220fc076f92d5","first_seen":"2026-03-20T09:36:22.247329Z","last_seen":"2026-06-26T20:23:29.969493Z","times_seen":37,"resource_available":false,"data":null}},"time_used":700,"timings":{"blocked":504,"dns":0,"connect":0,"send":0,"wait":87,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/api/middleware/registerPageOpenEvent","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.834Z","timestamp":1781776322834,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"POST /api/middleware/registerPageOpenEvent HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 175\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nRegion: RU\r\nOrigin: https://gwfj18x.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=j359yD0Xkk19IDXg; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\n__ddg10_=1781776322; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:02 GMT\r\ncontent-type: application/json\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\naccess-control-allow-origin: https://gwfj18x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: eac97aeb-215f-42d3-8909-f4115f5406d3\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":16,"size_decoded":906,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-07-26T20:31:43.859128Z","times_seen":178209,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/Cmn7f-VX.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:03.875Z","timestamp":1781776323875,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/Cmn7f-VX.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=rhGZmYlzQlW71vhJ; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Cmm7idxvgneRlOq3; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-867\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2151,"size_decoded":1895,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2150)","md5":"da6cec4dd2b79b6ce3dc7efb82b0ccfa","sha1":"9aa34757534a5b1a1a814d6c6f5ea5dc2daba1da","sha256":"f34e94ff3315621c73a5aefc2db96aa533e0a429c01dbaf2728cdb95c6f9337c","sha512":"0fb035b56b58882a7430f0b99dc8bf254aa61a47321c12216d3de11c2f26948c961d34e2d2e2367efa8e3e854786d38b4472638ebb5b6bf77ef8cfab9607e424","ssdeep":"","tlshash":"0e41424ca479967801be8886f405147863480ff8952a7dcba6fd5c389fa5c34a26bf10","first_seen":"2026-06-18T09:52:41.088341Z","last_seen":"2026-06-18T09:52:41.088341Z","times_seen":1,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/SlotsPlay.Cp4whpem.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.420Z","timestamp":1781776324420,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/SlotsPlay.Cp4whpem.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/api/games/casino/v2/search","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.628Z","timestamp":1781776324628,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /api/games/casino/v2/search HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 108\r\nReferer: https://gwfj18x.life/\r\nRegion: RU\r\nOrigin: https://gwfj18x.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssogtx14.cc/go/auth/code/check?url=aHR0cHM6Ly9nd2ZqMTh4LmxpZmUvP3RyYWNrX2lkPXVQak1RWW5OcWFlVnZzTW9FYWNONQ==","fqdn":"ssogtx14.cc","domain":"ssogtx14.cc","tld":"cc"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-18T09:51:59.220Z","timestamp":1781776319220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ssogtx14.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 12:36:49 GMT","end":"Sun, 06 Sep 2026 12:36:48 GMT"},"fingerprint":{"sha1":"92:5E:F6:41:50:2C:36:BE:FA:C9:66:A2:AD:8F:48:85:8D:DE:AA:D6","sha256":"3B:51:6E:E0:72:C9:CE:37:6F:1B:C7:86:BC:DE:40:BF:F0:17:0B:4E:2C:14:E6:E4:A1:77:C2:78:7E:D5:CC:BF"}}},"request":{"raw":"GET /go/auth/code/check?url=aHR0cHM6Ly9nd2ZqMTh4LmxpZmUvP3RyYWNrX2lkPXVQak1RWW5OcWFlVnZzTW9FYWNONQ== HTTP/1.1\r\nHost: ssogtx14.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=YeIju53OPoAyuieo; Domain=.ssogtx14.cc; Path=/; Expires=Thu, 18-Jun-2026 10:11:59 GMT\n__ddg10_=1781776319; Domain=.ssogtx14.cc; Path=/; Expires=Thu, 18-Jun-2026 10:11:59 GMT\n__ddg9_=195.64.118.152; Domain=.ssogtx14.cc; Path=/; Expires=Thu, 18-Jun-2026 10:11:59 GMT\n__ddg1_=0cxdpRxnMCltTIlsC1Tp; Domain=.ssogtx14.cc; HttpOnly; Path=/; Expires=Fri, 18-Jun-2027 09:51:59 GMT\nfeature_scope_id=guest_921b4ed1-0d07-4190-9507-b7c5a0089f8b; expires=Fri, 18-Jun-2027 09:51:59 GMT; Max-Age=31536000; path=/; secure\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:51:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: private, must-revalidate\r\nlocation: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nredirect-debug: 9f5769932083d586\r\nversion: 4\r\npragma: no-cache\r\nexpires: -1\r\nvary: Origin, Accept-Encoding\r\nx-request-id: 8cf860aa-db5e-4aa7-8341-daea4582c5ad\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":41,"connect":20,"send":0,"wait":164,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-18T09:51:59.540Z","timestamp":1781776319540,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1 HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=XiBG1iGYvAvsCPak; __ddg10_=1781776318; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=syM0YMjcpgkKzIgr; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:11:59 GMT\n__ddg10_=1781776319; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:11:59 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:11:59 GMT\nisSidebarExpanded=true; Path=/\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:51:59 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nx-powered-by: Nuxt\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}],"data":{"size":403192,"size_decoded":96655,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65208)","md5":"3eefa212a5e58b621e40e7337becc26d","sha1":"2d78f69fb8c3216ca9614b9203ce8b608b6aeb9a","sha256":"70043cc1175ae1f60c600d63113ac35f857637e39d109cf542056294831d3f42","sha512":"d3fdb85edbceae1ee6e75d6c33e5bb2b326fc94b0ce9b7e62876e009896af3b83a1934aec00a0faf168695c619cee0cb03108c1183365cc9e7fb72553b318371","ssdeep":"6144:ZCzV4Eh/lTtH2f9HXqC20ci5pM+3fX516:ZcV4UH2f9H6CLzGi6","tlshash":"30843cb5ba487075a133cfe0e472bb5db069b63fca164fc9eed985144ac39f22a14704","first_seen":"2026-06-18T09:52:41.089291Z","last_seen":"2026-06-18T09:52:41.089291Z","times_seen":1,"resource_available":true,"data":null}},"time_used":455,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/BUPjDDxY.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.381Z","timestamp":1781776320381,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/BUPjDDxY.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=uPiPz7olB2N9aP93; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-fa\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":250,"size_decoded":917,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"b6b684f1866db6d31a66de137d3dc79c","sha1":"950a962ab1a23dc32d01ce9cb7d4d7c977e63e77","sha256":"2ade445ae163fbb74e2cae4ab22140cc886fd7cfcc61e424a82cafdd82e9c407","sha512":"d3d53ee3035fe47050fd5676a47d1ee77823240d10fffe3be40231f77136aa6a847766b071ca1cb7e2875f47d2d5864d267fde9810bdcb0475c613a24a66e117","ssdeep":"","tlshash":"ddd02e8f802260f4082030c08a30f1f01a20d22ca3860a40a06488b06e52c7fcc2af20","first_seen":"2026-06-18T09:52:41.090237Z","last_seen":"2026-06-18T09:52:41.090237Z","times_seen":1,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":229,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/ModalSheet.obAxgUyR.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:03.896Z","timestamp":1781776323896,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/ModalSheet.obAxgUyR.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=rhGZmYlzQlW71vhJ; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ZucfEl4GHOWagVL1; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-722\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1826,"size_decoded":1283,"mime_type":"text/css","magic":"ASCII text, with very long lines (1825)","md5":"05b655f72da11c2efcc65bc7ba67fa8f","sha1":"57139c9495ed39dcba5348f589b8ede957bde75a","sha256":"50c1a8003b12087a18d2de9853b79e124e176f6553cb8cadc54bb219ad6258e9","sha512":"af17e0f883c71926de0d41ebce6d810705aa858fb19edbb3d9598eab0434c0ffeb75e677a9ac79909f528af565c2dd26738114f0dd17aa659d12b9291916ff54","ssdeep":"","tlshash":"8d31dc693f18a938fab79d62738f518ca328e11f1c120bfddd9035190ac7ae23259747","first_seen":"2026-06-18T09:52:41.091203Z","last_seen":"2026-06-26T20:23:29.855989Z","times_seen":4,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/demo.BvlsOGlP.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.421Z","timestamp":1781776324421,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/demo.BvlsOGlP.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/api/games/casino/v2/search","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.996Z","timestamp":1781776324996,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /api/games/casino/v2/search HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 111\r\nReferer: https://gwfj18x.life/\r\nRegion: RU\r\nOrigin: https://gwfj18x.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/BdFxpJjW.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:05.381Z","timestamp":1781776325381,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/BdFxpJjW.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/betting.D1Ll2VgH.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:08.836Z","timestamp":1781776328836,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/betting.D1Ll2VgH.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/fonts/new/Eurostile-Bold.woff2","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.356Z","timestamp":1781776320356,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /fonts/new/Eurostile-Bold.woff2 HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=nrTdASiKeFCJULXr; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-9fc8\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":40904,"size_decoded":41705,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40904, version 1.0","md5":"febf558968a4b32f121ce194c8f68baa","sha1":"e133d6b72219fc3a1edc03d7eef28fb842ff4873","sha256":"9097528c9f1b405f85d514115cec3bcc9625d6414d77010ceb6b1aa2f8b6f75f","sha512":"381c80486744e5f44f6be24760a56da52e5ca92e4f4ebd6d302ba5ecaf4e71de565faa6150355117c7493804ad6f48aa85d3c05a87ccd5f387114a31273dfb30","ssdeep":"768:WR48Wq4Ke0NiXRJU7r6QoibVOp0doae/cQpBwfhHlzcZ56O:c455gmRG7SMVOp0+h/RahlgZoO","tlshash":"f903014424378ec4ba3b363150dd1e2d7742f37af4c5dad5810fac293e758dba81a605","first_seen":"2026-04-15T20:04:00.567865Z","last_seen":"2026-07-06T16:03:04.151466Z","times_seen":44,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/DlAUqK2U.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.371Z","timestamp":1781776320371,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/DlAUqK2U.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=C41czKsqHLEbOJ9m; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-5b\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":91,"size_decoded":833,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-07-26T20:35:22.91172Z","times_seen":24715,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":105,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/B9LYutY1.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.406Z","timestamp":1781776320406,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/B9LYutY1.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=jNoDukZ0MfH0SAz5; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-2eb\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":747,"size_decoded":1150,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (746)","md5":"0aabe45c96bd4a3301568a775f039863","sha1":"a63a6bbbeb808de4e5267e67f191782dd0c6368e","sha256":"7be720580569049ac713405004f47c8118370556e2c1969b8b777f5369e14ed7","sha512":"a93b92a8bab6bd6b9fc13c607654e5abda7e84de33086b22a69a8bb54e4a05b8cce6c55cf94b65092b29e02f07ed2ca09fa7f4d6e589902bbaa51b30e5f29608","ssdeep":"","tlshash":"65018e87bd7b243a4dd11e1768626151b725e89d24438042bbf0ea84920ae8ce37e430","first_seen":"2026-06-18T09:52:41.099523Z","last_seen":"2026-06-18T09:52:41.099523Z","times_seen":1,"resource_available":true,"data":null}},"time_used":426,"timings":{"blocked":339,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_ipx/f_webp,avif\u0026densities_1,2,3/img/tabbar/coin.webp","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.456Z","timestamp":1781776320456,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_ipx/f_webp,avif\u0026densities_1,2,3/img/tabbar/coin.webp HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=NpGK7IJHpfWhtQ8I; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg10_=1781776321; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\r\ndate: Thu, 18 Jun 2026 09:52:01 GMT\r\ncontent-type: image/webp\r\ncontent-security-policy: upgrade-insecure-requests;, default-src 'none'\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: \"1a34-A5wseDCjhWn5XxaUVy+3M/jQq18\"\r\nexpires: Thu, 18 Jun 2026 10:22:01 GMT\r\ncache-control: max-age=1800, public\r\nx-cache-status: EXPIRED\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":6708,"size_decoded":7414,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dd165c3aa1a4e55c9bdb3a9243dbea76","sha1":"039c2c7830a38569f95f1694572fb733f8d0ab5f","sha256":"9933ec6c4241443686cff8c020aa11e96f4d1b3063da5c2bb53e817a62e29fe0","sha512":"6e59d684f747ab4732e7419d206706c66dd2a8aef2170d3f58bbf7138d6d7cc4fcec4881940c5269cf7352d2260a2d2ddb6dbaf5a7db59b4dcf2986cd44dea97","ssdeep":"192:Qgmr9BOkxLSxoiKLsnO0nCzOgMN+D5N9ex2sbHbF98rMDY:bsLLiKLfagMN2q9kN","tlshash":"1fd1bf03c39549e3d813db290ec28dd2ec6b200823a5ce2fd1ccd1aa1d8a89bb1e7048","first_seen":"2026-06-06T23:27:45.127418Z","last_seen":"2026-06-26T20:23:29.840383Z","times_seen":4,"resource_available":false,"data":null}},"time_used":755,"timings":{"blocked":579,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/BglbTND8.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.930Z","timestamp":1781776322930,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/BglbTND8.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=XO3LNtbENZm4DJDY; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-39f\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":927,"size_decoded":1085,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (926)","md5":"e8c6566383f2fc1a0e22e49cbcc2e2f0","sha1":"fa33ef3761ed71222759bdda9434c33df9bcc252","sha256":"5f483d12f2c5c09a35fdd5c530b15cb36bfd8bda32e85a697012af0d4a836bb1","sha512":"e962a5bb5de0abe443e036857ef7485e24a2a48067c0dea4fd0dd6d58cd1c36005208411dfc1ee9e4619c09ac1583324af781179c05b650d27f37e370646d265","ssdeep":"","tlshash":"fe11344e90351e9ed06cceba806af3833020ddbb2713e0597969e1b47eda4034d68f32","first_seen":"2026-06-18T09:52:41.101487Z","last_seen":"2026-06-18T09:52:41.101487Z","times_seen":1,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/BottomSheet.U0oQ4Yjd.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.961Z","timestamp":1781776322961,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/BottomSheet.U0oQ4Yjd.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=h0bvWhGa183zU0AS; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-18df\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":6367,"size_decoded":2122,"mime_type":"text/css","magic":"ASCII text, with very long lines (6366)","md5":"7ea3ba8ff96b6164e45435a11d0be26c","sha1":"9cd9c3812b09422a387d82eadee7b34d328fcb6a","sha256":"26ef6a5029c989ac09a8997fb45ab1524d1b3493c0000e5cdbed46e2beefe040","sha512":"0bdb877f7f8db8004aab95e6cb8a922dc57661f3d4124669b064ea55d82c55356ad799c56b291d738d4806035f1e64cd02449fb35139db6fed02ed8d78003c97","ssdeep":"48:ZplH4ARmsdQbItheAZcZ1HZnmlqmgHjlrlSlz3m1VCjc9FWlZsbcbaAYQswI/G9I:KZ5RmlYjlklzVgH/jxwOTUXhG","tlshash":"d7d120792648ab5c767bd6d2d7c1de4c730ae32213021afdb6c4ee6606c39f2a11d604","first_seen":"2026-06-18T09:52:41.102328Z","last_seen":"2026-06-26T20:23:29.81672Z","times_seen":4,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":205,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/api/games/casino/v2/search","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.393Z","timestamp":1781776324393,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /api/games/casino/v2/search HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 108\r\nReferer: https://gwfj18x.life/\r\nRegion: RU\r\nOrigin: https://gwfj18x.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/D-dTQsFV.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.408Z","timestamp":1781776324408,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/D-dTQsFV.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/CfvKJCz1.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.367Z","timestamp":1781776320367,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/CfvKJCz1.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=oBVCqRYvphtayhnv; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-6b6\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1718,"size_decoded":1763,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1717)","md5":"5a346e5835f097f3dfd672857ee129c4","sha1":"af0684aefa01bac17f35ffdf003b3618125e8ebf","sha256":"965dbd531da6aa1d68562bcaaa6ba3d8bbcb908b3b746da8f8fcacb567bb9204","sha512":"868fc3c257c11c79d6a2484c594922a68474bb6492df88d2a778134192689af67b051c18d0469bc383ed7c50718378c7bf4ea0b12b94edd43fe012754330065f","ssdeep":"","tlshash":"de31a61fd14090394159cef8e529d971637382ab43eac7b5e2ef0bb11351171d08db6b","first_seen":"2026-06-18T09:52:41.103271Z","last_seen":"2026-06-18T09:52:41.103271Z","times_seen":1,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/casino-category-icons/Alq0SNPTypdkcESD3FEwDQzzSw2rgVGxJcsZTbGo.webp","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.653Z","timestamp":1781776320653,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /casino-category-icons/Alq0SNPTypdkcESD3FEwDQzzSw2rgVGxJcsZTbGo.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=02xTbTF4ATWOjyQU; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg1_=wZaTaIxtNelHavRF9pEe; Domain=.gtx-s3.cc; HttpOnly; Path=/; Expires=Fri, 18-Jun-2027 09:52:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 03 Jun 2026 15:31:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6052\r\nlast-modified: Wed, 03 Jun 2026 12:08:25 GMT\r\nx-rgw-object-type: Normal\r\netag: \"65d5cc3754bc258de285e38a3de2b49a\"\r\nx-amz-request-id: tx000000da806a0edf69d32-006a2048df-1a3f8b208-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1275617\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6052,"size_decoded":7068,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"65d5cc3754bc258de285e38a3de2b49a","sha1":"9a9af6176f2e4722f0cfe88165459b126781acd8","sha256":"7cfe7fb31be210b9f633cb95f0ede4fd27da0bfa01d76d1d89d65e539f46cceb","sha512":"2ea3d2787e742cf6cb7af14845c9c1991b1c9ea727d15d6e948fd7e48506720e60accd5a02edc643305f1cef063407b4dc1e0824e4e8e2fe2863ea167336df82","ssdeep":"96:2D4CcZXa2PaHDm9gFC/rODKwikmbfWrmW41DVv0mDdFvpdzTlEWt7U37X6sJv:2cfZ5+DUgU/aDNikQf51DVzxFXTlEWFE","tlshash":"d0c18eece463d59784948a750034de492bcd313eea8e415cc854ba8ba92834fe66ff25","first_seen":"2026-06-04T08:51:57.590624Z","last_seen":"2026-06-22T13:10:27.413503Z","times_seen":4,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":21,"send":0,"wait":76,"receive":5,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/casino-category-icons/isCkhb0UjWUO6Ux0beGdclpwVrwbU4xXeTVFKIby.webp","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.655Z","timestamp":1781776320655,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /casino-category-icons/isCkhb0UjWUO6Ux0beGdclpwVrwbU4xXeTVFKIby.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=jQNUVoeFLrnV0iFP; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg1_=0KdR2sN82TRSfPLTGRpj; Domain=.gtx-s3.cc; HttpOnly; Path=/; Expires=Fri, 18-Jun-2027 09:52:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 11 Jun 2026 08:31:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2028\r\nlast-modified: Wed, 03 Jun 2026 12:08:36 GMT\r\nx-rgw-object-type: Normal\r\netag: \"1f9a37963b9ba7052990dabc82b99bbd\"\r\nx-amz-request-id: tx0000012bf2b733e7efec4-006a2a7260-1a40daea9-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 609632\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2028,"size_decoded":3043,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1f9a37963b9ba7052990dabc82b99bbd","sha1":"0daeb3a84796fd0e3480d78aadb2be8998c7aec0","sha256":"79cddde417e73bc9610f7d639c214057c3f70ec63b54b5ebece4e0ab865fb9d8","sha512":"c6739e89c691d8290aa5c5f364ab5f3c08186290533838256ed5e6361d2e3098539d9d5acc749d2013c94029ed433d29533780152dd9909f5992534a5e0b114d","ssdeep":"","tlshash":"64410a8f2cc91badeebe23029693fe3429974cc50a71342aca4560e51d245a8315e3f5","first_seen":"2026-06-18T09:52:41.106417Z","last_seen":"2026-06-26T20:23:29.912403Z","times_seen":4,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":21,"send":0,"wait":76,"receive":5,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/index.DgQT9r1Z.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:01.035Z","timestamp":1781776321035,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/index.DgQT9r1Z.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=BvbDPPoWy1wO3k4x; __ddg10_=1781776320; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=cpfEi9pxq0EAyDea; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg10_=1781776321; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-10a1\"\r\nexpires: Fri, 18 Jun 2027 09:52:01 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4257,"size_decoded":1512,"mime_type":"text/css","magic":"ASCII text, with very long lines (4256)","md5":"88b792c383f6f1d99f4c021b9d5dbc32","sha1":"5e847be78aaa036d63d0b5ac9c040939d99769de","sha256":"bf3b54382a3fad7bbd9138467b2ed5fc3312812bd80bcb10d569c023ae37b960","sha512":"6b13f99e00bca7303543a02ea86812433e4b2694069504a38c8c60684d2c73652800a1289fdffbe70d1ae302d8e20f316bb3fbc9cf009828798bd8ce996e3036","ssdeep":"48:w8BLC9RICsxd9s9QCstWuARw9qhfI5tCsQ2xKB9nje+CYS/zLhhCs+2tHxTe+NWp:/AK6lpI5xNxF+p","tlshash":"9b91e1587304f2eca9735d3a7355629ce428a58b1730a7fcf5b6240d0ec39b26741b8a","first_seen":"2026-06-18T09:52:41.107603Z","last_seen":"2026-06-26T20:23:29.866509Z","times_seen":4,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":279,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/NVYtNWqq.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.928Z","timestamp":1781776322928,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/NVYtNWqq.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=M2zCTETaQMIpRpSx; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-271\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":625,"size_decoded":1055,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (624)","md5":"d36e6940c120c0c140d193d5009ce345","sha1":"99763a91ce30bee082c920f9d02e6ed91ebd4dca","sha256":"0d4b154c0b7d74febb087f54319d542070d110b8b716197ccffccb9e99e5a028","sha512":"314f85460a7a38418cff695b26904c290af9c09e50d6fcb670ff2c7be47b2bfd056a72f98d27dc641a07c4e04978f6b1e15b0ffeab52773f74ce36e52a3b9cbb","ssdeep":"","tlshash":"5df0db5e7142e0f1e2361191da47010a1f6917c460bb19ea216a578837d1d59d2b7d3f","first_seen":"2026-06-18T09:52:41.109182Z","last_seen":"2026-06-18T09:52:41.109182Z","times_seen":1,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/EmptyState.CPhkgl7o.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.964Z","timestamp":1781776322964,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/EmptyState.CPhkgl7o.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=7QQmrwWmSts39HBE; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-471\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1137,"size_decoded":1046,"mime_type":"text/css","magic":"ASCII text, with very long lines (1136)","md5":"a4573471c41ae0305cffa419783bc83c","sha1":"38494f66f2c458c225454ac67a0da1a01afeb953","sha256":"c9a288e2495eee5749f123aa82faf03bb6f9f02f1347d74cc91db5ad67adf908","sha512":"608350e3f689fdeaf67f656f4f3e4da923ca2b1193e7dfb5822aacc36d564b3754bd8b7bf6960d07ceffad69f131994911911bb41ca907180f0b395798e9764c","ssdeep":"","tlshash":"fb2136c4bf64f358f9366da23718252ce400ee1f484687fdeae2d50584c7a732384b5a","first_seen":"2026-06-03T11:08:15.056607Z","last_seen":"2026-07-06T16:03:04.20543Z","times_seen":8,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":211,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/D8CsykBC.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:03.881Z","timestamp":1781776323881,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/D8CsykBC.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=rhGZmYlzQlW71vhJ; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=epd1nD4VXow98tV3; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-afb\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2811,"size_decoded":2165,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2810)","md5":"e67055df2c1f8893ddacbb562851e345","sha1":"18712591ee7e0ef03fcb6c3186ea716eea240e4d","sha256":"7de20a9d29ece709a4415d4b887bf2b5aa1819861f978d15bfef1bd9be4e3095","sha512":"1f2b664d866faedbc2153f2eb71a2e01e30494d9bb2b7f10b2ee9d869fe8cbe0af933348676759459aa505d3ea5c37c50941dd4850a4ebe669c6b5530612757f","ssdeep":"","tlshash":"b351b208bc6e45bc02bf5c5ba020199827540ff968383ccb76ba6d280fd2c1573a9315","first_seen":"2026-06-18T09:52:41.113142Z","last_seen":"2026-06-18T09:52:41.113142Z","times_seen":1,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/vip.C_V8QgpU.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.701Z","timestamp":1781776324701,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/vip.C_V8QgpU.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/LoadContent.DVghP5JS.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.350Z","timestamp":1781776320350,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/LoadContent.DVghP5JS.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ao3CvN688TCIK9ND; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-212\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":530,"size_decoded":946,"mime_type":"text/css","magic":"ASCII text, with very long lines (529)","md5":"0db26094a7af37493c1f7359fcec48dc","sha1":"179a0af2fb0c0b17d24a37a6d3c35bb06737ca49","sha256":"f10dae08c464bfc438a2529b0c3dae1db37322beef11450dbb11041ee51b86da","sha512":"55e77895b993735fb236705d2506cb0362fef42ba2ef93fcbcdd9c9e60bb09b149fdf840a77b23d6610d9b7f63afd97f05ca7120fe9a9a54ac46e2c85d0b9baa","ssdeep":"","tlshash":"1cf08ba4b2a4f2547a77ac713d5c3e2d4000e41bd98b89fdd653460844c7ab323c0b48","first_seen":"2026-06-03T11:08:15.073697Z","last_seen":"2026-06-26T20:23:29.907275Z","times_seen":7,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/J3em_cvw.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.938Z","timestamp":1781776322938,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/J3em_cvw.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=DKkMTrz6ONN4rHJH; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-11cd\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4557,"size_decoded":2796,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4549)","md5":"60f8f220fdd3cff2c8a7dc7cea35a119","sha1":"7d5ecf7f4d49bb72e59d91170e902b56057abf59","sha256":"d732cf5c92bd03f97e0af465a10eedb208c8050e34ac4be9faa23bf5f783bd7b","sha512":"3c739f575faf3154a16273efaa022c07715bee72781ffe0abb56c55300b114675f1408aa76cdaf08d01e2a00522cd2ca085689d8ed5110435a7d0d0cebb765a6","ssdeep":"96:HyihfFwbwPJNkIhR/LOJO4zUOJOBMwOVH3Wx1Y7mSPbD6SliwfxiC5w6IZYOMEk9:SnbkHj/6U/WwoGxWySPiSliwfxiC5w6h","tlshash":"41918350b590f5a11f9318e298c08027e1e84329dc25bcf2d2eb5ab51bc5ec4a38bb6d","first_seen":"2026-06-18T09:52:41.12359Z","last_seen":"2026-06-18T09:52:41.12359Z","times_seen":1,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":132,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/D40_oWYF.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.105Z","timestamp":1781776324105,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/D40_oWYF.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=0wDXFa0WR6KUl3WX; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/C9O6FEgI.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:05.380Z","timestamp":1781776325380,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/C9O6FEgI.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/img/home/getx-square-logo.svg","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.455Z","timestamp":1781776320455,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /img/home/getx-square-logo.svg HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=wvhvkUHitEmMCkPy; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg10_=1781776321; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:01 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-1c0\"\r\nexpires: Sat, 18 Jul 2026 09:52:01 GMT\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":448,"size_decoded":970,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4cb74f9b375f8009f21c420caa03a12e","sha1":"3ba468281f9e0d6de0c52d1e1f5e0bed926f8d63","sha256":"469b5b34e864cdaf4f5e589de8af0391dd9df15779caf1eaee788e56f74ffcb3","sha512":"11d345adcff1bc43b7d6cbb90c3c9c86adc4e8a16a6a71710159f0fe67360253cb3bc95ebc4454c9a535a020612bb4042b4abff1262aebcbe32736300cd9c039","ssdeep":"","tlshash":"00f055e261ec2f9699659b20421aa03720fb36edba6c0408ad496f89f4690874d1eed4","first_seen":"2026-04-15T20:04:00.490307Z","last_seen":"2026-06-26T20:23:29.850478Z","times_seen":41,"resource_available":false,"data":null}},"time_used":626,"timings":{"blocked":548,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/img/socials/INST.webp","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.637Z","timestamp":1781776320637,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /img/socials/INST.webp HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=C41czKsqHLEbOJ9m; __ddg10_=1781776320; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=RUqI8cVZXeNSFs98; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg10_=1781776321; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7054\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: \"6a3290be-1b8e\"\r\nexpires: Sat, 18 Jul 2026 09:52:01 GMT\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":7054,"size_decoded":7743,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"17e4777007b6c529599df47a98ef23d8","sha1":"e1afd048dce70dbdec779f7310a9ea0c2fb60990","sha256":"badfee048a0c276cbcaacb23dd2d75eaa4641c3cd0afc8bb69faa82984188254","sha512":"e7f1e0f97414fdc2b1976944abc9434b2b497b02f00cf3c3707d5e78cf44d6333adaa6f240b4afcb987a65ee331d982a51619c8918ee6d7262a0d945038936e4","ssdeep":"96:gElbw+iP42Eapqbb4tRnB5pECpl+4IF/ak4HBGf26MbQUxHdCgbCCD52TzbSFmqu:Fwsdyqkn+2+44J4ha26McEdCjCDSz6hK","tlshash":"aee18f2d166c2b1ffa2824b938719761e268793f158c273a7295523f2b4cdfca05d841","first_seen":"2026-04-15T20:04:00.636156Z","last_seen":"2026-06-26T20:23:29.915202Z","times_seen":42,"resource_available":false,"data":null}},"time_used":657,"timings":{"blocked":575,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/fonts/icons.woff2?v=1629439516391","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:01.443Z","timestamp":1781776321443,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /fonts/icons.woff2?v=1629439516391 HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=cpfEi9pxq0EAyDea; __ddg10_=1781776321; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=X6guUhvagf8StS6r; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg10_=1781776321; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 9324\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: \"6a3290be-246c\"\r\nexpires: Fri, 18 Jun 2027 09:52:01 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":9324,"size_decoded":10024,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9324, version 1.0","md5":"fda09e7500d3a2867129d2ed80c57583","sha1":"d871428e4c47c45f3cd7232c489442943ed079ac","sha256":"fae8a414803516ee3ce7076358411be3ab4fdf1f68c8b9dee7e76802bd3aefc9","sha512":"94bae208ea5a0b8b9a6c04bd845247c59503852b42c32fa1a8e5833859dd963d3a1b26da5d3362babb5185206de0c05380fb3be080229284555f2e81d9f96485","ssdeep":"192:XlV9RVDfOg6KUzP++NzEsfO/aL+rNHxUQqj/qzT5SlrDuZYoh0:VV9RhfZ6DzP++tEsW/G+rNHxUQq2RAmW","tlshash":"8112cfbfb53be2a1e0f27d78141adb5259df317842fd0b781006313567f4b65a042532","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-06-26T20:23:29.819246Z","times_seen":134,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/ByEVKtVc.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.925Z","timestamp":1781776322925,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/ByEVKtVc.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1cPQGM6uYFhni4Fh; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-8e9f\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":36511,"size_decoded":10677,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (36510)","md5":"8c1acc0d14e70708adda74cda1ed97df","sha1":"8d48761003e86f1fb9abea06b95d8ae124e00681","sha256":"aaba8e782d2604f5c72bbddc748c82eba5f91b06661dcae3fff288236846989b","sha512":"0d83d93bfa5c0851d0f94b9f028a411dcf3ae90e14bb40759861e3c98f3a09d9fdcfa4f6e8b69eda565e435f58b6ecd894cd72e31b1407f13763090fa28044ed","ssdeep":"768:aYT4+ibtf0i48lw6YJEPeE1jWPirG5Cl7EL5MP5/vA:PbiJMRxwWPiamg","tlshash":"45f2fa483be1bc34c2da30d7363e090577726a41586e6540e006cab57fa968b71bbf7e","first_seen":"2026-06-18T09:52:41.127217Z","last_seen":"2026-06-18T09:52:41.127217Z","times_seen":1,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/Dl1N3wOX.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.425Z","timestamp":1781776324425,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/Dl1N3wOX.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/BEEz0C-7.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.431Z","timestamp":1781776324431,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/BEEz0C-7.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/api/api/v2/games/casino/highRollers","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:05.140Z","timestamp":1781776325140,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /api/api/v2/games/casino/highRollers HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nRegion: RU\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/xFDdA9PL.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.379Z","timestamp":1781776320379,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/xFDdA9PL.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1pfjqkjr2jboggnd; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-af7\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2807,"size_decoded":1968,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (2806)","md5":"234c692cb4fe859418ed4e7a99111eb7","sha1":"aa402e0aa581e8b620acffd39e24d0f6b3e95d49","sha256":"3565fa5170160ae1fbb5af92418914bf754766599777608572e227551de0b628","sha512":"5d57ddbc65a30e9d37553cd4f50f665b939a50fa0b901fb105e95257bf9e3dd4628663a9593ee2896c95213bdc4584c884899dc660f52bec5424847ea9f2c0ef","ssdeep":"","tlshash":"6251102d679e3cac66343c812dd8247d5224c38e2861d8da34e8ee97a057d0accadf34","first_seen":"2026-06-18T09:52:41.130289Z","last_seen":"2026-06-18T09:52:41.130289Z","times_seen":1,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":212,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/favicon-16x16.png","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:01.940Z","timestamp":1781776321940,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=AU9eYNLONZBq7PrR; __ddg10_=1781776321; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=dMxzvmEJNBZrwYCy; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg10_=1781776321; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1103\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: \"6a3290be-44f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 1\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1103,"size_decoded":1812,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"11f24fdbf91f702bda779fc31cda72b6","sha1":"675c7e4a5d8443b041056cf934a6e2f652914a62","sha256":"22680e0318483689dda6c739ddcada0864dc530300444247c87d8233b347b858","sha512":"56998c6ce69ca75e2c00756450a2c33ed491a5be0499d5003eb3638d643efb5d395705a986df5301f74ffc9c0f10c707b9e7837a491ec7afa55f349240d2087e","ssdeep":"","tlshash":"de1146d1e121e051c26614f169222480ff67407bfeff8b1afd22a4145c5a6b997f76c1","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-06-26T20:23:29.961595Z","times_seen":155,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/WheelOfFortune.CmrQjecX.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:03.542Z","timestamp":1781776323542,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/WheelOfFortune.CmrQjecX.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=m1tIrEtqv3atbYui; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Q4b8jz8NPUpdKDnF; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-709\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1801,"size_decoded":1286,"mime_type":"text/css","magic":"ASCII text, with very long lines (1800)","md5":"8dee0b4ef42705b42bbfb47b3da1cd1d","sha1":"71e913934de87b4acc9b6f30479c3e3df5019824","sha256":"6b79377b63ae657fd067b810bf474e3813168b2440a78ba7bfb8445770e66c4c","sha512":"44edc707625bda134387fe549eb0ebfe66a2312fcc620789f149b35c6775606940eac6e0bb0ea9871dc6b35e391e52829f216921c4d794f2fe0e6a86f71250ba","ssdeep":"","tlshash":"4f31fe69fb08e0b9b8768c5536bc6ecd912ca4624c6247fcc9d6996445df0f36301b4f","first_seen":"2026-06-03T11:08:15.119414Z","last_seen":"2026-07-06T16:03:04.201859Z","times_seen":7,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/region_module/locale_icons/en.png?v=1779286354","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:03.958Z","timestamp":1781776323958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /region_module/locale_icons/en.png?v=1779286354 HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nCookie: __ddg8_=GI3CqpLQiNaDXtJC; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=zuXNDyVyhhTGmr22wxg2\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=CrEGQnkgy5u7Bfwj; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 03 Jun 2026 09:19:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 1751\r\nlast-modified: Tue, 19 May 2026 13:42:11 GMT\r\nx-rgw-object-type: Normal\r\netag: \"4cd1cdce1c1f2c0290a2b686aefd5ddf\"\r\ncontent-disposition: inline\r\nx-amz-request-id: tx0000047ae44b1e5884193-006a1ead33-1a40e2e66-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1297973\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1751,"size_decoded":2690,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"4cd1cdce1c1f2c0290a2b686aefd5ddf","sha1":"250db2d70a924c49b0ac1c1a3668bc1737267069","sha256":"3d2348697a12ab3e497f215c2920a6f738a058c599429cad719e36adc4eaf61e","sha512":"ec34b4ba528679e4fbbf3a4022ed5127f89186291036d8ebef5c0781353efa89bdbb24cdd006656160a85a7dfcfe000458d7ffbfe4ca2c13e4558189d583b197","ssdeep":"","tlshash":"79311dcfc46897c980e782392ac6d3954a399ce0449bf58698150264370ae57575dd0b","first_seen":"2025-08-09T06:39:58.901689Z","last_seen":"2026-06-26T20:23:29.901851Z","times_seen":108,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/casino/games/psIHEevTJrH816lJuDxBH0Ej6ht7KI3EkgkjPd3X.webp","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.101Z","timestamp":1781776324101,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /casino/games/psIHEevTJrH816lJuDxBH0Ej6ht7KI3EkgkjPd3X.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nCookie: __ddg8_=3af5uSeexqo8p6eg; __ddg10_=1781776324; __ddg9_=195.64.118.152; __ddg1_=zuXNDyVyhhTGmr22wxg2\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=wv8iEiBefcOoY4of; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:04 GMT\n__ddg10_=1781776324; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:04 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:04 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 07 Apr 2026 15:19:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24674\r\nlast-modified: Tue, 24 Mar 2026 08:48:54 GMT\r\nx-rgw-object-type: Normal\r\netag: \"1914faf8ac6d98b6447d0037044be63f\"\r\nx-amz-request-id: tx0000043aba57de54e5ac8-0069d38b77-1a40e2128-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 6201176\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24674,"size_decoded":25586,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 287x193, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1914faf8ac6d98b6447d0037044be63f","sha1":"5c5afc361711b13517b8027ae6980a90906ec41e","sha256":"dfd79fdd7d08103f9c34f8611ec15b491870896e1e828f5d5a3741a4415b9e88","sha512":"a21cf24235b132274181eae3fa7bde7c7bcaec499d781515f33c32f0884f9397a560dca0f2f773c87544c29e2c52a2d7d08d8312707c3572f1f7633af8313ad3","ssdeep":"768:ykwExF6Euq2Xn9+krgxXTxSR8jHrTX+3BfyCR:ykvCq2t+2gxtTb+3JyCR","tlshash":"64b2d0b4b58f1ff823ab6de6716544be54a80dbe28109f17573a2de0552cc94e80b01e","first_seen":"2026-04-06T21:23:41.389037Z","last_seen":"2026-06-18T09:52:41.134053Z","times_seen":8,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/BQc_cpin.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.426Z","timestamp":1781776324426,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/BQc_cpin.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/BPwKDcW0.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.427Z","timestamp":1781776324427,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/BPwKDcW0.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/builds/meta/e73d9d76-c0ae-43e2-896c-2345bf68f201.json","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:05.203Z","timestamp":1781776325203,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/builds/meta/e73d9d76-c0ae-43e2-896c-2345bf68f201.json HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/BdoSPMw_.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.372Z","timestamp":1781776320372,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/BdoSPMw_.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Pf3YBFRiTwqQwaBN; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-325\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":805,"size_decoded":1210,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (804)","md5":"56a5ede2a879002b4ea3902de98fa26d","sha1":"c762d8a40e6b8d38b37d6ad631837a6d04d95269","sha256":"263c3b56c8703bd0db89e42b9f5936047256ad23a76f4a21550e3575777b4994","sha512":"1b0a9c89941718d1db424166de91decc68bb14495b42b2c2f8273951230e91a4043152b2967f517f25cf43dc54dc03279cc2e0b67c6f0fc66991ea9a711bd25e","ssdeep":"","tlshash":"f001f18b5d12c53a0b21698900271a205704581ee375b4d585abbab7ebdf5a8854db33","first_seen":"2026-06-18T09:52:41.134703Z","last_seen":"2026-06-18T09:52:41.134703Z","times_seen":1,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":140,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/EF0ldllv.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.376Z","timestamp":1781776320376,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/EF0ldllv.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=aZZClgN9W6LQdhiL; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-158f\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5519,"size_decoded":3271,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (5518)","md5":"8ad71d15a6829f8144926545bd3fa316","sha1":"d8a72a244ecdefd840cc925a6f2a9ac0fad75dfa","sha256":"dd84f981a63fd7ac657b6a6af5e456faf6a25419a06fa889e34d5e1322704125","sha512":"936b18766f983c3a66ab27f9de04a4dc4f33d198e6f730b872dc6ef52676006fad112683eecac3eab75f31e9455116c975f68c6230a89e797fbb5b1ca50030df","ssdeep":"96:szHL/bHGJ+6nRUlZU1zbohTacHOxVUfzUi5npcEf7f3ziVAK8wDmHURTQ6LOe9Hs:wbHGRnRUlq2hTacHOxW4i5pcA7iVnZl0","tlshash":"6eb1d70eb80459f943712cd82919345076280befd5e9c1d17175dca22ea2d35f7e8f78","first_seen":"2026-06-18T09:52:41.135617Z","last_seen":"2026-06-18T09:52:41.135617Z","times_seen":1,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":184,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/5hx4Mpvf.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:01.526Z","timestamp":1781776321526,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/5hx4Mpvf.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/_nuxt/g5hXAoCh.js\r\nCookie: __ddg8_=pRidfxcaA9LKZgKk; __ddg10_=1781776321; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=AU9eYNLONZBq7PrR; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg10_=1781776321; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-18eae\"\r\nexpires: Fri, 18 Jun 2027 09:52:01 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":102062,"size_decoded":33324,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (23842)","md5":"41ba8aa6ebcd365ab2649dbb7aeb711e","sha1":"9a2e1459907845efa9b703840f8388db0808b904","sha256":"04fa7a85074b7bc34611cfa202d6af6151590cf9d8c830fe56d4829ace2016e9","sha512":"91a1398a42c45f92346cd0ddb499a87c7cf608b89b06a257f379d8697e94706fb1097fe5089d4bac78d8ec7315b52c647b19d4b359092e1c36b776f3c9f2110c","ssdeep":"1536:BAkN3g33puxH++CzuXdyngWu8I7NBtYl3CwplaDzLBe3tlUx:BAqgJuxH+qyngWuXxBiJZAjAtlg","tlshash":"e9a36c0a5f0a1b690293235535cf7bc877bc506ad2b184a50cfe462c13e38b5e57fae8","first_seen":"2026-06-18T09:52:41.136642Z","last_seen":"2026-06-18T09:52:41.136642Z","times_seen":1,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/api/mirror","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.664Z","timestamp":1781776322664,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /api/mirror HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nX-Powered-By-Client: 1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=vA11Epr2pXLauVs2; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=vEjnkZebx9nPRTe7; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\n__ddg10_=1781776322; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:02 GMT\r\ncontent-type: application/json\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nvary: Accept-Encoding, Origin\r\nx-request-id: 0db8e641-2b73-4205-a715-fc527736102d\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":18876,"size_decoded":3964,"mime_type":"application/json","magic":"JSON text data","md5":"81e9f0ccd71e9d97136d34f449023079","sha1":"c140b6ee29c20d0224151442f1362fcead94f119","sha256":"b88c6d42073dfef82d1f1c3d6f9e03f3ee338eea5d096b06adaf18d474a5b71f","sha512":"75d14480598aada4b5ef8af96a435b86df7d7aeddfe878429ee4a39c2002b01a84027098b0326131d11f54a9333ea576f6b0bcc4d4f1782d1a1088df2446c214","ssdeep":"384:92Nyr0f4oTF4o3Z/qwazh90CHLdfqTPmHxRJc:kf/Cp0f","tlshash":"7c8274e2d1f7135c28c839e6d772bcad38d8a954d214eb7fcc3e2b87e504621669071a","first_seen":"2026-06-18T09:52:41.137918Z","last_seen":"2026-06-18T09:52:41.137918Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/vendor-slider.CDGvlwHw.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.954Z","timestamp":1781776322954,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/vendor-slider.CDGvlwHw.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=XxCirpMdOtTejRPL; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-383e\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":14398,"size_decoded":4576,"mime_type":"text/css","magic":"ASCII text, with very long lines (14397)","md5":"a6139141e71def940cbc99e2da5e94ee","sha1":"27814ca9d292d485656d84255f78800d62520659","sha256":"e9cabd3ecdbaf601b469bc045492b45d31793c79019c4d21792f1cbd4a4779f7","sha512":"f429c40dee98640294df1829b1dcb0eab9f31c717af39f8747e6b52c7bcb873534b861f589882d8f7a87f8926e20655d93a943858b22df45573dc2e292df53e0","ssdeep":"192:vmUJbiKne9nJICdKSme+jeHCAy0MxlbDEtbifD+2GTR3v1zYfuf4:OUbepJTdKW+SiHS289MWf4","tlshash":"1e5220e85310182753235f3647b58bb9ed7448c20bd38eaa91c0ad54c6fadbd172f279","first_seen":"2026-06-03T11:08:15.175865Z","last_seen":"2026-07-06T16:03:04.163433Z","times_seen":8,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":203,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/Tournaments.VUE5kQWZ.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:03.540Z","timestamp":1781776323540,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/Tournaments.VUE5kQWZ.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=m1tIrEtqv3atbYui; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=yyQjJERBOdwozhh2; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-4eb\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1259,"size_decoded":1182,"mime_type":"text/css","magic":"ASCII text, with very long lines (1258)","md5":"65adb5f63933696a4a25d8f67999825a","sha1":"271b51ad28a3e2ed0a81a92044b6d812ff0d6947","sha256":"c06fa32a5942eed87e7bd322b9871eadea6aa9b3acd74386494f65131f9c6a78","sha512":"7b39556c918b147c40e364ab045d3016728b78371a101caf6159133999b03083908e90fc6318296088d2ba0a9e2fa6d71a183fb6bf86d07eaa54cf95683e7787","ssdeep":"","tlshash":"5821be67fb4ca0a87db798157fa95d98726c7e228c720aec49d9a08040df9b2530478f","first_seen":"2026-06-03T11:08:15.201052Z","last_seen":"2026-07-06T16:03:04.187306Z","times_seen":7,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/casino-category-icons/qBJiN28JVBM55NXzqFBjC78nJCtQIWSl6ma0kYI9.webp","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.664Z","timestamp":1781776320664,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /casino-category-icons/qBJiN28JVBM55NXzqFBjC78nJCtQIWSl6ma0kYI9.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=WV5wafEi2tp059HU; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg1_=Phjim4dYHretUZ3YjEOO; Domain=.gtx-s3.cc; HttpOnly; Path=/; Expires=Fri, 18-Jun-2027 09:52:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 03 Jun 2026 15:31:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5850\r\nlast-modified: Wed, 03 Jun 2026 12:08:26 GMT\r\nx-rgw-object-type: Normal\r\netag: \"d07f24df23d281416bebd5306680e360\"\r\nx-amz-request-id: tx00000ae05d92e4bd652a2-006a2048df-1a40e21a0-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1275617\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5850,"size_decoded":6866,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d07f24df23d281416bebd5306680e360","sha1":"2352c65f268b15c58d9ee53a05cac77c39382d85","sha256":"c0f4ce748b3f3333c9d899b580e8e80610b50036e6de476bf8d388af34266497","sha512":"d6061965dd54a78770041cabef87a2bdc2459be49236f4741070f9c2f0cc13991cf7e334e7baf915890918569ab62f8e43fa3703125f04465240c475cf40d6d1","ssdeep":"96:UNq0EirOTglUgn7Y9RHUos9r8FhrBGx2Rx7qB7WRSR784MEK7QUOxa+x8DLiZlxE:UNq0RqJgnqRHUT9rUhQxCYj/FKOM8BJ6","tlshash":"e6c1aec226c063cc50dd48a89c8b41740c75f30ac9b4ae976e1a393cf571295a7afe86","first_seen":"2026-06-04T08:51:57.372363Z","last_seen":"2026-06-26T20:23:29.860877Z","times_seen":5,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":54,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/categories_new/4632kJaYXwgd5rLKI8Y4djyiKqNnTrqADJVbEidk.png","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.670Z","timestamp":1781776320670,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /categories_new/4632kJaYXwgd5rLKI8Y4djyiKqNnTrqADJVbEidk.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=jNa5CZr1aJD25YU9; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg1_=Osfbzx7ATPyKfMcJuIBR; Domain=.gtx-s3.cc; HttpOnly; Path=/; Expires=Fri, 18-Jun-2027 09:52:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 11 Jun 2026 10:09:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 57462\r\nlast-modified: Thu, 11 Jun 2026 10:09:33 GMT\r\nx-rgw-object-type: Normal\r\netag: \"8f9c78cde66d663cce3f9f81ad009c86\"\r\nx-amz-request-id: tx00000cba8f3e6d3a9172a-006a2a8965-1a3f8b163-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 603739\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":57462,"size_decoded":58477,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"8f9c78cde66d663cce3f9f81ad009c86","sha1":"46ca8647b13ca7d8f5cd1a9da1d30b84d53b8741","sha256":"c01e4d1e4078218627c7f89aa60aba1b837c2275d1a280681cce29a0196a312a","sha512":"bd172f24a4a3716a237d41dcfdae553ff29aeb0ac8d4beff871e6b794b08a0fd8b3afa75ac19b2b2d11cd27b1e970a11d29c8cadb1797eda40005b0fab477edd","ssdeep":"768:qZQEQnqDs6h6X6dD1TpGgEtqpsa6+Wp4yzRbJoTvlOo2Ej8EXUK43AWsanuizyhk:/nW26Xp8tqiaop5JatB4sj43DsHiyqj","tlshash":"9a43023733fe9565c6829f61be41c802a5c6933435a355c8f3250ab235f0aabc334dae","first_seen":"2026-04-15T20:04:00.431187Z","last_seen":"2026-06-26T20:23:29.964519Z","times_seen":11,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":53,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/WX0FrEFA.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.956Z","timestamp":1781776322956,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/WX0FrEFA.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=XSvycKP2R0nwpnmd; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-84c\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2124,"size_decoded":1524,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (2057)","md5":"472c05de223348dbdf0d97b6de2b7c76","sha1":"9b504c16d6059b4a5f0e0ede27983290608193c3","sha256":"e6019571d671a6f62b522c215f61805b62d932a5bd7c873bcccbe50da5b1fbcd","sha512":"3d6779b675820b22241a1fd4125056ec90acd09f50e8d95658e243809e4815f0c119fa3ccbcf540b2eab14c43eebdab9b434d8e6a7dcff8fda420df63d482729","ssdeep":"","tlshash":"fa41125b3ef164325b191430a4970163d06a89caddadc710bb100caf355ae618ef2fdf","first_seen":"2026-06-18T09:52:41.15075Z","last_seen":"2026-06-18T09:52:41.15075Z","times_seen":1,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":202,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/sounds/click.mp3","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:03.965Z","timestamp":1781776323965,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /sounds/click.mp3 HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=5MObUls4h05pyjFG; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=HkZ0xh6mJr7JGKLh; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 6731\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: \"6a3290be-1a4b\"\r\nexpires: Sat, 18 Jul 2026 09:52:03 GMT\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":6731,"size_decoded":7420,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"b497ee5b7f24d5540859a2fe9a2f94a8","sha1":"402f32b8a0c59a6655cee008020948c8b0dc3878","sha256":"627e28dd820dbe208a2d764c086b4eca2c54330b9741073bec9da852aa592962","sha512":"1f0e4fd80c187354ac665cf7e3dc52b8834ef35022c6fe922db3aae0f89f8530c5e97aa2d4860f2351c8fbf05ea2252593d626d12b8f90865b7eca6b6a476ee9","ssdeep":"192:79qf6EhSf0IotHNKWliJRgFn0DsEZM8+h/wgMgl:79qf6ASfCtHtliJ2F6sEZMph/w1gl","tlshash":"cad16d6a6d478951e40c5570d8ce1b4c737824b5afb0b3daa267f79e00e536c12ceb29","first_seen":"2023-04-10T18:19:05Z","last_seen":"2026-06-26T20:23:29.963181Z","times_seen":1246,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/ButtonOld.Df0OzCyx.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.416Z","timestamp":1781776324416,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/ButtonOld.Df0OzCyx.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/index.DqaSuibD.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.465Z","timestamp":1781776324465,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/index.DqaSuibD.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://gs.jdwqqi.site/socket.io/?token=\u0026EIO=4\u0026transport=websocket","fqdn":"gs.jdwqqi.site","domain":"jdwqqi.site","tld":"site"},"ip":{"addr":"91.215.43.62","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:16.462Z","timestamp":1781776336462,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gs.jdwqqi.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 02:49:56 GMT","end":"Mon, 03 Aug 2026 02:49:55 GMT"},"fingerprint":{"sha1":"8F:A3:64:0C:C0:01:64:F4:11:71:90:62:1F:D6:CD:EA:D3:06:E1:4A","sha256":"2E:B7:11:42:32:F9:F7:98:11:82:E1:96:1D:FB:3E:B1:90:35:05:C1:39:10:D1:B2:99:2B:A1:2E:7F:48:08:F9"}}},"request":{"raw":"GET /socket.io/?token=\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: gs.jdwqqi.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://gwfj18x.life\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: MKhpVcKiAAnD4/KH1Mn/Lw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: ddos-guard\r\nSet-Cookie: __ddg8_=GolRF4dVUMsJIpxn; Domain=.jdwqqi.site; Path=/; Expires=Thu, 18-Jun-2026 10:12:25 GMT\n__ddg10_=1781776345; Domain=.jdwqqi.site; Path=/; Expires=Thu, 18-Jun-2026 10:12:25 GMT\n__ddg9_=195.64.118.152; Domain=.jdwqqi.site; Path=/; Expires=Thu, 18-Jun-2026 10:12:25 GMT\n__ddg1_=9vDp3kn0fi0O57tLVf2Y; Domain=.jdwqqi.site; HttpOnly; Path=/; Expires=Fri, 18-Jun-2027 09:52:25 GMT\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nDate: Thu, 18 Jun 2026 09:52:25 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: PlkO4Jd0FuU0NzrVlHX3XA6tyj0=\r\nSec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover; server_max_window_bits=10\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":760,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":9055,"timings":{"blocked":8545,"dns":98,"connect":120,"send":0,"wait":234,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/banners/5zPNyPxjYCP5IhSwefc8scNHgp3N5oKLVLicVKqb.webp","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:23.714Z","timestamp":1781776343714,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /banners/5zPNyPxjYCP5IhSwefc8scNHgp3N5oKLVLicVKqb.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nCookie: __ddg8_=fKyFOPXgbAGCN4zm; __ddg10_=1781776342; __ddg9_=195.64.118.152; __ddg1_=KDpKAGza3YbZcdFeBIHR\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=6CIqxE3Y2eJKMdv2; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:23 GMT\n__ddg10_=1781776343; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:23 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 07 Apr 2026 15:19:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36558\r\nlast-modified: Wed, 25 Mar 2026 12:31:48 GMT\r\nx-rgw-object-type: Normal\r\netag: \"2eb23fe75e5c9b0cf7882e7851ef6340\"\r\nx-amz-request-id: tx000000c77e798762c4a05-0069d36467-1a40dbae8-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 6201154\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36558,"size_decoded":37470,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2eb23fe75e5c9b0cf7882e7851ef6340","sha1":"30f0a642890d0d234d427a21880627d843c8056b","sha256":"f931634202fb192ed06e8a4dfacf354b8c5591014ae81d2f95bdac9d167fdde5","sha512":"4006e47be626674f2d333fcfd92b00a3de6d4299b9c7aa7e95e1e5a53f90221cb678e60eb8e4ddc4dfb4a24f76bf02ede143724ec0ef39db6d28b6c1ac2fa031","ssdeep":"768:uD2v00QPeqqiWwEpacHqFA+ODfvUgLv5mHRYuyXo05B:uDu1pFKFrO4gLvOyXT5B","tlshash":"75f2f2c5b71208396a019c4b520c0ad7cbeedad73be72dadd55301fa56b23fa8f11462","first_seen":"2026-04-17T07:32:37.433289Z","last_seen":"2026-06-21T22:33:31.305804Z","times_seen":10,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/J65_Il6E.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.908Z","timestamp":1781776322908,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/J65_Il6E.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=yzHu0BeUypIxgjQI; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\n__ddg10_=1781776322; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-3cc35\"\r\nexpires: Fri, 18 Jun 2027 09:52:02 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":248885,"size_decoded":74856,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (60464)","md5":"ee7cf010d488f0589e354ca139fcd1ea","sha1":"0fb3c207e5ecc00bbc7802a5a4a94beefb4d2154","sha256":"a5c04cd946463befad6f663afeafda320a41b767bd8518ae8ed223acb2891fa1","sha512":"2ef3c7be42ce3f85a4cb6d966066b932d08152808fcfe628ec4fa95a40713d1261137533ab841fbfe223c72bbe795c2a46a34bfaf904f85e42fcf5dbd94cab15","ssdeep":"3072:pb9eIWGrsa7sLqhJIbIFysBVoYCdGF3QWwS1aBmUIlKqs3DHDu4Tx1vm8vwWSqb3:feI3sa7sLqhJIbI1gF","tlshash":"ee348d95f18821fcc25b6be8b4521440712e1efeeb54cc62d2fc0da83765c6c97a9f68","first_seen":"2026-06-18T09:52:41.157631Z","last_seen":"2026-06-18T09:52:41.157631Z","times_seen":1,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/api/api/v2/tournaments","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.467Z","timestamp":1781776324467,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /api/api/v2/tournaments HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nRegion: RU\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/banners/jnEolC1jvV20MepN8pjOURUvFnmzGy5DbYkdLzfS.webp","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:18.827Z","timestamp":1781776338827,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /banners/jnEolC1jvV20MepN8pjOURUvFnmzGy5DbYkdLzfS.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nCookie: __ddg8_=wv8iEiBefcOoY4of; __ddg10_=1781776324; __ddg9_=195.64.118.152; __ddg1_=zuXNDyVyhhTGmr22wxg2\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=bnqG9Xy3hpkwsfYP; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:22 GMT\n__ddg10_=1781776342; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:22 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 07 May 2026 10:36:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18706\r\nlast-modified: Thu, 07 May 2026 10:33:33 GMT\r\nx-rgw-object-type: Normal\r\netag: \"ef9f0bc1fee1ab790737de952d12b3bc\"\r\nx-amz-request-id: tx00000dce5813fcb7e8f92-0069fc6ac8-1a4096667-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 3626138\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18706,"size_decoded":19618,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1440x352, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ef9f0bc1fee1ab790737de952d12b3bc","sha1":"3b68aadece094b1c6e2cc386420af14da0b34473","sha256":"f34eb899bf8197ef415b5d92ea84be4714aa7b17aca2caa7db9da89e2198481a","sha512":"eaf3584a48c27797ca8a15e33e3c5c6606b732eb22baa7e9fac9d9bccf0e9047ba383c21f07738406d4b64a8e1d77c8b8e45161d0890468fc5a1b131b144d039","ssdeep":"384:YhMxgyWBPBxKxSzs+6vanl15hm6sG3ntQ1WDv4JcBMes:Y+xgd/l6vAo9WDocyes","tlshash":"a082e00884e807bc8ff69f60eb8457a190c9b5bec4d48e682590fcfc031d9b99df4565","first_seen":"2026-05-15T11:13:21.864413Z","last_seen":"2026-06-21T22:33:31.410017Z","times_seen":8,"resource_available":false,"data":null}},"time_used":4253,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/CfN6zuEu.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.392Z","timestamp":1781776320392,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/CfN6zuEu.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=yiEyF5Q4U8gNcdgq; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg10_=1781776321; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-31c\"\r\nexpires: Fri, 18 Jun 2027 09:52:01 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":796,"size_decoded":1119,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (795)","md5":"55d3f8b534b71d8479bf53acb975afe3","sha1":"a28ab448cc00114d2c97b4a3d953fb918ea97c89","sha256":"11c8b7571442a5004d5b8d0bfe9bf6a9c735c8381039ffe08cae01e4ece6c4a8","sha512":"75677de89941c33dd7e94063d37e04f2c085b2c5507c89e2267555de73782dfe7406fea4dc2ed6a69ad2fff3a30779e35fed6048400b667ec429bcd7c195ea5a","ssdeep":"","tlshash":"1901105db1b258117ff78685a9704004712079756308c3cc3d566deb6a2bd8a328afff","first_seen":"2026-06-18T09:52:41.164902Z","last_seen":"2026-06-18T09:52:41.164902Z","times_seen":1,"resource_available":true,"data":null}},"time_used":886,"timings":{"blocked":798,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/img/socials/TG.webp","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.451Z","timestamp":1781776320451,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /img/socials/TG.webp HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=5EFDFU2FQvgZFiK0; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2252\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: \"6a3290be-8cc\"\r\nexpires: Sat, 18 Jul 2026 09:52:00 GMT\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2252,"size_decoded":2940,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a45ec93802cfeb443a8c3e653421408c","sha1":"fdb4d3a1298cb7a6b2d21f3a449e8f9c1a371248","sha256":"22d62818f4c6924425d2b662e82d5cafdec47e295dd82ab0835f1bfead5b36c3","sha512":"76a54accf9210de859b4f1242e499fb2040f59822595cb86e9bf93d03e0448b2ba1681a7cc092f69c48ac86f8ed1d3484af4e77ef0f6b3186b7600b729e139f9","ssdeep":"","tlshash":"7a41fa85b31a2be5fe0653b430905b86f3dd9934875a1738d284177722b48e4ad2f64b","first_seen":"2026-04-15T20:04:00.670043Z","last_seen":"2026-06-26T20:23:29.914627Z","times_seen":42,"resource_available":false,"data":null}},"time_used":579,"timings":{"blocked":495,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/img/home/banners/wof-bg.webp","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.565Z","timestamp":1781776320565,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /img/home/banners/wof-bg.webp HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=dooV9iasJ6hwdshd; __ddg10_=1781776320; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=jwbytKeKG4tajsmA; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg10_=1781776321; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23110\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: \"6a3290be-5a46\"\r\nexpires: Sat, 18 Jul 2026 09:52:01 GMT\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":23110,"size_decoded":23800,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 992x1040, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a12039d33308f1e11b39a1f1333d349d","sha1":"50f755010e566a0fb95aafb642283d3ff05e2de3","sha256":"8da88de093a5ed0df755e7d3eb843b366ede951887e1f084d99cde2db15b31db","sha512":"f07a36bfea84d82e8dbb11cea13cae7fde9783ce81b35ce427bb04bfc6719a48bcf8acaca1f08169d268ac8f370e96e557bbbdd44f7f0f0c41d57c154952eae5","ssdeep":"384:mDlsjLmf8VlTDvr2VpKAisreQVUdQZd/7B+ynsfKoPVa2H+ZFIJDRnCm1dirQXWO:mDGDH0HreQqaD/7B+PE91mTVXWO","tlshash":"80a2e10d0453b385f1f207b128d1704c2e1e159285bb475a2eb73ccd96db4f68a7ad6a","first_seen":"2026-04-15T20:04:00.386893Z","last_seen":"2026-06-26T20:23:29.865957Z","times_seen":41,"resource_available":false,"data":null}},"time_used":779,"timings":{"blocked":533,"dns":0,"connect":0,"send":0,"wait":201,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/index.Cbkk9CaA.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:01.030Z","timestamp":1781776321030,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/index.Cbkk9CaA.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=BvbDPPoWy1wO3k4x; __ddg10_=1781776320; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=DkjOSHEbCojHft19; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg10_=1781776321; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-5ce\"\r\nexpires: Fri, 18 Jun 2027 09:52:01 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1486,"size_decoded":1231,"mime_type":"text/css","magic":"ASCII text, with very long lines (1485)","md5":"a6378fd15a659a6e13b170deb750a56b","sha1":"5033e90e11f895d3982c1bc5b98ad57a1d4807e1","sha256":"55bfeef38befc58914488c2139a7dc73cf216528345d84c6b2d9beb06bb837ef","sha512":"e84ad957c88386e61b99721ed87c418add601a5b7edcbf878a7228a9368dca9ec05dce0e75eb88cc82504965a517a3b0ce74c40405e1b1d4626d669a407b8690","ssdeep":"","tlshash":"be31fff4f31ce1394933981a3645fc5c2204e511951a4becff52a00784cfef22a91a95","first_seen":"2026-05-26T01:50:53.751909Z","last_seen":"2026-06-26T20:23:29.843256Z","times_seen":10,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":214,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/RQ9pOA8m.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.960Z","timestamp":1781776322960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/RQ9pOA8m.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=iL0vneXHTeqeMOId; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-157f\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5503,"size_decoded":3169,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (5502)","md5":"819f09878c722d32e01bc3fc28477e8b","sha1":"a3b0842dc7ddeedb9bd94e167a8a66242b45ddda","sha256":"70e53fdade750d56dc67ea039a4ecd2295b53ba96f7df965f04bc3d99acf3447","sha512":"90b910c0779c5ba2fae2b076633a4b2c29158b1d2e8e7210986cb1b3480001b5da5633e19bf7530091eb209e15a1fc71325f4dfad3fa1bc8e83267005ad4600a","ssdeep":"96:v2wOPJmfvkSfDQ9ohHEEudcDbG6xppK9b9Lkywgln8bu18UFFozFDq:viukMHuye6fwPOa1zFyRDq","tlshash":"9cb1e97eb594affec372d58280d24a04211d17a463a2bce171be4d5703ebcd4b65e718","first_seen":"2026-06-18T09:52:41.168682Z","last_seen":"2026-06-18T09:52:41.168682Z","times_seen":1,"resource_available":true,"data":null}},"time_used":388,"timings":{"blocked":290,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/banners/dfClhJjgOOVTKO3knXhsX99vrO2229eyjqhMtyuP.webp","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:18.700Z","timestamp":1781776338700,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /banners/dfClhJjgOOVTKO3knXhsX99vrO2229eyjqhMtyuP.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nCookie: __ddg8_=wv8iEiBefcOoY4of; __ddg10_=1781776324; __ddg9_=195.64.118.152; __ddg1_=zuXNDyVyhhTGmr22wxg2\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=F6mjWmnXygKafml9; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:22 GMT\n__ddg10_=1781776342; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:22 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 07 May 2026 10:34:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 47380\r\nlast-modified: Thu, 07 May 2026 10:33:32 GMT\r\nx-rgw-object-type: Normal\r\netag: \"692623299d98e6a1cf6ed2cd530c1d2e\"\r\nx-amz-request-id: tx00000741212e7cce7ee5d-0069fc6aa2-1a3f8b23f-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 3626292\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":47380,"size_decoded":48292,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"692623299d98e6a1cf6ed2cd530c1d2e","sha1":"5a3293a62009c30c924dce9ac678dff005d29a8d","sha256":"9b3a783ca94c54ce45c46774d6924ababc10070d2e274a50d6d6c3a9bfbba9b6","sha512":"75caee741b5659860fe3afcb8321a1cb55de35b09419b2aa2a72cf044d944280f7e8fa1a7df3aec601f3d2d8617af7e35ab475e16cae5606e6f99fa1c1fbe9ff","ssdeep":"768:vzM+GSwqv4cN794b95XkZsmgo7YTH2GAHV9cE5eas49xHPU:bMNEN0Snh7YxAHVZsx","tlshash":"2a23025cdc960e2fa5169e04eb5d08d2e0efa5dc0ae0fbb51259275f3634725f843a83","first_seen":"2026-05-15T11:13:22.024027Z","last_seen":"2026-06-21T22:33:31.367911Z","times_seen":8,"resource_available":false,"data":null}},"time_used":4379,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4361,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/api/redirect-window-info","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.396Z","timestamp":1781776322396,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /api/redirect-window-info HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nRegion: RU\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=XyAEHDLXxkgSd26T; __ddg10_=1781776321; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=vA11Epr2pXLauVs2; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\n__ddg10_=1781776322; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\nfeature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; expires=Fri, 18-Jun-2027 09:52:02 GMT; Max-Age=31536000; path=/; secure\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:02 GMT\r\ncontent-type: application/json\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nvary: Accept-Encoding, Origin\r\nx-request-id: f378127b-4abb-4dfe-bc2b-ebc7150da676\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":53,"size_decoded":1010,"mime_type":"application/json","magic":"JSON text data","md5":"98d5290b1bd498491483d58064aedba5","sha1":"ceffc3e366027f6bc479d0057b8ec93b8596af3b","sha256":"00ed32c62775dbe797e6ccedbbd6c479e8a9b4daca8e3641e4c4b0aa40dc5392","sha512":"27c7b6e9aa9e8eb3748e15d36402802ce69cfc0fe482111c4a349d99d164116dedb1727905eadd0821a49ebc13f09a22833116f728f9489a036344f3d8cf2573","ssdeep":"","tlshash":"3390024901167e208af840597684b612218050645415211d4c4ae5890520122a26444d","first_seen":"2026-06-18T09:52:41.17081Z","last_seen":"2026-06-18T09:52:41.17081Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/api/api/analytics/event","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.900Z","timestamp":1781776322900,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"POST /api/api/analytics/event HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nContent-Length: 305\r\nOrigin: https://gwfj18x.life\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=mez22OQrkiWDEYKP; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\n__ddg10_=1781776322; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:02 GMT\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\naccess-control-allow-origin: https://gwfj18x.life\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: dc4c000e-fb08-4c87-9a7f-405a196a7c1a\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":2456,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/CmWLqrZ8.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.936Z","timestamp":1781776322936,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/CmWLqrZ8.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=eSKr8RHYOuHz98mt; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-c3\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":195,"size_decoded":904,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"73effc11c245527c36fc77d609151c26","sha1":"a5fb708c9b557c091f76cfc891621fe7a9af4ee6","sha256":"4f6f0b9a321d65f7d6af20a47d50e3924b69b9d4620bdafbc3a40eafe4f1eb6e","sha512":"375cb5963f588e858cdd5e5d571e6452aae2f5808c6349e80d650bb0ea9675337d534670e323dd8725df48b07e836f24b47d757b3f3720ebdcd624607f85f4f3","ssdeep":"","tlshash":"f3d0229a4a8062ad90028ae58f2a8dab900210ec3b20e8e1b2440024330729002b7e2f","first_seen":"2026-06-18T09:52:41.171775Z","last_seen":"2026-06-18T09:52:41.171775Z","times_seen":1,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":113,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/validations.C66r6rUD.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.940Z","timestamp":1781776322940,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/validations.C66r6rUD.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=RiI1T12PzBVlkUFD; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-2c6\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":710,"size_decoded":924,"mime_type":"text/css","magic":"ASCII text, with very long lines (709)","md5":"b3fb3f092153ba40ebc5571a3d76e4dd","sha1":"7856cdfaef4b2e047d1180ffe869c9e3b33d9006","sha256":"151cba5f93cb5bb229ca1bf53c993701db167234fc20483def5889b3807be75f","sha512":"e09c41c618866a08ac3240e7bdce3267f361f44aabf61600fd1fe58bf2a03dff5fc10122f4ef10d11381b4bd083cb07f0c1cc86e106ca589d0f9ed1524172582","ssdeep":"","tlshash":"34017c74512950522ce3dde1d814de53b37a2207cc03d91def18187a6e8f607a46aeab","first_seen":"2025-11-20T17:10:17.331528Z","last_seen":"2026-07-06T16:03:04.165079Z","times_seen":69,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":132,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/banners/b4isjZUSxtuOX3PoZ20KMI56ChiUwd9bfjqllVe8.webp","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:03.643Z","timestamp":1781776323643,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /banners/b4isjZUSxtuOX3PoZ20KMI56ChiUwd9bfjqllVe8.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nCookie: __ddg8_=5qvDLiQRX6MLnQbe; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=zuXNDyVyhhTGmr22wxg2\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=GI3CqpLQiNaDXtJC; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Mon, 01 Jun 2026 09:51:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 57392\r\nlast-modified: Mon, 01 Jun 2026 09:51:20 GMT\r\nx-rgw-object-type: Normal\r\netag: \"d9993e8e119525269a778d9b999ff11c\"\r\nx-amz-request-id: tx0000030a89142d30ffb93-006a1d5619-1a4097292-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1468842\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":57392,"size_decoded":58304,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d9993e8e119525269a778d9b999ff11c","sha1":"4a0bf8e288ca6cdae8988373eb41f68c38a6ea33","sha256":"8f7b69e630a41a579b99b6193a11a872341b8425da0f8fae2fa3ce5b6e834a76","sha512":"93991c3b28b7cca1fa5f985440e0e0aa2b19b9a48c78134b66b9198e46d19ca59eeeca3f6c895bf4d77ce546c8c0b91c5d4b49e3e6f3406e7b6cc54ae6c0980b","ssdeep":"1536:dwU2JnzY9qiFEy9zdiK7UmG+54pD7BJUF:t2Jc9qoEy9zdiKImP4pDVaF","tlshash":"5f4302b7401aa30f057e65a1ac8df9ee6ef50a0b41e35cbfc2550b752c860bdba510f5","first_seen":"2026-06-02T03:08:49.135592Z","last_seen":"2026-06-26T20:23:29.955068Z","times_seen":8,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/Db5Ssg8U.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.462Z","timestamp":1781776324462,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/Db5Ssg8U.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/banners/7Hb8FAswQV57vdb7aMtW42HihYRs2iyfM8GLTCwg.webp","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:08.704Z","timestamp":1781776328704,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /banners/7Hb8FAswQV57vdb7aMtW42HihYRs2iyfM8GLTCwg.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nCookie: __ddg8_=wv8iEiBefcOoY4of; __ddg10_=1781776324; __ddg9_=195.64.118.152; __ddg1_=zuXNDyVyhhTGmr22wxg2\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=lVDpO0dXpQqvCkgE; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:08 GMT\n__ddg10_=1781776328; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:08 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:08 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 26 May 2026 11:03:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 70250\r\nlast-modified: Tue, 26 May 2026 11:03:29 GMT\r\nx-rgw-object-type: Normal\r\netag: \"839bff95f52204b040e2c8568d543201\"\r\nx-amz-request-id: tx0000058bec1d44455268d-006a157e04-1a40e210a-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1982917\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":70250,"size_decoded":71162,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"839bff95f52204b040e2c8568d543201","sha1":"486a1622abb83799d984f2e5d66be762b0fde63e","sha256":"b273c0099df85d270f557225924e3cc519d896ee69a364cfc3dd27ecf39148f3","sha512":"ab8f5e5db84cc8012438ad89d170bae9009711c32d7f1dc9e406b7523b6335f039969b7818419555a35e3c91429e29e78dbc89acc2a64c0e54306f2c412867db","ssdeep":"1536:zuJR7L1KfBjTie/wQlfN4Uwtu3HO1lRZ5XekqGmXNmwUdgT9E:zuJd4dp/wQlfKUwtu38RZEkqGmdBtBE","tlshash":"e663015c42c5cd703112dbd45c349fae363248c6aac57e20d478d2568fdb788eead626","first_seen":"2026-06-02T03:08:49.166748Z","last_seen":"2026-06-21T22:33:31.288487Z","times_seen":6,"resource_available":false,"data":null}},"time_used":14332,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14245,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/banners/7I6lSkFi7O9PhsjJyK4KIpAjFMvCqDdCLThWC3uY.webp","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:24.229Z","timestamp":1781776344229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /banners/7I6lSkFi7O9PhsjJyK4KIpAjFMvCqDdCLThWC3uY.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nCookie: __ddg8_=6CIqxE3Y2eJKMdv2; __ddg10_=1781776343; __ddg9_=195.64.118.152; __ddg1_=KDpKAGza3YbZcdFeBIHR\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=17KAYXlzaqUuyXQQ; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:24 GMT\n__ddg10_=1781776344; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:24 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 14 Apr 2026 14:18:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10364\r\nlast-modified: Wed, 25 Mar 2026 12:31:48 GMT\r\nx-rgw-object-type: Normal\r\netag: \"c47fff94c9bb8820917dc46b32ff4aef\"\r\nx-amz-request-id: tx00000c932323ed83be06d-0069ca3c1e-1a40e210a-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 5600063\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10364,"size_decoded":11276,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1064x260, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c47fff94c9bb8820917dc46b32ff4aef","sha1":"0864bc5a018546b2e831451f979c55f34691f26e","sha256":"1f7b9b6b0def0a0cc7c62fd34a8ead71dbc6f9dccc79970cb1ba533d5a8a3df5","sha512":"e39d12ba5b91cf72d9cdc734620aa86b6f0c8c9251b3b9c754f019b18239192aa863f043b036fb5dd76187d23090ea2c8597197b1e1e9b29aff8f38ff4b6106e","ssdeep":"192:OziHjajz7dLK70egcN10zk/st2yJP71olLwVgQUiWYItXhb3Q2OlArQsM0YR4ZFD:i++/xmoegWlstZP70wVgZYKX1ArPsM7c","tlshash":"c422b0bf38b2bc958154ebbf0a4d0c1baa96c6903d1fa4d7456b84d42163628b134d3d","first_seen":"2026-04-17T07:32:37.300331Z","last_seen":"2026-06-21T22:33:31.334369Z","times_seen":10,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/DEi4vMAd.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.388Z","timestamp":1781776320388,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/DEi4vMAd.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=iDIsRC6zmxeUQ9M9; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-a0b\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2571,"size_decoded":1742,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (2570)","md5":"243d1f8e72230dffb709f561e5a83eaa","sha1":"0e905c69cf4ef560b18dd02fe25e8db9b44efb46","sha256":"7acce1b6af6b4a52c5c96beaf953d7d6308be7460c9a6b9439a6f657fadef72c","sha512":"74bcb303b9a2a782d51afe62eb0a9ad74871821b11bf8d07d99a2dbf8740a340fefcd8cfb96f171ad1611289258a3ab556aaf6bc860fbd7962afb0dacb751d20","ssdeep":"","tlshash":"f651410ab004f6e587673436b1161140f52c0deef0b85afdb2b61df47f969183a0aba9","first_seen":"2026-06-18T09:52:41.175175Z","last_seen":"2026-06-18T09:52:41.175175Z","times_seen":1,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":279,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/BLqRxf3I.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.407Z","timestamp":1781776320407,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/BLqRxf3I.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=aOx89xz0H1nzjGg6; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-60\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":96,"size_decoded":840,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"7c4076f676c3e359982554324aa3e380","sha1":"6e3928ac3e2541310f4e0e1ae254251c9537bad6","sha256":"f8622b7778b61f8ba726785312d560a302215693a00de02da533f063bae4f1a5","sha512":"26e60ee813a234626723059bafb67f5691b27c81eefa8404583fbd3feb50646e892e2524fc6223e9f46ae036f9f98c5e965e7a1cccb6663c5f86a0d3a527a878","ssdeep":"","tlshash":"d8b012cd684015b44c010cfe1356080410d3a119e4c0019001b0960faa25da3020d626","first_seen":"2026-05-26T01:50:53.954167Z","last_seen":"2026-07-06T16:03:04.221026Z","times_seen":11,"resource_available":true,"data":null}},"time_used":428,"timings":{"blocked":343,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/banners/GIgZfJGqS0PJUbXFoESWzOOP6Ham1LT4QHvDwM55.webp","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:03.639Z","timestamp":1781776323639,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /banners/GIgZfJGqS0PJUbXFoESWzOOP6Ham1LT4QHvDwM55.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nCookie: __ddg8_=5qvDLiQRX6MLnQbe; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=zuXNDyVyhhTGmr22wxg2\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=DgqEMIKeHfvBHcsH; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 08 Apr 2026 12:14:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 57994\r\nlast-modified: Wed, 25 Mar 2026 12:40:52 GMT\r\nx-rgw-object-type: Normal\r\netag: \"6bc6737e40e0ab666ada32e68c95a696\"\r\nx-amz-request-id: tx000003156dde0b6a6ba4c-0069d36477-1a3f8b1f4-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 6125838\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":57994,"size_decoded":58906,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6bc6737e40e0ab666ada32e68c95a696","sha1":"d1d97514c262d3c94ae94cbf7c64e45824695e67","sha256":"a6fafa4aaff44f608b234ece38e8eaf570110edd34dc32e9d642a029d2d4d039","sha512":"635c447a6aeffaf738962f870b4fa9da5378ca14ce9615c87e7d8b03567ea78be7502c99ce5cb6a7550c767987a0795259b839900b9cdc6214d702be30cc01a3","ssdeep":"1536:ohx539y9zF79MPD00zpCiur6LsmWiFBGHNB:sy9JSPD00zpYr6LsmPFUtB","tlshash":"5443027d2c5cc4b9c52d18689e949a0e3cfb73d45eb4c586c4e0e999c13e3f7c989229","first_seen":"2026-06-03T11:08:15.189605Z","last_seen":"2026-06-26T20:23:29.966223Z","times_seen":6,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/D2eHF4bJ.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:03.897Z","timestamp":1781776323897,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/D2eHF4bJ.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=rhGZmYlzQlW71vhJ; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=sOVemUG4IQFAAzeS; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-36f4c\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":225100,"size_decoded":72271,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0bb599ba5b5c6e1276c29d9fab3d6bf3","sha1":"8d86aac1849e9af410d5acf4a3f4373023225fef","sha256":"ef9aa92c03283653f1180d925e68fe79712f90902e3de4ada734d43bf6cdbc35","sha512":"5dee20e5b2426518007ed4e67c288cb193b6f066471bc5da83230bdfbf1771525d19b89b160b4f8ab40bfae99afc2ead77e059139f9fe495e3ca90ee40a9f3fe","ssdeep":"1536:+RqGQmGiPwaEEmQhwgiJSuP/BDqac61iqBIyHkOxI+h+tmxRJUyJWs8AYx/lKtz2:+OhHkOxI+h+tU2V","tlshash":"9324e7fa93d461eda507c7b4d813a87135af29fd7fc5cb8242d8ce98a5260dc8a4ec50","first_seen":"2026-06-18T09:52:41.182972Z","last_seen":"2026-06-18T09:52:41.182972Z","times_seen":1,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/banners/Iaxz4SkzQSARYoYCpoOc1Qet3UMC43d6krYaFpEb.webp","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.049Z","timestamp":1781776324049,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /banners/Iaxz4SkzQSARYoYCpoOc1Qet3UMC43d6krYaFpEb.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nCookie: __ddg8_=CrEGQnkgy5u7Bfwj; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=zuXNDyVyhhTGmr22wxg2\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=3af5uSeexqo8p6eg; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:04 GMT\n__ddg10_=1781776324; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:04 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:04 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Mon, 01 Jun 2026 09:51:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22328\r\nlast-modified: Mon, 01 Jun 2026 09:51:20 GMT\r\nx-rgw-object-type: Normal\r\netag: \"15f38a7842ff776632df73076ea757b9\"\r\nx-amz-request-id: tx000007292935c9fc8ac00-006a1d5624-1a40dbc32-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1468832\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":22328,"size_decoded":23240,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1440x352, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"15f38a7842ff776632df73076ea757b9","sha1":"151bc8adc637effb421f898818bb8297cf84532c","sha256":"cc346c206e252291218451d8cf98c7f483e5f289ba4d110749e9497261b005da","sha512":"dbc7ef8b7d9b731fb1ebd3c4e0b3d7e2592365e24b4a61a3b9bb33cb0848838358b5276e5e8316d4ed21cc94339cc6f6fa454a5cd0b8952e0d89f31ca25ac834","ssdeep":"384:IH4XcPUPEnQGH9bbtLxBd/rYBF+EpFnVmJtFs4zAqhVKpOUIxBXzveHz5E:3csqDblxBdAFB++4zF8OBLgO","tlshash":"09a2e18b7e535253a27ee24501a799cbd8f98fd711b3936a4362033e34729bb3705882","first_seen":"2026-06-02T03:08:48.855975Z","last_seen":"2026-06-26T20:23:29.860216Z","times_seen":8,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/BJYHXARd.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.336Z","timestamp":1781776324336,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/BJYHXARd.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/QphHLPwB.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.400Z","timestamp":1781776324400,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/QphHLPwB.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/Bq_DiRF0.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:05.137Z","timestamp":1781776325137,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/Bq_DiRF0.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/oy_aqvJQ.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.967Z","timestamp":1781776322967,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/oy_aqvJQ.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=GX7p5D4mVQqq2TIH; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-47f\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1151,"size_decoded":1407,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (1142)","md5":"89bb11a39119ce66877df05d7b70b3ad","sha1":"fbd585ff13ff252baffed757ed1d40bcf01d7fec","sha256":"70137acf369bd990d08ea79281a753b3704198349c4d577aa5356a693ddd6e9b","sha512":"b112b8b21905abaec65ac0336b02b3280701671134dc393e8926c5f5bc196ae0fc07cf7d2cb350d07756ed305561ad725d2f7d7186b6d6682e2b45edfb08c195","ssdeep":"","tlshash":"7d2130aebb3aa7bc7c246a5f42306f20f0132096ffb8945cb8d22126e3425a155640b8","first_seen":"2026-06-02T03:08:49.024763Z","last_seen":"2026-07-06T16:03:04.174344Z","times_seen":10,"resource_available":true,"data":null}},"time_used":367,"timings":{"blocked":266,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/index.D5f9shWH.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.434Z","timestamp":1781776324434,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/index.D5f9shWH.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/banners/ovvJFAuuTgwOlsgO7bfvMwu4QPeNJpuivByvNC5c.webp","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:13.892Z","timestamp":1781776333892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /banners/ovvJFAuuTgwOlsgO7bfvMwu4QPeNJpuivByvNC5c.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nCookie: __ddg8_=wv8iEiBefcOoY4of; __ddg10_=1781776324; __ddg9_=195.64.118.152; __ddg1_=zuXNDyVyhhTGmr22wxg2\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=fKyFOPXgbAGCN4zm; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:22 GMT\n__ddg10_=1781776342; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:22 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 07 May 2026 10:33:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27604\r\nlast-modified: Thu, 07 May 2026 10:32:38 GMT\r\nx-rgw-object-type: Normal\r\netag: \"4482ba0f42404ab419ebe1b7c23a2550\"\r\nx-amz-request-id: tx00000484abbf323c8fdfd-0069fc6a72-1a4096667-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 3626340\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27604,"size_decoded":28516,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1440x352, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4482ba0f42404ab419ebe1b7c23a2550","sha1":"0ad384bc2b76718b16d526eba7053e79176d9e8e","sha256":"ec04e8a2524a7bcccbb6811e8c5a7ccf25c56ff62914bfa7b4e5b2e7ac4633fe","sha512":"54df04107211fe5a8d7e250f4f7a6ad483e107634d6c43b0011c7ec2c6b0a9bd0e217dfe2e82f8f7bc5dbf865f7024ad5b6a80ebb272450b3d98d10ca1975211","ssdeep":"768:3E9ay4+22rlt74uOJN1EqL0hlnid6UqDU:3EQsRRtUBNijnid6Ud","tlshash":"0bc2f1025619e47059195d9f0e2e9df72a3d9fec4843f38a902b874ea3d268cf731974","first_seen":"2026-05-10T03:04:36.772497Z","last_seen":"2026-06-21T22:33:31.313696Z","times_seen":13,"resource_available":false,"data":null}},"time_used":9190,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9188,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/Grid.oFG65Mj8.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.344Z","timestamp":1781776320344,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/Grid.oFG65Mj8.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1B5xxmjo7eETYPGs; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-10e\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":270,"size_decoded":867,"mime_type":"text/css","magic":"ASCII text","md5":"a2c77e72575a5d16af2fef60ae2b6fdd","sha1":"1cf0807f04ccdf40b4536d8e7a5d925176c2684f","sha256":"4f9480de01ee87010535444eda1dc8d1debc0455d6f8a2346b1de00ca347fa16","sha512":"d550116ca05dde8e9f9631b15d73ee4e7f2ff050d7ba4acea1e8bc7a744fff657babdeac5bc50a5b91ab6a4b48a3f50ef2645cef18b0f72b76bf91900355b48a","ssdeep":"","tlshash":"ded02b3b1857f70d20ff2550c4449949c31d52078a082ee5bc8058297dfb487063cd4e","first_seen":"2026-04-29T18:04:07.551787Z","last_seen":"2026-06-26T20:23:29.86807Z","times_seen":35,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/DBtxnSc7.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.374Z","timestamp":1781776320374,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/DBtxnSc7.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=U0GnTxv4OIQpoXuE; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-f7\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":247,"size_decoded":905,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"51b201bd1ffd2e773492cd8dbb623726","sha1":"bb320cdb324fc2ee2155e24619c773f8f0c39fb0","sha256":"433e98b4ffb9b51ec7fa874b8378ad7b2fd55fc111b87b4ac4d5331fc7a503ce","sha512":"f2a9c9a564dfd624028dcd6c78dba8416980757e0961c345758199ce5d32ec6e7adc6e7556e259e39fca4d77a6ec5c5990e864403fa99141fc8dffb78f5b4c57","ssdeep":"","tlshash":"dcd05edb13807674121a45c5222faba8d3481aa9a256198183526d057a148e7c2eca97","first_seen":"2026-06-18T09:52:41.187946Z","last_seen":"2026-06-18T09:52:41.187946Z","times_seen":1,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":154,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/CggDooSd.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.383Z","timestamp":1781776320383,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/CggDooSd.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=cCR8jKFl6D3UMyPc; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-391\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":913,"size_decoded":1286,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (912)","md5":"d0aae63cd734dcc7ef3f1628b9387eb1","sha1":"4570b7cd04534fda284dd36fb7151c59d69bc471","sha256":"828ebf69a62ac5a0a3ed08e40957b7e051c02ba6361ba0becc876478d2bd2cf3","sha512":"c1319ae96d25d700fe7d87bfb21f71effb562d58978f1ffa7612e764028fb0bb1e338c0e1782ce28bc6fcac3e2bb068322f221b5f6d9af2b14675104bc4a2e17","ssdeep":"","tlshash":"e511274f01a900b8938a4dc685254174e580230a3c96d6c174af3f173fb84d35689771","first_seen":"2026-06-18T09:52:41.189189Z","last_seen":"2026-06-18T09:52:41.189189Z","times_seen":1,"resource_available":true,"data":null}},"time_used":325,"timings":{"blocked":236,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/casino/games/LuKxinsGVqyLqydqtOlzCeHZWNjdlFCPkXwg9hN9.webp","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.107Z","timestamp":1781776324107,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /casino/games/LuKxinsGVqyLqydqtOlzCeHZWNjdlFCPkXwg9hN9.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nCookie: __ddg8_=3af5uSeexqo8p6eg; __ddg10_=1781776324; __ddg9_=195.64.118.152; __ddg1_=zuXNDyVyhhTGmr22wxg2\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=sUuF87l6lBGXSQuE; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:04 GMT\n__ddg10_=1781776324; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:04 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:04 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 07 Apr 2026 15:19:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22624\r\nlast-modified: Tue, 24 Mar 2026 07:35:00 GMT\r\nx-rgw-object-type: Normal\r\netag: \"d6080da8a76251d43c71a2ed0d6b9083\"\r\nx-amz-request-id: tx00000b966e50fbef831fd-0069d3bf5c-1a409731e-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 6201145\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22624,"size_decoded":23536,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 287x193, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d6080da8a76251d43c71a2ed0d6b9083","sha1":"e89fdbddd653a014a231b5d23a02ee0c484daca1","sha256":"fe0ed7fb28caa632c095a098a63588afed2718bab46cba2a03058b7ceb2582b6","sha512":"eead6b9404f551254dda2be954470aa4cb09559ec2f0911c500208a2f10cd4553efd5e79973c91a31cbca8e292d7c5ba48712019a081110b09bf37b435e05792","ssdeep":"384:B1u/2EwZ6O8GjASVn8Oe3X6Gw4b8mueLdMebR8lOaYyt6CW1sb4JQIKT/+bJOV0Y:B1uJwgOiH6D4JLdhbRz1CW1sLkO+MF","tlshash":"f1a2e1fc4bc05fd11683bbb2c6a90b582b7b30507f6a55cb1d42c589e2c6f064ea7179","first_seen":"2026-04-23T15:02:34.924745Z","last_seen":"2026-06-22T13:10:27.403552Z","times_seen":36,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/index.0DC4KxEO.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.334Z","timestamp":1781776324334,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/index.0DC4KxEO.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/g5hXAoCh.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.363Z","timestamp":1781776320363,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/g5hXAoCh.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=dooV9iasJ6hwdshd; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-abfca\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":704458,"size_decoded":234412,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (36494)","md5":"7e00a42fd95cedf866be989c77874294","sha1":"04d4677c9e2fca47d7dd164ec11087a7329433df","sha256":"fa8672091ead24d869e3005a70468115a3a8a13f7d4c46a15b6c63201668755c","sha512":"9f9f7d5a0b917ae1baf93f0971ad91ee9f73d81bbe7feaccfcf29a40280f99f5cebf156312b5878b41813450c1f04110cf753aa346dbfc89cd411e4e0deb8a1b","ssdeep":"12288:PaPdWbuyB/ir+112kQmhSZX9qbO+bK5BcgIg/z:6dWbuyB/X12kdhSZX92K5BcgRz","tlshash":"a4e45bd97196b06243e61af5903f0106f33a6d48784d84a8f26cedea3d7680991b7f7c","first_seen":"2026-06-18T09:52:41.191107Z","last_seen":"2026-06-18T09:52:41.191107Z","times_seen":1,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/img/socials/VK.webp","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.635Z","timestamp":1781776320635,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /img/socials/VK.webp HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=C41czKsqHLEbOJ9m; __ddg10_=1781776320; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=NPifIWZGeKZucOsw; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg10_=1781776321; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2460\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: \"6a3290be-99c\"\r\nexpires: Sat, 18 Jul 2026 09:52:01 GMT\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2460,"size_decoded":3148,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c72627e304cbc6d454efcf20ea827ace","sha1":"487ec3006108253d37998ea4271c13604a0431ef","sha256":"34bccae4ff2b20d497e2cfb538ad7f23e572e8e3357475727241d59327725dbc","sha512":"b0c65ec0fbc8fbeb223f0ed39b74c2130af4d32485134cd799de118cb0ddcc03b21a3c4fc1cd880123446fd330b96ef6ad15ffd97446e40a7c7c88d27a4b196a","ssdeep":"","tlshash":"d6511d176310639fe8104ef06ef54b89eb403d2a4a4f7e1bc2440b5a1f098f769dc95d","first_seen":"2026-04-15T20:04:00.628688Z","last_seen":"2026-06-26T20:23:29.921651Z","times_seen":42,"resource_available":false,"data":null}},"time_used":656,"timings":{"blocked":575,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/api/api/visitors/unique-track","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.669Z","timestamp":1781776322669,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"POST /api/api/visitors/unique-track HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nRegion: RU\r\nOrigin: https://gwfj18x.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=vA11Epr2pXLauVs2; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=syo0x09Gq1ihlbEn; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\n__ddg10_=1781776322; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\nuv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; expires=Fri, 19-Jun-2026 09:52:02 GMT; Max-Age=86400; path=/; httponly; samesite=lax\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:02 GMT\r\ncontent-type: application/json\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nx-ratelimit-limit: 120\r\nx-ratelimit-remaining: 117\r\naccess-control-allow-origin: https://gwfj18x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 58b2f121-006c-4aee-bdb9-5f543076155b\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":87,"size_decoded":1159,"mime_type":"application/json","magic":"JSON text data","md5":"2bae79b7cd8d685f32eaf216b14a5a61","sha1":"3ad4f54850e8e4788fa7d35cb847b9223aa1218a","sha256":"38818c89f22c7d870353ed2bc16d0695a521061022488ebcf3d5c9d16fc979c0","sha512":"e8a9ecd59a6ecb1b1a118ec16d978a369f0e19f976317d5d3de7936d62164bb456380d748fda9278947e92bbdc6d1ba1c81a0d5c6e864b769e458811c00dcd47","ssdeep":"","tlshash":"fcb01212059070f1c0a5148d13142d75e5ae40e65404710ba42d12c00961904c280012","first_seen":"2026-06-18T09:52:41.195127Z","last_seen":"2026-06-18T09:52:41.195127Z","times_seen":1,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/entry.B59ZjaW5.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.340Z","timestamp":1781776320340,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/entry.B59ZjaW5.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=pR4HaKqvptgJhMmQ; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-15945\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":88389,"size_decoded":15415,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65390), with no line terminators","md5":"3dd8e16c22e6d4a3b18a9e48a9234171","sha1":"29da26c0cd29c75725df5f0826afa2c773c71105","sha256":"6a3e50ff77decc7648a19ba29ceff0944c199052b26830b250f9632542617b9d","sha512":"3764ae6cef41a513f154294bfcc27087ee21e7532cc4d932c48cf40d0166c06da66b5bd6b08670e9a4507f12ecf16bd4b5e8049fa6e405dcc4c8b3a0df970668","ssdeep":"768:qfR0D82yQbAY/ocQyeQlTRseozwBwDNPFGe3MXDpHq+gFZEcOXb2y7CGUipf5I9L:qfR0D82y+UNPFGe3MXDpHq+VZ4k7g1d","tlshash":"4383d875ea50a03cb6338c17a2d1e79df119e526c5230aeee7754209d8c76e31be2f18","first_seen":"2026-06-18T09:52:41.201757Z","last_seen":"2026-06-18T09:52:41.201757Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/DPhSUX1g.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.384Z","timestamp":1781776320384,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/DPhSUX1g.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=gnuboqh2PiUFL3ld; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-2a5\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":677,"size_decoded":1147,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (676)","md5":"e5347ca2dc66a613265e535530096cf6","sha1":"f192e29b08a7d3244053769ce6c683a36b963336","sha256":"0afb9f0db102213a4784e465f59be0d47ccd25b87c8584abf14e143ca56bbbc4","sha512":"cdf7559ef6b1b98b4530afb8a5dea1fdbc2d06dcd6495c8568418c924fd9397e74ab26bc2c6574f69d9652c0255d45c26ffa6bd1d5ef2339ae140f1e7e65a736","ssdeep":"","tlshash":"1d01fe0dbc69d0bab6d580b48431150056181a5ff734859c4288113b634f66197deb54","first_seen":"2026-06-18T09:52:41.20312Z","last_seen":"2026-06-18T09:52:41.20312Z","times_seen":1,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":250,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/casino-category-icons/an5pypybduGEO2PUDrlbDBWXjBa6UtEoPRilxTLu.webp","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.662Z","timestamp":1781776320662,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /casino-category-icons/an5pypybduGEO2PUDrlbDBWXjBa6UtEoPRilxTLu.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=NJcZwsk7W5w3a2aF; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg1_=Wldayqe90spcIePEcgRO; Domain=.gtx-s3.cc; HttpOnly; Path=/; Expires=Fri, 18-Jun-2027 09:52:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 03 Jun 2026 15:31:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5066\r\nlast-modified: Wed, 03 Jun 2026 12:08:25 GMT\r\nx-rgw-object-type: Normal\r\netag: \"ba898c697adc61c4799ea453a3b255e0\"\r\nx-amz-request-id: tx00000477af43794844e75-006a2048df-1a40e219b-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1275617\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5066,"size_decoded":6082,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ba898c697adc61c4799ea453a3b255e0","sha1":"9ef7878bb90b1fb17f02078df439cbafc599d853","sha256":"88be2e2b991195b8125550ecdbd4b8358ca60b49d92d9e9bc406f7ceebca6250","sha512":"b56f917db413f88c7f68640db1406035901f3ae1d8f4149850c0898906fac44af248dd09a42b77669323a9d4a559b95d84e4b9388258e03bb6676783a790046d","ssdeep":"96:beTicr68OpT0RQgnwsDq0qFQ5wNOJ+RQLOVJFLEbZc4BuLL5Yqq5j3VJ495MA:yTDry0vv57SVJFmK4Bu6jjlJ4kA","tlshash":"81a18f01aa0e0981c80959b5ca09950ff057134d18f7cafb4a93aa34b43599e79c3d99","first_seen":"2026-06-04T08:51:57.379664Z","last_seen":"2026-06-26T20:23:29.899422Z","times_seen":5,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/SliderBlock.D_cHZaqg.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.430Z","timestamp":1781776324430,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/SliderBlock.D_cHZaqg.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/banners/87zhnl4oupFfMXNa3qSGXotAXVtJBfVSpJjrcFwf.webp","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:13.699Z","timestamp":1781776333699,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /banners/87zhnl4oupFfMXNa3qSGXotAXVtJBfVSpJjrcFwf.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nCookie: __ddg8_=wv8iEiBefcOoY4of; __ddg10_=1781776324; __ddg9_=195.64.118.152; __ddg1_=zuXNDyVyhhTGmr22wxg2\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=wYGplhx6jW4rHZAD; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:22 GMT\n__ddg10_=1781776342; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:22 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 07 May 2026 10:32:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38516\r\nlast-modified: Thu, 07 May 2026 10:32:38 GMT\r\nx-rgw-object-type: Normal\r\netag: \"ef910fb24ec2ccc0f3d92a119ffb1b91\"\r\nx-amz-request-id: tx00000c90ba849147f5ecf-0069fc6a56-1a40971f7-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 3626368\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38516,"size_decoded":39428,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ef910fb24ec2ccc0f3d92a119ffb1b91","sha1":"2f8f9c513b33a7e20ddd04de41c48748768c824b","sha256":"9ff642e33d0e6b17f520cb2e1498164ae9eb132e00dd67950bb4b71cb9b8ce5f","sha512":"5176265af5e4b367127dffa298b4b22b3caac55773246dd3aa2f042e2736e2fbc204f503519786b4a164bc08297e4edcc4b034d45b12b95b8688f162141d891d","ssdeep":"768:JfcoBQmjJKhSxSCZ1xQHjcniQnTp/TkIke9ceg:nBVKh0SCZLQHjcnJhr9e","tlshash":"fa03f16f0f14a05b9a5ece8d59e23b8c32b52e6c41ba25dbb0b310b4cde52423d957dc","first_seen":"2026-05-10T03:04:36.796897Z","last_seen":"2026-06-21T22:33:31.197597Z","times_seen":13,"resource_available":false,"data":null}},"time_used":9359,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9358,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/CwbvzBAP.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.413Z","timestamp":1781776320413,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/CwbvzBAP.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=CYMlZQ4OJnXaeeKv; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-5a3\"\r\nexpires: Fri, 18 Jun 2027 09:52:01 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1443,"size_decoded":1528,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1442)","md5":"8c33d127292bfe1b61e91fab39ca3b7d","sha1":"978a46e239d5a1873f6f5ed31b1e30ff397b5656","sha256":"f6dd9706144b93b497b0e3db0c887b70cd685fac73ee91d9496cf1e30fa9b0fb","sha512":"f758ba4b7c319240e237d1d34cb0b5a659235908f0216232310ae1993f655c54481b09db36802d3572c0e8076f0a10497612d3b7f6e6d771528bafafdbfb7b7b","ssdeep":"","tlshash":"a5212f1d380660bb239213e0a0ae041de118be71b66bc482e68c3d277e23585c84effd","first_seen":"2026-06-18T09:52:41.210449Z","last_seen":"2026-06-18T09:52:41.210449Z","times_seen":1,"resource_available":true,"data":null}},"time_used":695,"timings":{"blocked":404,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/OSnqbglA.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.920Z","timestamp":1781776322920,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/OSnqbglA.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=y3SaeuXPf1Wut1JK; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\n__ddg10_=1781776322; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-399\"\r\nexpires: Fri, 18 Jun 2027 09:52:02 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":921,"size_decoded":1232,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (920)","md5":"7337a92c131fe040ad1122fd3d9677c5","sha1":"b1e473d5073b6c0966c9fca01fa6fd2f0160d117","sha256":"c934b12b6e5b2d74cdb3a1af0e57036f95b348c953a9d8960e1f2563df169ce4","sha512":"6357175f5c22e72fd334ddddaf286c6c73ed031574888322d6ac8e48f1435a7361a997e0fa837ab082ed98e5d5c07b59a5dc007efde8d96712cef928fc923ebb","ssdeep":"","tlshash":"6b115c6572eac03887a59da519871aa4e94d4d0c718a81c4ecac5db2223f9acd178e0a","first_seen":"2026-06-18T09:52:41.211367Z","last_seen":"2026-06-18T09:52:41.211367Z","times_seen":1,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/DI6dyA3y.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.931Z","timestamp":1781776322931,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/DI6dyA3y.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=KA8tfLI0JTVIbgHx; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-84c\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2124,"size_decoded":1694,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (2123)","md5":"4d451e4e2df3a051d1b674b2d9ff4c14","sha1":"46d6a6d422c58e656ed5f91b5c6cdf501fff6da6","sha256":"74e2af76214cd49644958c1d10494d7493ac584c2a6127f3bae42102eb00bc5e","sha512":"3c7e60d38cb747c5ca0ba6ceeec01d19d871d722b946f2bdce3fb628837c2d826a604a8baf8c6c72ac168a90a02167686961f497752b05d48d868684861d5f55","ssdeep":"","tlshash":"90416269b0f854b243b20ce165096f02615e4b9c322de0d17a4c4d8b9270f416bfddf7","first_seen":"2026-06-18T09:52:41.212507Z","last_seen":"2026-06-18T09:52:41.212507Z","times_seen":1,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/api/games/casino/v2/search","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.849Z","timestamp":1781776324849,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /api/games/casino/v2/search HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 109\r\nReferer: https://gwfj18x.life/\r\nRegion: RU\r\nOrigin: https://gwfj18x.life\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/banners/KOH3FVjuld15ygJgiyxnwD3klEdEArTq2zdaAU40.webp","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:08.828Z","timestamp":1781776328828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /banners/KOH3FVjuld15ygJgiyxnwD3klEdEArTq2zdaAU40.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nCookie: __ddg8_=wv8iEiBefcOoY4of; __ddg10_=1781776324; __ddg9_=195.64.118.152; __ddg1_=zuXNDyVyhhTGmr22wxg2\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=98Beq1oo3thqLm8w; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:08 GMT\n__ddg10_=1781776328; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:08 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:08 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 26 May 2026 11:03:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16600\r\nlast-modified: Tue, 26 May 2026 11:03:29 GMT\r\nx-rgw-object-type: Normal\r\netag: \"7da5cbc912df124bdae97457f6083a81\"\r\nx-amz-request-id: tx0000007fdc25729ccfbfe-006a157e15-1a40e219b-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1982899\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":16600,"size_decoded":17512,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1440x352, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7da5cbc912df124bdae97457f6083a81","sha1":"847cefa5f01169f7b480c5bdc9d6b6dd1b9f1854","sha256":"12a2abd61881fea6b13a76c049c6f17c53cfcc035589ad4192e951c4cfbb01a4","sha512":"f58a1e15adb1eecf731460659f23275adc803c295b2a4c27dd821f2264b753409466787ad3e0b39abf7161defd86e4811b0c25c1577ba75f237279988196d42d","ssdeep":"384:iteg/6dWSeelqeIaPngRENhUp8hxgwxr4FZbWts3x:i3I3eeJnk+hU+jgwxr4DWe","tlshash":"cf72d1ca1a0314662f162f419ed952b3a5d9102707d447fd289a059e2127fe7c7bffd0","first_seen":"2026-06-02T03:08:48.89212Z","last_seen":"2026-06-21T22:33:31.436764Z","times_seen":6,"resource_available":false,"data":null}},"time_used":14229,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/BobhG_5q.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:08.833Z","timestamp":1781776328833,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/BobhG_5q.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/9DgUbVIc.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.390Z","timestamp":1781776320390,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/9DgUbVIc.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=pvSq59774vioQ46O; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-2bd\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":701,"size_decoded":1134,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (700)","md5":"17192f9f832feccb45cded543981cf5d","sha1":"b9a128d1dc546380d0baddc76cca45edfffb242d","sha256":"c7e8daa88e43279686a7b53b73205aadec314a1ef2412ca27ebef27d531b2040","sha512":"66e0098b2f2743233209b7f1a5036b4c58338a6326d83bec557c5da22f47bade9ce48084cf9ddf7ae4be96e571d3d63ae71b46b4aa30a561b1bff416a0a24f6f","ssdeep":"","tlshash":"f001fedaa941693502eddfc5922d9321a32002a9735a88c1607bedb71d08ef001bbd9d","first_seen":"2026-06-18T09:52:41.213973Z","last_seen":"2026-06-18T09:52:41.213973Z","times_seen":1,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":279,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/categories_new/OBZnYiBXYa4kBQMGhnIbxESbMg7qucfKE8f5coDg.png","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.666Z","timestamp":1781776320666,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /categories_new/OBZnYiBXYa4kBQMGhnIbxESbMg7qucfKE8f5coDg.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=yBbNdxVdGzXJJqB4; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg1_=JP6aZ1u9TIu8ms5TVWby; Domain=.gtx-s3.cc; HttpOnly; Path=/; Expires=Fri, 18-Jun-2027 09:52:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 09 Jun 2026 11:23:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 72731\r\nlast-modified: Tue, 09 Jun 2026 11:21:53 GMT\r\nx-rgw-object-type: Normal\r\netag: \"5373267cbb95b5e339b57cbf0a00ab8c\"\r\nx-amz-request-id: tx00000d1b7a8a61a671996-006a27f7a3-1a40e2e39-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 772116\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72731,"size_decoded":73746,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"5373267cbb95b5e339b57cbf0a00ab8c","sha1":"f9bb6284245740d25676e00a7f3085f06d10f94c","sha256":"dd551a9884c673d0e60bb3a747333e15734f8575863d33fbc930368dd8e2ee7d","sha512":"a64bafa7c0f8aba0e0f49f1433cfde4d07a2dec212044a3c1bc83177ed246f74ddf2403f34f0017576edf0fe150ea7e0f2c69a73727ed1b3cded39511b2b0ab6","ssdeep":"1536:0cg4PMngXVYBGFJ3ZAJ9ZykCLI6zHyxYLWaFtT:0ckngXkGu/ZYLlHybcF","tlshash":"5063022d80055d821c2bc421fd79bf4be894e54049d3886af5be62d9eabf8914edd3c3","first_seen":"2026-05-09T20:07:05.543509Z","last_seen":"2026-06-22T13:10:27.398213Z","times_seen":6,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":87,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/T422dish.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.934Z","timestamp":1781776322934,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/T422dish.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=GJ4NWYu2omqFTiYy; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-10c\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":268,"size_decoded":949,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"147ed10cb0f377eeb90d94bcf3b3e5ce","sha1":"856ac27cb26f8ead127d1ffac1f3f4e7c6eab137","sha256":"4b9b211ffb18a626ac75b8149c8652179ed6e64cef4e9fe1d282d152ec573efb","sha512":"d5ed102b81c13b8977861d6922e889d1f3baf2cc73d3a6a237f34ed24eeb15f732b3cf442ec5221e951a828f4607904b93b2ea55a9acbccd0b06ec9843e684da","ssdeep":"","tlshash":"98d0955a26d1d03515310cc684b4446886560b34b125dfd23a9e6b4b8647551d0e153a","first_seen":"2026-06-18T09:52:41.215849Z","last_seen":"2026-06-18T09:52:41.215849Z","times_seen":1,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/ChangeMirror.DzwY6ZRL.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.149Z","timestamp":1781776324149,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/ChangeMirror.DzwY6ZRL.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=0wDXFa0WR6KUl3WX; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/index.CReTpkTe.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:05.386Z","timestamp":1781776325386,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/index.CReTpkTe.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/fonts/Roboto-SemiBold.woff2","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.621Z","timestamp":1781776320621,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /fonts/Roboto-SemiBold.woff2 HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/_nuxt/entry.B59ZjaW5.css\r\nCookie: __ddg8_=hZYU8H3onePqDyKk; __ddg10_=1781776320; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=iCDshxUFTtf4PWtH; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg10_=1781776321; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 68056\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: \"6a3290be-109d8\"\r\nexpires: Fri, 18 Jun 2027 09:52:01 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":68056,"size_decoded":68759,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 68056, version 1.0","md5":"e9f43481f63aa4157f8d5f5c274ebc4d","sha1":"17733dcda8e9c3c16ac46f02bd57e9a3a2314e2f","sha256":"cc1d9a3eef562fcbd4868c4ed65df8921c3d16773749e2425fbe85172d204abb","sha512":"e3ac560dce9a77709d8a4fa29f0a2d710d711db4c0e15867de0d25c2bce8d3bda8551b957a027183c8d66ab127492671f9a4ee0bec827d572f61db14e77161a8","ssdeep":"1536:ckbeeC2BI3+wOKTdzyGHV1GXzur0/sKkoMCHDJ7RRYuzV:hbVC2BKsKdzdHvAk0UKkoMG7RRdzV","tlshash":"896302168b94764e9411cc10030e4fb0db4caeb78e11fb596ede22f18377af14aa6b5d","first_seen":"2026-01-18T06:23:10.600505Z","last_seen":"2026-06-26T20:23:29.97966Z","times_seen":46,"resource_available":false,"data":null}},"time_used":770,"timings":{"blocked":490,"dns":0,"connect":0,"send":0,"wait":190,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/Be_1H4JC.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.943Z","timestamp":1781776322943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/Be_1H4JC.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1p7NLoaNpyEv8Vv2; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-66b\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1643,"size_decoded":1709,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1642)","md5":"1c4261007b527a1c9f93727f678a4a4f","sha1":"33468dd7ad0f3fbcca4db9c5888ae2a456d33de5","sha256":"ede16464aefe4d1b227a8087bf21d4543635a947f83bca0c74f1fd6fe36b67b6","sha512":"b33eaaded88f6bee2b1c3e281272fffe2c4bbe6501d89ee72338844ce19231655a4880f30f0406b4b5001bbc90f182e5c2fa4be142ddfcdb7bcda9b8953b3168","ssdeep":"","tlshash":"dd31eac9e55c98afb483d7e88867442425c825fe3fd0efc5c6c4ae702137098a70f590","first_seen":"2026-06-18T09:52:41.217937Z","last_seen":"2026-06-18T09:52:41.217937Z","times_seen":1,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":134,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/DropdownCard.BVI_awvM.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.333Z","timestamp":1781776324333,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/DropdownCard.BVI_awvM.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/CjbykSJN.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:05.134Z","timestamp":1781776325134,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/CjbykSJN.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/index.Ci-FnTyG.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:05.139Z","timestamp":1781776325139,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/index.Ci-FnTyG.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-18T09:51:54.770Z","timestamp":1781776314770,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=XiBG1iGYvAvsCPak; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:11:58 GMT\n__ddg10_=1781776318; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:11:58 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:11:58 GMT\n__ddg1_=LExzitxp34VSiVjdkhLh; Domain=.gwfj18x.life; HttpOnly; Path=/; Expires=Fri, 18-Jun-2027 09:51:58 GMT\ni18n_redirected=en; Path=/; Expires=Fri, 18 Jun 2027 09:51:58 GMT; SameSite=Lax\nssoRedirected=true; Max-Age=3600; Path=/\nssoSessionId=uPjMQYnNqaeVvsMoEacN5; Path=/\nuserVersion=195.64.118.152; Max-Age=86400; Path=/\nuserBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; Max-Age=86400; Path=/\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:51:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://ssogtx14.cc/go/auth/code/check?url=aHR0cHM6Ly9nd2ZqMTh4LmxpZmUvP3RyYWNrX2lkPXVQak1RWW5OcWFlVnZzTW9FYWNONQ==\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":4436,"timings":{"blocked":-1,"dns":4005,"connect":20,"send":0,"wait":363,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/B52hjvn4.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.386Z","timestamp":1781776320386,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/B52hjvn4.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=cZrCS4zgkY587fyF; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-577\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1399,"size_decoded":1415,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1398)","md5":"f275362aa6088c76cd20e76617f4430b","sha1":"1a0fca8769374213f907cac4ea95b60fca2d5f0f","sha256":"9f06135556f88cdf10a1a3507594bf04f3fc6ac0b7ab674289a9038655e4d0cc","sha512":"f44b43145f3e08ee0fc88ee9f54cf10fe98dcd4e4ca68b1a7ae04b97685327d1b636c86777927a4ad832123f219839420e4fcc9542970b89af5de7da9c455413","ssdeep":"","tlshash":"27213eaff82cd56027351dc035cc3549920a830e281accd0b9face032422d0b58aef3b","first_seen":"2026-06-18T09:52:41.218842Z","last_seen":"2026-06-18T09:52:41.218842Z","times_seen":1,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":266,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/img/world-cup-26/logo_mini.svg","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.445Z","timestamp":1781776320445,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /img/world-cup-26/logo_mini.svg HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=BvbDPPoWy1wO3k4x; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-6224\"\r\nexpires: Sat, 18 Jul 2026 09:52:00 GMT\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":25124,"size_decoded":5803,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1040c0d3361428cf045eab87e604432d","sha1":"1857d50e77ef861b39e6a7cd5399d3ab1e93ed49","sha256":"30c55529f88965ba45d4e52f8336cb49692c99f852236dd5e1d0c25a52b27967","sha512":"ee10e746cd17c77f3adfff099e8c8051523a8023cf36c096b0be043bcc75e84f6ba0cff0d99ac788192d2b86f6f60000d3825b595bfab2126b96936d63a84788","ssdeep":"768:2UVCUV6ofVpIofVpgofVpIofVpUxrbjwEDjwE67:ZPnPqT/T67","tlshash":"b2b2a4f46175a1f0f102dbfcce1398617eb62cf3ae51c1c581d52e4ee4508984eaa9eb","first_seen":"2026-06-02T03:08:49.172198Z","last_seen":"2026-06-26T20:23:29.921087Z","times_seen":8,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":421,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/region_module/locale_icons/en.png?v=1779286354","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.452Z","timestamp":1781776320452,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /region_module/locale_icons/en.png?v=1779286354 HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=0eLePGBj9srXrs5M; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:22 GMT\n__ddg10_=1781776342; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:22 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:22 GMT\n__ddg1_=KDpKAGza3YbZcdFeBIHR; Domain=.gtx-s3.cc; HttpOnly; Path=/; Expires=Fri, 18-Jun-2027 09:52:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 03 Jun 2026 09:19:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 1751\r\nlast-modified: Tue, 19 May 2026 13:42:11 GMT\r\nx-rgw-object-type: Normal\r\netag: \"4cd1cdce1c1f2c0290a2b686aefd5ddf\"\r\ncontent-disposition: inline\r\nx-amz-request-id: tx0000047ae44b1e5884193-006a1ead33-1a40e2e66-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1297991\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1751,"size_decoded":2795,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"4cd1cdce1c1f2c0290a2b686aefd5ddf","sha1":"250db2d70a924c49b0ac1c1a3668bc1737267069","sha256":"3d2348697a12ab3e497f215c2920a6f738a058c599429cad719e36adc4eaf61e","sha512":"ec34b4ba528679e4fbbf3a4022ed5127f89186291036d8ebef5c0781353efa89bdbb24cdd006656160a85a7dfcfe000458d7ffbfe4ca2c13e4558189d583b197","ssdeep":"","tlshash":"79311dcfc46897c980e782392ac6d3954a399ce0449bf58698150264370ae57575dd0b","first_seen":"2025-08-09T06:39:58.901689Z","last_seen":"2026-06-26T20:23:29.901851Z","times_seen":108,"resource_available":false,"data":null}},"time_used":22605,"timings":{"blocked":-1,"dns":23,"connect":19,"send":0,"wait":8311,"receive":0,"ssl":14251},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/casino-category-icons/aH5Lam1ThWTkjKhW2vBMGnPul43IIzqw56TSRerF.webp","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.660Z","timestamp":1781776320660,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /casino-category-icons/aH5Lam1ThWTkjKhW2vBMGnPul43IIzqw56TSRerF.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=KoU3hiFiov6FxX0t; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg1_=eaLXOAXBjao0xrC0IKgM; Domain=.gtx-s3.cc; HttpOnly; Path=/; Expires=Fri, 18-Jun-2027 09:52:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 03 Jun 2026 15:31:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6392\r\nlast-modified: Wed, 03 Jun 2026 12:08:26 GMT\r\nx-rgw-object-type: Normal\r\netag: \"965f0aca91d289e47ffd6a823b7d9522\"\r\nx-amz-request-id: tx000000781a2f201db394d-006a2048df-1a40dae95-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1275617\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6392,"size_decoded":7408,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"965f0aca91d289e47ffd6a823b7d9522","sha1":"1e62b28f522311cf93f39aabafc56006c679e92c","sha256":"26fd22f858cb94050760944262db4c43f2f754294b63258242fabba21080291e","sha512":"2cd44a51ebf7cd70a276c1bd2d5c7d1456ada455926113fe1bbfacf7fb46a9c998b801f6f00c21cf465c7cc86c2e6c56d001eb6a1728c9df135d5d090b9c0b35","ssdeep":"192:aU/p9Uz6GzZMt9BuSybyo25sQnRe58NVXYag2O:aUB+Gybrl45TK5","tlshash":"13d19e5836b24495b6138034a1bf1bde39e48889e03af2c6fa33c8071e74fd00b1a43b","first_seen":"2026-06-04T08:51:57.481554Z","last_seen":"2026-06-26T20:23:29.935384Z","times_seen":5,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":88,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/index.94Bis1tz.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:01.032Z","timestamp":1781776321032,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/index.94Bis1tz.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=BvbDPPoWy1wO3k4x; __ddg10_=1781776320; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=2GZr9e9s46NzdEch; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg10_=1781776321; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-f12\"\r\nexpires: Fri, 18 Jun 2027 09:52:01 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":3858,"size_decoded":1500,"mime_type":"text/css","magic":"ASCII text, with very long lines (3857)","md5":"06ea8c2315a79f010b4aaf8c8f7ea35a","sha1":"5940241ff19c1e5d7d6d0b5c6fd8249068ea85c4","sha256":"e8b8fbf419261650f852c27ce0eb7b8d02aa5b75d20966b52b356063c40ec0a5","sha512":"b6284e2fc69f8db4ebca7fa504d6c234e7abf63034bbfe4d23d3e1133c58448dd214c6c04907165d17c32a2a2064654a22398e21d75a1de41374d4c1480be4a4","ssdeep":"","tlshash":"8581aae96f14e33c79736c2a6719f43c8251ad025ca41efdf6d6748409d36f2319ab0a","first_seen":"2026-06-18T09:52:41.221812Z","last_seen":"2026-06-26T20:23:29.870297Z","times_seen":4,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":275,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/api/api/v3/welcome-pack/get-welcome-packs-guest","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.659Z","timestamp":1781776322659,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /api/api/v3/welcome-pack/get-welcome-packs-guest HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nRegion: RU\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=vA11Epr2pXLauVs2; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=kTMyzhFGj9bRfbTy; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\n__ddg10_=1781776322; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: application/json\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nvary: Accept-Encoding, Origin\r\nx-request-id: d294a30b-045a-4501-ac0c-6ad104c84867\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7302,"size_decoded":2763,"mime_type":"application/json","magic":"JSON text data","md5":"c86284af05630b4c5de820ab13c9d86a","sha1":"77b8419cf39106a91d2889f84c68c7fe62c0b525","sha256":"c7c1737fa52ad7372119af6345ace6f031c4b2dfb2bbcf90662803d74cc8fbaa","sha512":"90a490bfe27167beb5e0276e55bbf406d4cb3c184044a077ba0a716dbf6c0568ac88143601a5bf0a996cc11c7bc3e340d1dfbb84f810cf59119954505cb4f983","ssdeep":"192:OCRXnnCRoLHCRX+8SQCRVKCRYr0BVtKNmaA:OCR3CRuCRuaCRgCR4waA","tlshash":"4de176525e487c71436b22e73c567b5e1af8324f25b5c0a07cfdcc14c3a1d629a2356b","first_seen":"2026-06-18T09:52:41.223136Z","last_seen":"2026-06-18T09:52:41.223136Z","times_seen":1,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":497,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/fonts/roboto-regular.woff2","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.359Z","timestamp":1781776320359,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /fonts/roboto-regular.woff2 HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=A0rJaQdAwD1cUejw; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-14e20\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":85536,"size_decoded":86333,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 85536, version 1.0","md5":"785a3448bc0c083a33317fc73407fe52","sha1":"b97e20b50f5a4db8fb604337480bdee516a9f814","sha256":"d199628866b998ea5f4149a113d226b068fca9380794549a4dc78e247a1db85a","sha512":"63a53d277ebbcd49540588cda8e53f4a54939c4206cc34dae0c1ae09e92eb1d4fd76aa6504bb8dc4a537abd5fe01a47344587cf3309bddb4f812c238a92528c1","ssdeep":"1536:wznOIv4MKpbBoBK1S7eGaYQd7xOkGexyF0dQFiM4ZS0+KH6jX:wz+7pNjw5aYWnxy++FiZZS0H6z","tlshash":"c583128a26eec0bb522f34ff174faf01821e287826caa047bad511d76534d11e7edc64","first_seen":"2026-03-20T09:36:22.132022Z","last_seen":"2026-07-06T16:03:04.186079Z","times_seen":75,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/js/pwa-load-event.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.418Z","timestamp":1781776320418,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /js/pwa-load-event.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ftF6ooxGRl8ZMYYi; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-ee\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":238,"size_decoded":887,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"2bc483a317c2c87ac7473d5a865184cc","sha1":"e89f1be89f12756f4a6c8c602f054743a70bed19","sha256":"2230761f24483c5b391e8483f69a7a42e1bbcf87da3c1100656c436dfc83018c","sha512":"516f055d9f6690c6d8d04559ecb3a628ee44cfe86b164d7e7984f7b0d8bc72b910d44241a732d2b65e2307ac2017b27fe78dafb03a3f03b52c0eb21c1864f534","ssdeep":"","tlshash":"ced02b6483b8567004f142ab170b3f09217710936018ad105286180db88154b80f1ac3","first_seen":"2026-04-15T20:04:00.635334Z","last_seen":"2026-06-26T20:23:29.938443Z","times_seen":43,"resource_available":true,"data":null}},"time_used":505,"timings":{"blocked":423,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/default.BO7FfcPO.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.968Z","timestamp":1781776322968,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/default.BO7FfcPO.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=5HNqkrdphiT3BmDT; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-1a212\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":107026,"size_decoded":16814,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"130a11f3466829ce4e7b24e41d7acbcd","sha1":"a22a5396f9d4c2f4e9b70cc2958b2da962608984","sha256":"61ec583842ce01c6241d9061cf4a7d84ccd03aea5e0e68dceed26e0830cba666","sha512":"dd70c1c05972302495dc361f4bf2e4fc7eae32ae6a0d459e2566eac489bf27e57cc7fb70e26b0691405f06880757ad9a8dffcaf4544634b060fe0f1e23bee6d5","ssdeep":"1536:hO9p4bcES+LuIVk+gQJwYPIH5/3oAQyMOxeXYGi8l/h0EDLcT7m6o3MuntjmcDwU:TVk+vc7m6o3MuntjmcDwxW+Y","tlshash":"4ca3d660721cb13cb837e6a5b9966a9c6229f307d6134fedeb9530188dc76e33721748","first_seen":"2026-06-18T09:52:41.226132Z","last_seen":"2026-06-18T09:52:41.226132Z","times_seen":1,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":287,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/BQZtSoyl.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:03.872Z","timestamp":1781776323872,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/BQZtSoyl.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=rhGZmYlzQlW71vhJ; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=EaHMdMQkAh7coLJF; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-30e\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":782,"size_decoded":1062,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (781)","md5":"af6bb13675ad4c4e3f33f040d5a82f4f","sha1":"65482a4cc5715d23e53e765587d799da72d2e05a","sha256":"1a900d0616f8a998bd5e6f0f60f43dd853efd94869e8275e14a673c397ef8ec0","sha512":"52dd2fe4b128fe57c6eb624c899fd791bdb84fe2d9c3be5fcbd6a55f9c85eb9531e7afb3f808aa08fcc0be8fc6de9cf588424b737acbe785f0fe3f89c82fbf5d","ssdeep":"","tlshash":"5d01976bc429803a4028cdfcc670c23121b78a7783c7cb3ad4ef03782384830e84a693","first_seen":"2026-06-18T09:52:41.227051Z","last_seen":"2026-06-18T09:52:41.227051Z","times_seen":1,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/FaqItem.D0q5uZWJ.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:05.383Z","timestamp":1781776325383,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/FaqItem.D0q5uZWJ.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=HkZ0xh6mJr7JGKLh; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true; welcomePackTimestamp=1782381123000\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/Home.CZbStT8L.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.342Z","timestamp":1781776320342,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/Home.CZbStT8L.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=PSyxKjdnEkDeANgh; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-87c5\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":34757,"size_decoded":6635,"mime_type":"text/css","magic":"ASCII text, with very long lines (34756)","md5":"3d01e54bfd34f01f3fd225818786ae73","sha1":"0bdc345b2781f432fa412ab11157a8991762e67b","sha256":"0d89c9585943f0e93dc8117868e63590530d15042f1e26bbd5d8feca13ce6619","sha512":"796cd77cf4f76311e72df3b0a937c9e2aae17ce6053054b0d02f6a0f46a2a086c52f59ffc9e7507c73c8f03bb28d942d0abe82a72333fca095bda3dd4b0c7250","ssdeep":"384:z6QmxUjDJxqzEB/RKcGaxLNZVQMMDUPpWwN8quHVMbkknqZyyNmxp:zRrz1Ga9NZVQM2UPpWwN8DB7Nmxp","tlshash":"2ff287a0770c643cf4f7dca6aa64e9dc6248f60bcd2245e8dec4f55489cfaf22215789","first_seen":"2026-06-18T09:52:41.227884Z","last_seen":"2026-06-18T09:52:41.227884Z","times_seen":1,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/UdGmQQKC.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.365Z","timestamp":1781776320365,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/UdGmQQKC.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=hZYU8H3onePqDyKk; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-85f2\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":34290,"size_decoded":14741,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13144)","md5":"8bea231cae4e1359e3e4fb7d9bc1fa19","sha1":"36feb976bbd0a4247eb845d5319310cdd05713f0","sha256":"6aad12484fba84f8829f912d86627c2f92b8d71ee22ea4111a85b1cb716626a2","sha512":"19bf6bedc9b05051af6cd539839eab1c29d775b294a15702ed4d7e0fe58c211467409a13e796b2c47d9c33d0afcfdcf05faa3ff4455d5cce74e07987a876a58e","ssdeep":"768:EwFf/JjF//Hie1/nUT1kzc0vRJQIQP9Lh1bOfOBSclIEc3VMpFTHZgNnGXSmY5dO:EweHizZUYqCouC","tlshash":"91f21ad5b6d1b06243ea60f4806b0902f3399a15b44e84b4f16c9cdb3db650a87b7fbd","first_seen":"2026-06-18T09:52:41.228869Z","last_seen":"2026-07-06T16:03:04.20399Z","times_seen":5,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/9MCj9Ndr.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.411Z","timestamp":1781776320411,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/9MCj9Ndr.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Jys0IxbIiyM7LNGz; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-375\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":885,"size_decoded":1279,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (884)","md5":"33d032c2dd2dd6a81b4680080e1e9623","sha1":"da1c5a2945890406a6d0abad4398bb632adbc2f6","sha256":"e2a89db1c87854d0495c7adb829cbea9a6cd89b561858812e0dbf21afbdf7f1d","sha512":"5aa994c44fbc56c9348ed579771c0bced8fa57bd2606d31b4d23b852a0f5a319bc5d390888cfc38a948613cac2dbdf86296cd56c27a944348bcad0c798d5a2ed","ssdeep":"","tlshash":"b5112f1a30e9933081e2b399612441d2828e4b58ad7880b4ebec8f035a45449d67fef9","first_seen":"2026-06-18T09:52:41.229988Z","last_seen":"2026-06-18T09:52:41.229988Z","times_seen":1,"resource_available":true,"data":null}},"time_used":461,"timings":{"blocked":374,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/img/world-cup-26/menu-icon.png","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.449Z","timestamp":1781776320449,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /img/world-cup-26/menu-icon.png HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=pEXmNaUTDfyblfPc; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 28983\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: \"6a3290be-7137\"\r\nexpires: Sat, 18 Jul 2026 09:52:00 GMT\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":28983,"size_decoded":29672,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"3f128edca69b7686042850a0d314bf21","sha1":"a5008401d1d429c6d68c875b367a8a2fa2d330c9","sha256":"c465d8d7f0beaaee1d95f5f42fefddfc4698911bb54ac03fdb27fa8e67864d49","sha512":"97a4d91dbc84403635840002ba941f50f940a504a45524f35e8c00de656a241e9d98d7a79a3ce1677870141bf96684608531896598431894d233bbdfae4f6ce7","ssdeep":"768:l576x5V7jmAjv9YyuY9zgAmdZRWa66z6qITOoKbMYm22PGKItm:utmARpITRWaJz6qToKbM8Cv","tlshash":"25d2f123195356e3889e09811d2bb7f44ffc92172c2ad7712d080acedaceb140fe5704","first_seen":"2026-06-02T03:08:49.049641Z","last_seen":"2026-06-26T20:23:29.890194Z","times_seen":8,"resource_available":false,"data":null}},"time_used":633,"timings":{"blocked":485,"dns":0,"connect":0,"send":0,"wait":93,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/index.CqVCBoZ7.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:01.034Z","timestamp":1781776321034,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/index.CqVCBoZ7.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=BvbDPPoWy1wO3k4x; __ddg10_=1781776320; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=3jvinpcTab8Zb66M; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg10_=1781776321; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-152b\"\r\nexpires: Fri, 18 Jun 2027 09:52:01 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5419,"size_decoded":1945,"mime_type":"text/css","magic":"ASCII text, with very long lines (5418)","md5":"af3d866f4ee7897323111a106f3b681d","sha1":"ddd85c5d1403be57405b8e4ac6d37a268f082d07","sha256":"61c68d92ff1f45fe1698b696d18b2297a036fcac1f27d627256302525b6b4a56","sha512":"f2b5dfc141ac4a351793e61659954f09d7b81dbee82d65b8ea4df3822e2521841e987bf2db1ba83b2cda1066d975d53ed157a722effc15d3e248fc1fc6838401","ssdeep":"48:mKbP38+du93Pfmodu9yHjV6QDvwAgeVUmg8HNPYIdJYQQuQ9FHf29y9xe9qu9NNQ:m40tHjVWm3fwgYHiNZiR7Gi","tlshash":"acb103587608f7a85433a92a23e8f15c4315b62b6f0605edba81ec0d5ed3bb71393f06","first_seen":"2026-06-18T09:52:41.231594Z","last_seen":"2026-06-26T20:23:29.941836Z","times_seen":4,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":274,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/main.i0t5_S5P.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:03.430Z","timestamp":1781776323430,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/main.i0t5_S5P.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=zAtfa7HNzWcNCMn3; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=m1tIrEtqv3atbYui; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-130fe\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":78078,"size_decoded":16167,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ed33b3d3d6fe7740c36774fa942a85f8","sha1":"4116ec3f3c753a0c14ac86f0b3c5ef3416b7453e","sha256":"c67dfdf86e14c16e0e3580b0fd097b7bf784d1912651b3c533bbcbd311acb754","sha512":"9372ee39687aa65703ec578e5edb3da5c5f64b62b8ff3eb4fc18593a3f579f0dc4a85f2d8b5b696d36610e19934546454f2c7fda2ad171cbd356a1e8f5d40c16","ssdeep":"768:Alm4W+fITEVCJeyN7WqCghi6j1PyvWX++DwTARgE7uuzo:AFITq479hXnMo7u8o","tlshash":"4b73c826e125702cb0abd5e6ecd0abebb029e517e2531fbef4d97178c1db0d21622714","first_seen":"2026-06-06T23:27:45.129995Z","last_seen":"2026-07-06T16:03:04.181111Z","times_seen":6,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/ModalNew.BHif7ITV.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:03.878Z","timestamp":1781776323878,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/ModalNew.BHif7ITV.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=rhGZmYlzQlW71vhJ; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=EFkOV7ux4rUGDyOi; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-2f6\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":758,"size_decoded":984,"mime_type":"text/css","magic":"ASCII text, with very long lines (757)","md5":"804c97b9509430a99472abee2b42e564","sha1":"bb4a27384d94077ad4afe4f5639716555283d30a","sha256":"1965d9d77576edd083c0540d5f0fb4243880db0ef0fbb6d01532f206396f4722","sha512":"29afd473c68e50bcc0d21210756aa702b4db22d159dade21d1d8669cf5fcc94c54c734c4e6f4b4b8f02b15381d8c018d89e3d0148b00349531af94fd89867b82","ssdeep":"","tlshash":"b3016d9235af925c20bfd1d324f27ebc21251596475b2fbb8d30b2fa4d6b9422c21c40","first_seen":"2026-06-02T03:08:48.889673Z","last_seen":"2026-07-06T16:03:04.185179Z","times_seen":10,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/api/api/analytics/event","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.526Z","timestamp":1781776322526,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"POST /api/api/analytics/event HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nRegion: RU\r\nContent-Length: 294\r\nOrigin: https://gwfj18x.life\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=JAO4VPNFM4hzHxEK; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=; feature_scope_id=guest_ff060068-a7b6-4fa3-8fb9-36c6b2e370bf\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=fJzs13kBMEtmcUGo; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\n__ddg10_=1781776322; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:02 GMT\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\naccess-control-allow-origin: https://gwfj18x.life\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 5d141008-2a42-4438-87a7-f29764702a31\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":2329,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/DEtMMOBd.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.949Z","timestamp":1781776322949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/DEtMMOBd.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=9ryMAjs2NKoOu1ra; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-394\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":916,"size_decoded":1258,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (915)","md5":"0b207c9d47611ec520cc4e2aa470ca5b","sha1":"55eaf0acead01fba23aecb3de88a9aac34647c8d","sha256":"02c16dcbd5dcda2442248f875c87801873760096a05045a8b277848884234ce5","sha512":"f5c26cb5cf9249579d119c4752b6cc2c190d6c432cf06177e6a9f76b0f8a6656c2d3bd1092fa8a0f6852f3a362541b73a5f9bf71f5bd6c947659fa0e90b5d8a7","ssdeep":"","tlshash":"9011404d3555dabacd764854802000aa221a9a2cb76315e1c3ec3d312f82490da0ff7b","first_seen":"2026-06-18T09:52:41.233851Z","last_seen":"2026-06-18T09:52:41.233851Z","times_seen":1,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":131,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/api/api/v2/bonuses/pending-activations?uuid=28be82cf-5fea-46e9-a65a-028334c11025","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:03.168Z","timestamp":1781776323168,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /api/api/v2/bonuses/pending-activations?uuid=28be82cf-5fea-46e9-a65a-028334c11025 HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nRegion: RU\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=kTMyzhFGj9bRfbTy; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=zAtfa7HNzWcNCMn3; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: application/json\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 85\r\nvary: Accept-Encoding, Origin\r\nx-request-id: 58a8f8ef-218e-4966-97d5-57a2ae05da2e\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":900,"size_decoded":1234,"mime_type":"application/json","magic":"JSON text data","md5":"98df4db912b19fb38eaf3573cf737315","sha1":"c01cb5c89df1d789ea994746036bb37f4729086b","sha256":"d3e5fb4328dad8e780553a075b32056b1f7b179558e3b7d964226ae288e5e0f1","sha512":"07c69326a158442de0e6925a6390fabdecb382b74ef7350a94a70d438ca8b8d521e64c8307f1d6e7bd6b9d3fa06a8a1de05a3e348fc1d8173e0b6c641de24929","ssdeep":"","tlshash":"3d11456d4c64ee4415eb3a677ad8be82136cf5db1941dcb1e28ddf1800fd1705321427","first_seen":"2026-06-18T09:52:41.234705Z","last_seen":"2026-06-18T09:52:41.234705Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":88,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/api/api/v2/promo-actions","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:03.531Z","timestamp":1781776323531,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /api/api/v2/promo-actions HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nRegion: RU\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=zAtfa7HNzWcNCMn3; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=I9dIrd6DAY4HLHEt; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: application/json\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nvary: Accept-Encoding, Origin\r\nx-request-id: 116998a8-fc82-44e2-8348-7a0c2159cb7b\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":554,"size_decoded":1205,"mime_type":"application/json","magic":"JSON text data","md5":"9cd400ba5c2fb65130b449759424c9e8","sha1":"1c51aec65254576ae3225549219163a11f59242a","sha256":"8d8b3d903a1bf1474f8ed457702ffef017732e02bbf640a1ca190833a6ba9028","sha512":"a247c36ca1e80a6d12563332d7686656a1ea3abfe5ae80ff09387ac67e90ea1d2ca09ec33f06b5aa9d6a0a8a1ec725bc612ee34346fbb2e6bbe66100bc44c01a","ssdeep":"","tlshash":"bcf0eb829e542fbf833a5140462e3fd9a53862a231aafc912c7cc1668242cf302600ab","first_seen":"2026-06-18T09:52:41.23566Z","last_seen":"2026-06-18T09:52:41.23566Z","times_seen":1,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/api/api/v2/captcha/status","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.022Z","timestamp":1781776324022,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /api/api/v2/captcha/status HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nRegion: RU\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=ZucfEl4GHOWagVL1; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=4pAX6bDSZ87t8HNI; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:04 GMT\n__ddg10_=1781776324; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:04 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:04 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:04 GMT\r\ncontent-type: application/json\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nvary: Accept-Encoding, Origin\r\nx-request-id: cd86e1bc-9cb5-4811-84af-aa541ed0411b\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":147,"size_decoded":910,"mime_type":"application/json","magic":"JSON text data","md5":"dd50ddf79a774af59d8b47d656ed15f6","sha1":"569e7a3cb127e973869fb9b001c40228e609c1df","sha256":"95919bc673bbcafe0fb46504ed3cc65529f56b9dabc04b08105787a675d53258","sha512":"3b9ef4d67729b1c249452ed687e81cc6ba383acfa10ab0db0856ecb165912b820c89a42cdd34ba5d2200b06e506ef4447ce968ffc16d2650285c622f84b167c6","ssdeep":"","tlshash":"66c04c5e571884bfc0551a4a2488bf406e3e807624045455fb6d029d5832b2313b6053","first_seen":"2026-05-26T01:50:54.0216Z","last_seen":"2026-06-22T13:10:27.367077Z","times_seen":9,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://gs.jdwqqi.site/socket.io/?token=\u0026EIO=4\u0026transport=websocket","fqdn":"gs.jdwqqi.site","domain":"jdwqqi.site","tld":"site"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:09.493Z","timestamp":1781776329493,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /socket.io/?token=\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: gs.jdwqqi.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://gwfj18x.life\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: sFj4jFCslBZHCj1H+EIgMQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/fonts/roboto-bold.woff2","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.361Z","timestamp":1781776320361,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /fonts/roboto-bold.woff2 HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Nzhan604Nqe9M1ou; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-15644\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":87620,"size_decoded":88389,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 87620, version 1.0","md5":"6967c03ebc5b4c75704676079e1fe59d","sha1":"cad9873937f3ad650b44ea15a42a02f06380862d","sha256":"ad3de39dea8aa05928b081ec4e625098f783f962617ec78197cdad1b7707e17d","sha512":"07c220b3a216398dfaa183defbc7e921add0323b6d51bc25c6298def700fe97bd4577e474c0d35e3343e426e20838087fdc175490a1751515774baced7317aca","ssdeep":"1536:6JpxOpDsTH32MAKblZRrvDKwQ64N7pbPCJ6HmHd7M1aCSaoaaoF4iEn6TfhGv0Bn:6JpgpDsTH32MpUwQ6i7FwgmHd7YSjXif","tlshash":"5f8312999fb5fe45a225bd8cd44d01521f7024a31f0436b86a8a3afbab946b034fdd41","first_seen":"2026-03-20T09:36:22.134049Z","last_seen":"2026-07-06T16:03:04.1867Z","times_seen":75,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/fnTcI_aX.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.370Z","timestamp":1781776320370,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/fnTcI_aX.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=MgLlDjaR9ut6NwpY; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-491\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1169,"size_decoded":1461,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1168)","md5":"26ce49393721e6887cc2d6b55e796aa7","sha1":"b8b74f6e8710e5685ac0b037d1739ac4522b6432","sha256":"d799d7d4bc29bb074592218c22df9d3b84c62784e276a9758c3dfb7791f617b4","sha512":"526434b510135e401d02087732fd48d1f663bb0aa8b219cf4335217e05f3dd7b6c67a29e4e685f5ca6a27d758e5d98724e3db0b3a02079ef6bb900665fa0301f","ssdeep":"","tlshash":"e0219389a4bacb7e023e44c8268d1c901a192b1d41ec0df9436fca1157cddf0a32ac94","first_seen":"2026-06-18T09:52:41.237711Z","last_seen":"2026-06-18T09:52:41.237711Z","times_seen":1,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":101,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/banners/y8Kf04xXehr6hFjeBJc5hVFUYXalVRAvlF5fgwGH.webp","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:03.577Z","timestamp":1781776323577,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /banners/y8Kf04xXehr6hFjeBJc5hVFUYXalVRAvlF5fgwGH.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nCookie: __ddg8_=umvJpWLadSUKztXw; __ddg10_=1781776321; __ddg9_=195.64.118.152; __ddg1_=zuXNDyVyhhTGmr22wxg2\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=5qvDLiQRX6MLnQbe; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 12 Jun 2026 06:10:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 58106\r\nlast-modified: Fri, 12 Jun 2026 06:10:12 GMT\r\nx-rgw-object-type: Normal\r\netag: \"763cd5afe7e6054bf657c16b0ed3fc4b\"\r\nx-amz-request-id: tx00000b40a117d31df0ca4-006a2ba2cc-1a3f8a6d2-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 531693\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58106,"size_decoded":59017,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1440x352, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"763cd5afe7e6054bf657c16b0ed3fc4b","sha1":"ba557f47699acddc9b85809e79a1e2078fbe9285","sha256":"8f946f997f7221033b031b310ef2c188de2f8a0949b37adab4ed945ac8c859f5","sha512":"01bb73ff4a7d39cb1370d5bec4e50be5956a5eda57abaa12acc9f660cc1738396a4385a528240fb61aa6fd4e48519c64f8700974899f950710362aa11a7a5593","ssdeep":"768:SVWss0JxX7TMSbcVMT0mzLWEgYV8KmPEp+B5YtWD4wvyjVkJRjQx5s9VUIcrBsMm:YBRxDW5UjjAP3vm2M5YhcrOMVYlBojWL","tlshash":"a543024bb4f8db8504469d97d204e7f13346f46f3ac5190a173d4a399a508b219bcfec","first_seen":"2026-06-18T09:52:41.238587Z","last_seen":"2026-06-18T09:52:41.238587Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/banners/azCXEb1KUE62YivYNr9zMEtBDQbSs1pa7aduhsBH.webp","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:03.641Z","timestamp":1781776323641,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /banners/azCXEb1KUE62YivYNr9zMEtBDQbSs1pa7aduhsBH.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nCookie: __ddg8_=5qvDLiQRX6MLnQbe; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=zuXNDyVyhhTGmr22wxg2\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=YFvMbpOKOSVi93DE; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 12 Jun 2026 06:10:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 87292\r\nlast-modified: Fri, 12 Jun 2026 06:10:11 GMT\r\nx-rgw-object-type: Normal\r\netag: \"3ec1f73274649fd4653e8df0a075680f\"\r\nx-amz-request-id: tx000003422711931d576a5-006a2ba2cc-1a4097292-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 531700\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":87292,"size_decoded":88203,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3ec1f73274649fd4653e8df0a075680f","sha1":"42a6aba4f975a520be99a550d081ee4e0bb06bcc","sha256":"34499fc5493c6268675cfc53afd8aa25ddde9e2f555195e603335e5479b699fd","sha512":"71731ca26a99354562bd5b507689ef8a14968201383c1ac43a4f93d65e7a4bd7557418af60b228f2aebf8b64fa01fb9011cfe2ede44e94167227338517d265ac","ssdeep":"1536:DW2pbrdkYK8f8thFJjp1y6JQJI4lTE9ntMFWe0Z9fxY9WjB1dsurFn802BFiXgiw:CGbrdkYKM2dH+tlTEltDZ9mst/PF802l","tlshash":"72831252c5074ee0f96f0c2542a6ccb3c58329dbe76582ac296f744abab0f76540f3c9","first_seen":"2026-06-18T09:52:41.239541Z","last_seen":"2026-06-18T09:52:41.239541Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/CU6j378_.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.368Z","timestamp":1781776320368,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/CU6j378_.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1\r\nCookie: __ddg8_=syM0YMjcpgkKzIgr; __ddg10_=1781776319; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=4DVeRWWW52r6A5sy; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-ddd9\"\r\nexpires: Fri, 18 Jun 2027 09:52:00 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":56793,"size_decoded":19030,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (55525)","md5":"599cbe374629c7e4ac9180de3d2ef32f","sha1":"4a94daa8ca16a0075ec09705ac7883f0f20b2c39","sha256":"6a44fe90e1db7af6706984d803da562625a157397bf55943d805a8e8a0f4c905","sha512":"48145d8f620821fb6b2eb23bd0561252e5acc46bb91fe5151a1888e2299d146c596b004a77691493e35b0ab209aaafae8bfa8c9712baa1c7ea76a859ff8564b8","ssdeep":"768:70GCYP0b2T8sGKVOQMWnmR5ocLi3nD+AuPUSxJlguAM13lnGEHM7Ip12gAKvEfzL:YTkQ2T8s5VOJ2D+XtZT1sAVJ5ukVafJ","tlshash":"0b43274579499cbde3321ad814190c04725d1eeb7068cce1f2eacd68abb7dac215df2d","first_seen":"2026-06-18T09:52:41.240499Z","last_seen":"2026-06-18T09:52:41.240499Z","times_seen":1,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/casino-category-icons/1ELk1XulElAUxXLprvkwIQ0G6UdEYiXVRZ3EMoTF.webp","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.650Z","timestamp":1781776320650,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /casino-category-icons/1ELk1XulElAUxXLprvkwIQ0G6UdEYiXVRZ3EMoTF.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=UWHOakMD72SQZgqT; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg1_=KiUy3QaUqjq5hD4GbiEN; Domain=.gtx-s3.cc; HttpOnly; Path=/; Expires=Fri, 18-Jun-2027 09:52:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 03 Jun 2026 15:31:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4560\r\nlast-modified: Wed, 03 Jun 2026 12:08:26 GMT\r\nx-rgw-object-type: Normal\r\netag: \"f4a504a4dff23d410d7253ee3217ecc9\"\r\nx-amz-request-id: tx00000a11f180afc4d46a3-006a2048df-1a3f8a5ab-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1275617\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4560,"size_decoded":5576,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f4a504a4dff23d410d7253ee3217ecc9","sha1":"aba27ff5b81bfa944811513a8d6f475f06db11e0","sha256":"22d28919b13096a44a1037c5c8c88d94290c6ca2384452e0505703cc0e5b776e","sha512":"c81bd5e7a22281533f53d99439ebc2dd1e5a03f6729d6aee2e017d7496e48e15dd8fa9756208b8ffb9c2ccd6a38c53954b6e83aec4b713f0428a695084ec802e","ssdeep":"96:/GbnmHxhPgC7SmtbvUUb5NmFrnElljQ56Hfn:8mRh5MB0Q58","tlshash":"1991af26cf3734d23a71ba31253650672918d711383e0a6dfe7d7e9b5adc11a1c0259d","first_seen":"2026-06-04T08:51:57.550098Z","last_seen":"2026-06-22T13:10:27.563772Z","times_seen":4,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":20,"send":0,"wait":87,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/D7YbqZWX.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:01.426Z","timestamp":1781776321426,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/D7YbqZWX.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/_nuxt/g5hXAoCh.js\r\nCookie: __ddg8_=cpfEi9pxq0EAyDea; __ddg10_=1781776321; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=pRidfxcaA9LKZgKk; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg10_=1781776321; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-cb\"\r\nexpires: Fri, 18 Jun 2027 09:52:01 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":203,"size_decoded":890,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"c5e8a2d9c3683ea02f1ba9723006fd85","sha1":"57c550a74c1a1b4b9f8546dd3fea98e561f72a50","sha256":"e2fe12ae907b2709ceb2d33c871071198e95de9cc39fa9765ed61e5088eb42aa","sha512":"bd72c066b5f4c19700fbb975b1f39dded61b2951d4669f383162319e9bd9e101560addb083a8d39efdebacecebdd1acfd9ba41b9330fb0a0fc03f2528c3fba8b","ssdeep":"","tlshash":"01d0c791f55af2534284127540349912765ddac4334d3162e5442658b8d9cd5906e157","first_seen":"2026-04-29T18:04:07.354858Z","last_seen":"2026-06-26T20:23:29.836017Z","times_seen":35,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/B_XhNwg4.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.911Z","timestamp":1781776322911,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/B_XhNwg4.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=hVLy9d1VRpQt5gNW; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\n__ddg10_=1781776322; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-121\"\r\nexpires: Fri, 18 Jun 2027 09:52:02 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":289,"size_decoded":913,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"f6ace1159a5e92532ae5a402323e394b","sha1":"b5f196b8b722eac83d6e0d4e026a157c041c2017","sha256":"8772fbc1abf96936670bbf82f7b7455e8c80612f4b29a5efdde8a607d082cb50","sha512":"57b62ea578f43fb22e2359672fa4fe13498503cecf2fa85fbd8db6762b76e3b46009d7a5ba4e207a55e1acc64ed54087bc8af0a7e66a58878c4c5d2998f761e3","ssdeep":"","tlshash":"f0d0c2e2c41110a2c9b03c24f19a0f42032b3d40f144e1b873fc1882fee24a9a8be8b5","first_seen":"2026-02-04T12:10:15.452687Z","last_seen":"2026-07-06T16:03:04.153256Z","times_seen":78,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/Ce3_cP9H.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.916Z","timestamp":1781776322916,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/Ce3_cP9H.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=eyGrNMrVbGltNcnr; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\n__ddg10_=1781776322; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:02 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-234\"\r\nexpires: Fri, 18 Jun 2027 09:52:02 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":564,"size_decoded":1081,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (563)","md5":"07b8886d881aa6af45d950a6c4142243","sha1":"32f362ca01999e196c8d804997571f1e784edb19","sha256":"133bc5b4b66d6ffd3191317d610216a4632c4be43ded1a9ba52f0c24a0887944","sha512":"94807f9b19f6048e705b88b058a51b6ce8587445330045cfed2650399d03a6a6bf0e8180f38022faf9d59e9dda6198ad848ec6058bad36227cdc7037d825817a","ssdeep":"","tlshash":"a6f0e1ac90d601f693d20afcc4138310c32c1809f40d6ed6d1d6afa7f256297c7b6a4a","first_seen":"2026-06-18T09:52:41.243708Z","last_seen":"2026-06-18T09:52:41.243708Z","times_seen":1,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/D-u_6vg4.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.946Z","timestamp":1781776322946,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/D-u_6vg4.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=161TezloHQVOaUnv; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-532\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1330,"size_decoded":1455,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1329)","md5":"5347c4f635816286ee2d5b2a496ffdf1","sha1":"e467e0d9ec89a8daa3ac7bfdd9d5dc36f495b8d0","sha256":"772cf6517c5a0f482059e8b7890a7c9f4e02efa352ab93a990c9e7bc1077b894","sha512":"20807a17bcef2016e7b980960e585d34740c006a2589a4b688a0dfb4b99207ea84a41a5571571dd50516f00e37b431902a35418030123ead9c019c8102ac6d3a","ssdeep":"","tlshash":"e421429ab441ed7341ab0ed288f104d2d28c2b6de57854d062d6407f224f428e69bf53","first_seen":"2026-06-18T09:52:41.244645Z","last_seen":"2026-06-18T09:52:41.244645Z","times_seen":1,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":131,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/CKxy-Ea6.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.147Z","timestamp":1781776324147,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/CKxy-Ea6.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=0wDXFa0WR6KUl3WX; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.cc/casino-category-icons/jw3UGfSPtwcGoowoRV0tUKWfhARAIcOxU4daDQ05.webp","fqdn":"getxavatars1.gtx-s3.cc","domain":"gtx-s3.cc","tld":"cc"},"ip":{"addr":"91.215.43.59","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:00.642Z","timestamp":1781776320642,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 09:26:16 GMT","end":"Sun, 16 Aug 2026 09:26:15 GMT"},"fingerprint":{"sha1":"7C:DC:2A:23:7D:24:15:8B:E9:7D:89:64:6D:F1:05:C7:99:C8:98:D7","sha256":"64:56:5F:38:86:E3:A0:F5:8F:B2:2A:A5:1B:B9:BC:22:57:0C:F4:E6:41:42:4E:77:12:98:4E:68:6F:A1:4D:BB"}}},"request":{"raw":"GET /casino-category-icons/jw3UGfSPtwcGoowoRV0tUKWfhARAIcOxU4daDQ05.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gwfj18x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=KgDjK8dWSVGh8vVW; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg10_=1781776320; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg9_=195.64.118.152; Domain=.gtx-s3.cc; Path=/; Expires=Thu, 18-Jun-2026 10:12:00 GMT\n__ddg1_=QFvfuf5zZDCUbZKMXbUF; Domain=.gtx-s3.cc; HttpOnly; Path=/; Expires=Fri, 18-Jun-2027 09:52:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 03 Jun 2026 15:31:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2076\r\nlast-modified: Wed, 03 Jun 2026 12:08:36 GMT\r\nx-rgw-object-type: Normal\r\netag: \"99322acb976610381565eff2cba89d9c\"\r\nx-amz-request-id: tx000005d292f0480f84af4-006a2048df-1a4096603-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1275617\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2076,"size_decoded":3092,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"99322acb976610381565eff2cba89d9c","sha1":"23e71b6a42958c08cb8631d0a75f72eff252c321","sha256":"24c228743a2f9bfe0cb70f32e4348f799efd8a003d8018e9eb82444a0a1389db","sha512":"20e5d4902fdf36a449cd662497abe3d1f0a953e26b7b66d7ffd3cc96de4b8ea31de5f51058eaf38e36726ead8cb42f511596d74f25ce2bed6a7b5669e340dbf8","ssdeep":"","tlshash":"59412ccd4f712376483c4ab0f787f54b862365ab31c51c6f8079a388ec2b9b4a624566","first_seen":"2026-06-04T08:51:57.378852Z","last_seen":"2026-06-22T13:10:27.562387Z","times_seen":4,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":21,"send":0,"wait":89,"receive":5,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/Loading.mbvd_Qiq.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.944Z","timestamp":1781776322944,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/Loading.mbvd_Qiq.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=efzvh9d5I9VwGwZO; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-ee\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":238,"size_decoded":866,"mime_type":"text/css","magic":"ASCII text","md5":"b9d897185d334432e100e657a2d16042","sha1":"022ac43d83197c286f706af7330d1f698ca5127b","sha256":"09e3516bf3df84f5e63b0edc3dbd6cd3100d22d3a5213dcd55d470001f44dbc1","sha512":"6a1e9bf6dccb31e0a016e7e6d3c5dc094de8174c58b47a5ecf90155dd4eb3da243ff32bfeeb5bca3887171c508d856f431cfe6becc838c15698f11f323e158f5","ssdeep":"","tlshash":"bbd0a7d486440e539b630a3744cd0d19c8b40ec2857a1c1eb39adb9a0249268277fe2b","first_seen":"2026-06-03T11:08:15.223461Z","last_seen":"2026-07-06T16:03:04.170036Z","times_seen":8,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":131,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/ByadrAD5.js","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:02.952Z","timestamp":1781776322952,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/ByadrAD5.js HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=syo0x09Gq1ihlbEn; __ddg10_=1781776322; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=true; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=zezljAgFvjWCzU2z; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3290be-1a4fe\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":107774,"size_decoded":31973,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cc9bd4553800b51d6957ce6eebbd75b1","sha1":"76921f1d0981b5744be4e0045020cddbcfa04bb2","sha256":"2e3d8d9d6286f4b91da8fbf810d3dbe617b742fc7ee7d0714d670627f17a7973","sha512":"b2311fc9ab2a37b98a961bef0d68348dd530720d7998ad3e190c2c79041a168dfe49e5fcd2b50ceacec8eb26bebb451f2e75b53ed030fc8d9afa51d0de009bc7","ssdeep":"1536:Y3nqlXTsQiJnZf0KnVvGgPOq7CXCqZwQKiuScBlxvHbUrXeWkHXiA6wwX/HtR6m7:Y3qlXTsQdgPfCZZV5z/VR8qH3Wg","tlshash":"b4b30989a224b57642fb5ada83b5820172b04884b409d4e8b0fd8d7f557e95803bfffd","first_seen":"2026-06-18T09:52:41.246955Z","last_seen":"2026-06-18T09:52:41.246955Z","times_seen":1,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":193,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://gs.jdwqqi.site/socket.io/?token=\u0026EIO=4\u0026transport=websocket","fqdn":"gs.jdwqqi.site","domain":"jdwqqi.site","tld":"site"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:03.495Z","timestamp":1781776323495,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /socket.io/?token=\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: gs.jdwqqi.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://gwfj18x.life\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 0EPM+7DQ1ZwRYgvBVcxasA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/Index.CKudP8xt.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"186.2.165.69","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:03.884Z","timestamp":1781776323884,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwfj18x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 15:41:39 GMT","end":"Wed, 12 Aug 2026 15:41:38 GMT"},"fingerprint":{"sha1":"B5:01:5D:4A:A1:72:A8:3A:3B:A7:FD:46:C1:48:2C:17:CD:D1:F9:2A","sha256":"09:05:FA:C4:67:C8:E6:00:15:B3:88:C3:A1:15:25:37:A0:99:37:0A:CB:34:0C:9B:0F:4C:5A:71:4C:AB:4E:4C"}}},"request":{"raw":"GET /_nuxt/Index.CKudP8xt.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026no_sso=1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=rhGZmYlzQlW71vhJ; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=kG1ogiL66uGpc4zh; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg10_=1781776323; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\n__ddg9_=195.64.118.152; Domain=.gwfj18x.life; Path=/; Expires=Thu, 18-Jun-2026 10:12:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 18 Jun 2026 09:52:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 12:19:10 GMT\r\netag: W/\"6a3290be-13d\"\r\nexpires: Fri, 18 Jun 2027 09:52:03 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":317,"size_decoded":881,"mime_type":"text/css","magic":"ASCII text, with very long lines (316)","md5":"9a5e805226ae4d50b4d10938251213d1","sha1":"33a587add3fbb96202b280397dc69e3ce122313e","sha256":"8d903bc26ec63bca4d49c3a3f574f35eec9fa4cb88f8e1cde8b7bfdedbc39bed","sha512":"a701fff7cd88c72e06085e1cca29e1df169ad01c5736920b4c9e664cec5f9ef7553be09f4e702db47cd9e0883c76ed40b26ea724362a6d3390b22628aa4a82d6","ssdeep":"","tlshash":"05e086212c4d501cd4afed3573045e9c0758560fab5f099e083d926c68e7b44206b464","first_seen":"2026-05-26T01:50:54.060823Z","last_seen":"2026-06-26T20:23:29.832351Z","times_seen":10,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwfj18x.life/_nuxt/index.CVdKpBmO.css","fqdn":"gwfj18x.life","domain":"gwfj18x.life","tld":"life"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwfj18x.life/?track_id=uPjMQYnNqaeVvsMoEacN5\u0026subH=CxhObugPLJ9uhDSkucRCNtSrT6RvI5jy\u0026no_sso=1","date":"2026-06-18T09:52:04.106Z","timestamp":1781776324106,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/index.CVdKpBmO.css HTTP/1.1\r\nHost: gwfj18x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gwfj18x.life/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __ddg8_=0wDXFa0WR6KUl3WX; __ddg10_=1781776323; __ddg9_=195.64.118.152; __ddg1_=LExzitxp34VSiVjdkhLh; i18n_redirected=en; ssoRedirected=true; ssoSessionId=uPjMQYnNqaeVvsMoEacN5; userVersion=195.64.118.152; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; isSidebarExpanded=false; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJiZjdkNmY5NC03ZjMxLTQ3OTgtODg2My04MjQwMGZiYWRmY2MlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzgxNzc2MzIyMzg5JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc4MTc3NjMyMjUzMSUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; feature_scope_id=guest_2c6bec11-e716-47a8-acbc-551eceda9d4f; uv_vid=4822%3A73b57895-84e7-431e-94fc-349866b1ca04; visitorTracked=true\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"gwfj18x.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}